{"id":1362,"date":"2021-10-30T01:23:00","date_gmt":"2021-10-30T08:23:00","guid":{"rendered":"https:\/\/jmcristobal.com\/?p=1362"},"modified":"2022-03-23T17:23:29","modified_gmt":"2022-03-24T00:23:29","slug":"cisco-aci-cli-commands-apic-leaf-spine","status":"publish","type":"post","link":"http:\/\/ec2-52-7-70-250.compute-1.amazonaws.com\/es\/2021\/10\/30\/cisco-aci-cli-commands-apic-leaf-spine\/","title":{"rendered":"Cisco ACI CLI Commands (APIC, Leaf\/Spine)"},"content":{"rendered":"

Connect to Leaf from APIC<\/span><\/strong>
bash
attach [node-name]

ssh user@[node-name]\n\n\n\n

Endpoint, EPG, BD form APIC<\/span><\/strong>
<show ip interface bridge-domai<\/strong>n [name_bd<\/em>]>
<show epg <\/strong>[epg-name] <\/em>[detail]<\/strong>><\/p>\n\n\n\n

Ping from Leaf<\/span><\/strong>
iping [-dDFLnqRrv] [-V vrf] [-c count] [-i wait] [-p pattern] [-s packetsize] [-t timeout] [-S source ip\/interface] host<\/p>\n\n\n\n

VPC\/PC from APIC<\/span><\/strong>
show vpc map <\/strong>[VPC-Name]<\/em>
show port-channel map<\/strong> [VPC-Name]<\/em><\/p>\n\n\n\n

VPC\/PC from Leaf<\/span><\/strong>
show vpc extended
show port-channel extended
show lacp [counters | interface] ethernet <\/strong>[slot\/number<\/em>]
<\/p>\n\n\n\n

VMware from APIC<\/span><\/strong>
show vmware domain name<\/strong> <VMM-Name><\/em>
show vmware vm [name | ip | mac]<\/strong> <vm-name | ip-address | mac-address><\/em>
attach-avs<\/strong> <OpflexDevid><\/em>
attach-<\/strong>eve <OpflexDevid><\/em><\/p>\n\n\n\n

Clustering User Commands<\/span><\/strong>
<controller><\/strong> – shows the current cluster size and state of APICs
<cd \/aci\/system\/controllers\/1\/cluster> <moset administrative-cluster-size (#)> <moconfig commit><\/strong>– changes the size of the cluster
<controller -d -t (ID)><\/strong> – Decommissions the APIC of the given ID
<eraseconfig setup><\/strong> – Factory resets APIC and after reboot will load into setup script
<reload [controller|switch] (nodeID)><\/strong> – Reboots the APIC of the given ID
<acidiag rvread><\/strong> – shows replica which are not healthy
<acidiag rvread (svc) (shard) (replica)><\/strong> – shows the state of one replica
<avread><\/strong> – large output which will show cluster size, chassisID, if node is active, and summary of replica health
<acidiag fnvread><\/strong> – shows fabric node vector
<acidiag avread><\/strong> – shows appliance vector
<acidiag verifyapic><\/strong> – verifies APIC hardware
<acidiag reboot><\/strong> – Reload APIC
<ip link><\/strong> – shows link status
<cat \/proc\/net\/bonding\/(ID)><\/strong> – shows the status of bond link
<show dhcp internal info client><\/strong> – shows dhcp client information to confirm dhcp address from APIC
<fabricnode (nodeID) [commission|decommission|wipeout]><\/strong> – commissions, decommissions, or wipes out given node. wipeout will<\/strong> completely wipeout the node including configuration. Use sparingly.<\/p>\n\n\n\n

SSL Troubleshooting<\/span><\/strong>
<openssl s_client -connect (IP):12151> <\/strong>– tries to connect ssl between APIC and Node and gives output of SSL information
<zgrep SSL svc_ifc_appliancedirector.bin.log*><\/strong> -shows logging of DME-logs for node
<zgrep SSL svc_ifc_policyelem.log*><\/strong> – shows policy-element logs for SSL connectivity
Can also check logs in the \/var\/log\/dme\/log directory<\/p>\n\n\n\n

Switch Cert Verification<\/span><\/strong>
<openssl asn1parse < \/securedata\/ssl\/server.crt><\/strong> – Next to PRINTABLESTRING, it will list Insieme or Cisco Manufacturing CA. Cisco means new secure certs are installed, Insieme means old unsecure are installed
<openssl x509 -noout -issuer -subject -dates -in \/securedata\/ssl\/server.crt> –<\/strong> Shows start and end dates of certificate. Must be within range for APIC to accept 
<act_util key_pair show (#)> –<\/strong> Shows keypairs of specified cert<\/p>\n\n\n\n

Switch Diagnostics<\/span><\/strong>
<\/span><show module internal event-history module (#)><\/strong> – shows bootup tests and diagnostics of given module
<show diagnostic content module (ID)><\/strong> – shows ongoing tests of given module
<show diagnostic result module [all|(moduleID)]><\/strong> – shows diagnostic result of given module or all modules
<show diagnostic result module (moduleID) test (testID) detail><\/strong> – shows diagnostic result of given test on given module
<show diagnostic internal [diagmgr|diagclient|port_lb]><\/strong> – show debug information for the diagnostic modules<\/p>\n\n\n\n

Debug Commands<\/span><\/strong>
<debug platform internal emon [heartbeat|kfsm|stats|traffic]><\/strong> – shows debug output of given argument
<debug platform internal emon [heartbeat|kfsm|stats|traffic] [enable|disable]><\/strong> – enables\/disables given argument on all modules
<debug platform internal emon [heartbeat|kfsm|stats|traffic] interval get><\/strong> – gets the interval of given argument
<debug platform internal emon stats get (ID)><\/strong> – EPC mon statistics
<debug platform internal emon kfsm state get (ID)><\/strong> – EPC mon statistics
<debug platform internal marvell switch [0|1] status><\/strong> – EOBC\/EPC switch status (0: EOBC, 1: EPC)
<debug platform internal broadcom switch status><\/strong> – SC card broadcom switch status<\/p>\n\n\n\n

<\/p>\n\n\n\n

Insieme ELTM VRF, VLAN, Interface Commands<\/span><\/strong>
<debug system internal [eltm|eltmc] trace output file><\/strong> – dumps ELTM trace to output file
<show system internal [eltm|eltmc] info trace><\/strong> – dumps eltm trace to console
<show system internal [eltm|eltmc] info vrf (vrf)><\/strong> – shows vrf table of given vrf
<show platform internal ns forwarding segments><\/strong> – 
<show platform internal ns forwarding epgs><\/strong> – 
<cat summary><\/strong> – vrf summary, shows ID, pcTag, scope
<show system internal eltmc info vlan brief><\/strong> – shows vlan information. Can substitute (brief) for a vlan ID
<show sytem internal eltmc info interface (interface ID)><\/strong> –<\/p>\n\n\n\n

OSPF CLI Commands<\/span><\/strong>
<show ip ospf neighbors vrf (vrf|all)><\/strong> – shows OSPF neighbors of given vrf
<show ip ospf route vrf (vrf|all)><\/strong> – shows OSPF routes of given vrf
<show ip ospf interface vrf (vrf|all)><\/strong> – shows ospf interfaces of given vrf
<show ip ospf vrf (vrf|all)><\/strong> – shows ospf information of given vrf
<show ip ospf traffic vrf (vrf|all)><\/strong> – shows ospf traffic of given vrf<\/p>\n\n\n\n

External Connectivity<\/span><\/strong>
<show ip arp vrf (vrf)><\/strong> – shows arp entries for given vrf
<show ip ospf neighbors vrf (vrf)><\/strong> – shows ospf neighbors for given vrf
<show bgp sessions vrf (vrf)><\/strong> – shows bgp sessions\/peers for given vrf
<show ip ospf route vrf (vrf)><\/strong> – shows ospf routes for given vrf
<show bgp ipv4 unicast vrf (vrf)><\/strong> – shows bgp unicast routes for given vrf
<show ip static-route vrf (vrf)><\/strong> – shows static routes for given vrf
<show ip route vrf (vrf)><\/strong> – shows routes for given vrf
<l3 defip show><\/strong> – shows external LPMs
<l3 egress show><\/strong> – shows next hops towards NorthStar ASIC or external router
<show platform internal ns table mth_lux_slvd_DHS_HigigDstMapTable_memif_data ingress><\/strong> – HigigDstMapTable Indexed using DMOD\/DPORT coming from T2. Provides a pointer to DstEncapTable. 
<show platform internal ns table mth_lux_slvg_DHS_DstEncapTable_memif_data ingress><\/strong> – DstEncapTable Indexed using the HigigDstMapTable\u2019s result. Gives tunnel forwarding data.
<show platform internal ns table mth_rwx_slva_DHS_RwEncapTable_memif_data ingress><\/strong> – RwEncapTable Indexed using the HigigDstMapTable\u2019s result. Gives tunnel encap data.<\/p>\n\n\n\n

ISIS Fabric Unicast Debugging<\/span><\/strong>
<show isis protocol><\/strong> – shows ISIS statistics
<show isis adjacency [detail] vrf (vrf)><\/strong> – shows ISIS adjacencies for given vrf. Can also add detail
<show lldp neighbor><\/strong> – shows lldp neigbor status
<show interface (interface ID)><\/strong> – shows interface status information and statistics
<show isis database [detail] vrf (vrf)><\/strong> – shows isis database, can also add detail
<show isis route vrf (vrf)><\/strong> – shows isis route information
<show isis traffic vrf (vrf)><\/strong> – shows isis traffic information
<show isis dtep vrf (vrf)><\/strong> – shows all discovered tunnel end points
<show isis statistics (vrf)><\/strong> – shows isis statistics of given vrf
<show isis event-history [detail]><\/strong> – shows isis event history
<show isis internal mem-stats [detail]><\/strong> – shows isis memory statistics
<show tech-support-service isis><\/strong> – provides isis tech-support output for TAC<\/p>\n\n\n\n

ASIC Platform Commands<\/span><\/strong>
<show platform internal [ns|alp] mac asic [0|1]><\/strong> – shows the MAC port status
<show platform internal [ns|alp] counters mac asic [0|1]><\/strong> – shows the MAC port counters
<show platform internal [ns|alp] counters asic-block [all|bax|lbx|lux|prx|qsx|rwx|scx|top]><\/strong> – shows ASIC block counters for given ASIC. Can also add [detail] for more details
<show platform internal [ns|alp] interrupts><\/strong> – shows interrupts for given ASIC<\/p>\n\n\n\n

ASIC Platform Commands – T2 Specific<\/span><\/strong>
<show c rpkt><\/strong> – shows receive counters for T2
<show c tpkt><\/strong> – shows transmit counters for T2
<show c xe12><\/strong> – shows per port packet type counters
<g chg ing_event_debug><\/strong> – shows ingress drop counters
<g chg_egr_drop_vector><\/strong> – shows egress drop counters
<s RDBGC(#)_SELECT bitmap=(hex)> & <g chg RDBGC(#)_SELECT><\/strong> – setting register to specific trigger. 9 registers per port (0-8)
<s RDBGC3_SELECT bitmap=0x2000> <g chg RDBGC3_SELECT><\/strong> – sets 4th register to select RFILDR selector (bit 13)
<cstat xe17><\/strong> – checking the stats for above command<\/p>\n\n\n\n

ASIC Platform Commands – NS Specific<\/span><\/strong>
<show platform internal counters port><\/strong> – shows port counters
<show platform internal counters port internal><\/strong> – shows internal port counters
<show platform internal counters vlan><\/strong> – shows vlan counters
<show platform internal counters tep><\/strong> – shows per-tunnel counters
<show platform internal ns counters asic-block all><\/strong> – shows ASIC block counters
<show platform internal ns forwarding list><\/strong> – shows well-defined tables<\/p>\n\n\n\n

Fabric Multicast – General<\/span><\/strong>
<\/span><show isis internal mcast routes ftag><\/strong> – shows currecnt state of FTAG, cost, root port, OIF list
<show isis database mgroup detail vrf (vrf)><\/strong> – shows GM-LSP database
<show isis internal mcast routes gipo><\/strong> – shows GIPO routes, Local\/transit, OIF list
<show isis internal mcast statistics><\/strong> – shows topology and compute stats, MRIB update stats, Sync+Ack packet stats, Object store stats
<show isis event-history mcast><\/strong> – shows isis multicast event history logs
<show isis event-history mcast-convergence><\/strong> – more detailed than above command, specifically dealing with forwarding events and forwarding updates<\/p>\n\n\n\n

Fabric Multicast Debugging – MFDM<\/span>
<\/span><show forwarding distribution l2 multicast><\/strong> – flood\/OMF\/GIPi membership
<show forwarding distribution l2 multicast vlan (vlanID)><\/strong> per BD
<show forwarding distribution l2 multicast flood><\/strong> – flood membership
<show forwarding distribution l2 multicast flood vlan (vlan ID)><\/strong> – per BD
<show forwarding distribution l2 multicast omf><\/strong> – OMF membership
<show forwarding distribution l2 multicast omf vlan (vlan ID)><\/strong> – per BD
<show system internal forwarding distribution multicast ipmc><\/strong> – IPMC membership 
<show system internal forwarding distribution multicast ipmc 0x3><\/strong> – specific IPMC
<show forwarding distribution multicast ipmc-sw><\/strong>
<show forwarding distribution multicast ipmc-sw (ID)><\/strong><\/p>\n\n\n\n

Fabric Multicast Debugging – L2 Multicast<\/span><\/strong>
<show system internal forwarding l2 multicast><\/strong> – flood\/OMF\/GIPi membership
<show system internal forwarding l2 multicast vlan (vlanID)><\/strong> – per BD
<show system internal forwarding l2 multicast gipi><\/strong> – GIPi membership
<show system internal forwarding l2 multicast gipi (IP)><\/strong> – specific
<show system internal forwarding l2 multicast gipi vlan (vlanID)><\/strong> – per BD
<show system internal forwarding l2 multicast gipi (IP) vlan (vlanID)><\/strong> – specific per BD
<show system internal forwarding l2 multicast flood><\/strong> – flood membership
<show system internal forwarding l2 multicast flood bd (bdID)><\/strong> – per BD
<show system internal forwarding l2 multicast met><\/strong> – MET membership
<show system internal forwarding l2 multicast met (ID)><\/strong> – specific MET
<show system internal forwarding l2 multicast met flood><\/strong> – flood MET
<show system internal forwarding l2 multicast met gipi><\/strong> – GIPi MET
<show system internal forwarding l2 multicast met gipi bd (bdID)><\/strong> – per BD
<show system internal forwarding l2 multicast met gipi (IP) bd (bdID)><\/strong> – specific per BD
<show system internal forwarding l2 multicast ipmc><\/strong> – IPMC membership
<show system internal forwarding l2 multicast ipmc (ID)><\/strong> – specific IPMC<\/p>\n\n\n\n

<\/p>\n\n\n\n