Cisco Nexus 1000V

To Next Page

To Previous Page

8-2

Cisco Nexus 1000V Troubleshooting Guide, Release 5.2(1)SV3(1.1)

OL-31593-01

Chapter 8 L3Sec

Troubleshooting L3Sec

Main Page

Default Chapter3
- Table of Contents3
New and Changed Information13
Preface17
- Audience17
Chapter 1 Overview21
- Troubleshooting Process21
- Best Practices21
- Troubleshooting Basics22
- Overview of Symptoms24
- System Messages24
  - System Message Text24
  - Syslog Server Implementation25
- Troubleshooting with Logs26
  - Viewing Logs26
- Cisco Support Communities27
- Contacting Cisco or Vmware Customer Support27
- Commands29
Troubleshooting Tools29
- Traceroute30
- Monitoring Processes and Cpus30
  - Identifying the Running Processes and Their States30
Chapter 2 Troubleshooting Tool30
- Displaying CPU Utilization31
- Displaying CPU and Memory Information32
- Radius32
- Syslog33
Chapter 3 Installation35
- Isolating Installation Problems35
  - Verifying Your Vmware License Version35
  - Host Is Not Visible from the Distributed Virtual Switch36
Isolating Installation Problems36
- Refreshing the Vcenter Server Connection37
Improving Performance on the ESX and VM38
Verifying the Domain Configuration38
Verifying the Port Group Assignments for a VSM VM Virtual Interface38
Verifying VSM and Vcenter Server Connectivity39
Troubleshooting Connections to Vcenter Server39
Recovering the Network Administrator Password40
Managing Extension Keys40
- Known Extension Problems and Resolutions41
- Resolving a Plug-In Conflict41
- Finding the Extension Key on the Cisco Nexus 1000V41
- Finding the Extension Key Tied to a Specific DVS42
- Verifying Extension Keys42
Recreating the Cisco Nexus 1000V Installation44
- Removing Hosts from the Cisco Nexus 1000V DVS45
- Removing the Cisco Nexus 1000V from the Vcenter Server45
- Unregistering the Extension Key in the Vcenter Server46
Problems with the Cisco Nexus 1000V Installation Management Center48
Chapter 4 Licenses49
- Information about Licenses49
  - Contents of the License File50
- Prerequisites to License Troubleshooting50
- Problems with Licenses51
- License Troubleshooting Commands52
Chapter 5 Upgrades57
- Information about Upgrades57
- Problems with the In-Service Software Upgrade57
- Problems with the VEM Upgrade61
- Problems with the GUI Upgrade62
  - Recovering a Secondary VSM with Active Primary63
  - Recovering a Primary VSM with Active Secondary68
- Problems with VSM-VEM Layer 2 to 3 Conversion Tool72
- Upgrade Troubleshooting Commands73
Chapter 6 High Availability77
- Information about High Availability77
  - System-Level High Availability78
  - Network-Level High Availability78
- Problems with High Availability78
- High Availability Troubleshooting Commands81
- Troubleshooting a Module Not Coming up on the VSM87
- Information about Modules87
  - Guidelines for Troubleshooting Modules88
Chapter 7 VSM and VEM Module88
- Flowchart for Troubleshooting Modules89
Problems with the VSM90
- Verifying the VSM Is Connected to Vcenter Server92
- Verifying the VSM Is Configured Correctly93
- Checking the Vcenter Server Configuration96
- Checking Network Connectivity between the VSM and the VEM96
Chapter 8 L3Sec111
- Troubleshooting L3Sec111
Ports113
- Information about Ports113
Chapter 9 Port114
- Port Diagnostic Checklist115
- Problems with Ports116
- Cannot Enable an Interface116
- Port Link Failure or Port Not Connected116
- Link Flapping117
- Port Errdisabled118
- VM Cannot Ping a Secured Port119
- Port Security Violations120
- Port State Is Blocked on a VEM121
  - Port Troubleshooting Commands121
Chapter 10 Port Profiles131
- Information about Port Profiles131
- Problems with Port Profiles132
  - Recovering a Quarantined Offline Interface134
- Port Profile Logs135
- Port Profile Troubleshooting Commands135
Information about Port Channels and Trunking145
- Port Channel Overview145
- Port Channel Restriction146
- Trunking Overview146
Chapter 11 Port Channel and Trunking146
Initial Troubleshooting Checklist146
Troubleshooting Asymmetric Port Channels147
Cannot Create Port Channel148
Newly Added Interface Does Not Come Online in a Port Channel148
- Forcing Port Channel Characteristics Onto an Interface148
- Verifying a Port Channel Configuration149
VLAN Traffic Does Not Traverse Trunk149
- Information about Layer 2 Ethernet Switching151
- Port Model151
  - Viewing Ports from the VEM152
Chapter 12 Layer 2 Switching152
- Viewing Ports from the VSM153
- Port Types154
- Layer 2 Switching Problems154
- Layer 2 Switching Troubleshooting Commands157
- Troubleshooting Microsoft NLB Unicast Mode162
- Troubleshooting BPDU Guard164
  - BPDU Guard Troubleshooting Commands164
Chapter 13 Vlans167
- Information about Vlans167
- Initial Troubleshooting Checklist168
- Cannot Create a VLAN169
Chapter 14 Private Vlans171
- Information about Private Vlans171
- Troubleshooting Guidelines172
- Private VLAN Troubleshooting Commands172
Chapter 15 Netflow175
- Information about Netflow175
- Netflow Troubleshooting Commands175
- Common Netflow Problems176
  - Debugging a Policy Verification Error177
  - Debugging Statistics Export177
Chapter 16 Acls179
- Information about Access Control Lists179
- ACL Configuration Limits179
- ACL Restrictions180
- ACL Troubleshooting Commands180
- Displaying ACL Policies on the VEM180
- Debugging Policy Verification Issues181
- Troubleshooting ACL Logging181
  - Using the CLI to Troubleshoot ACL Logging on a VEM182
  - ACL Logging Troubleshooting Scenarios183
Chapter 17 Quality of Service187
- Information about Quality of Service187
- Qos Configuration Limits187
- Qos Troubleshooting Commands188
- Troubleshooting the VEM189
- Debugging Policy Configuration Errors190
- Debugging Policy Verification Failures191
- Debugging Policing Configuration Errors192
Chapter 18 SPAN193
- Information about SPAN193
  - SPAN Session Guidelines193
- Problems with SPAN194
- SPAN Troubleshooting Commands195
Chapter 19 Multicast IGMP197
- Information about Multicast197
  - Multicast IGMP Snooping197
- Problems with Multicast IGMP Snooping198
- Information about DHCP Snooping207
Chapter 20 DHCP, DAI, and IPSG208
Information about Dynamic ARP Inspection208
Information about IP Source Guard208
Guidelines and Limitations for Troubleshooting208
Problems with DHCP Snooping209
Troubleshooting Dropped ARP Responses210
Problems with IP Source Guard211
Collecting and Evaluating Logs211
- VSM Logging211
- Host Logging212
DHCP, DAI, and IPSG Troubleshooting Commands212
Chapter 21 Storm Control217
- Information about Storm Control217
- Troubleshooting Storm Control217
Chapter 22 System220
General Restrictions for Vcenter Server220
- Extension Key220
Recovering a DVS220
- Recovering a DVS with a Saved Copy of the VSM221
- Recovering a DVS Without a Saved Copy of the VSM222
Problems Related to VSM and Vcenter Server Connectivity223
Connection Failure after ESX Reboot224
- Setting the System MTU225
- Recovering Lost Connectivity Due to MTU Mismatch226
VSM Creation227
Port Profiles227
- Problems with Port Profiles228
Problems with Hosts228
Problems with VM Traffic228
VEM Troubleshooting Commands229
VEM Log Commands230
Error Messages230
Chapter 23 Before Contacting Technical Support233
- Cisco Support Communities233
- Gathering Information for Technical Support233
- Obtaining a File of Core Memory Information234
- Copying Files235
Chapter 24 Network Segmentation Manager237
- Information about Network Segmentation Manager237
- Problems with Network Segmentation Manager238
- Network Segmentation Manager Troubleshooting Commands243
Vxlans245
- Information about Vxlans245
Chapter 25 VXLAN246
- VXLAN Trunks247
- VXLAN Border Gateway Protocol Control Plane247
- Multi-MAC Capability252
- Fragmentation252
- Scalability252
- Supported Features253
- VXLAN Troubleshooting Commands253
  - VXLAN Gateway Commands255
- VEM Packet Path Debugging260
- VEM Multicast Debugging261
- VXLAN Data Path Debugging262
  - Vemlog Debugging262
- Vempkt263
  - Statistics264
  - Show Commands264
Chapter 26 VSI Discovery and Configuration Protocol265
- Information about VDP265
- Problems with VDP266
- VDP Troubleshooting Commands266
  - VSM Commands266
  - VEM Commands266
Chapter 27 Cisco Trustsec271
- Information about Cisco Trustsec271
- Cisco Trustsec Troubleshooting Commands271
- Problems with Cisco Trustsec275
Chapter 28 Vcenter Plug-In277
- Information about Vcenter Plug-In277
- Prerequisites for Vmware Vsphere Web Client277
- Generating a Log Bundle278
Chapter 29 Ethanalyzer279
- Using Ethanalyzer279

Cisco Nexus 1000V - Page 112

Table of Contents

Other manuals for Cisco Nexus 1000V

Related product manuals