Vm Cannot Ping A Secured Port - Cisco Nexus 1000V Troubleshooting Manual

Chapter 9 Ports

VM Cannot Ping a Secured Port

Possible Cause
The vEthernet interface is
not up.
Drop on Source Miss
(DSM) is set.
New MAC addresses
cannot be learned by this
port.
The packet VLAN is not
allowed on the port.
The packet VLAN is not
allowed on the upstream
switch port.
OL-31593-01
Solution
Verify the state of the vEthernet interface.
1.
show interface vethernet number
If the interface is down, enable it.
2.
shut
no shut
1. Verify the port security configuration.
module vem 3 execute vemcmd show portsec stats
If DSM is set, clear the DSM bit on the VSM.
2.
no port-security stop learning
Identify the packet VLAN ID.
1.
show svs domain
Verify that the packet VLAN is allowed on VEM uplink ports.
2.
show port-profile na uplink-all
If the packet VLAN is not allowed on the uplink port profile, add it
3.
to the allowed VLAN list.
1. Identify the upstream neighbors connected to the interface.
show cdp neighbors
Log in to the upstream switch and verify that the packet VLAN is
2.
allowed on the port.
show running-config interface gigabitEthernet slot/port
If the packet VLAN is not allowed on the port, add it to the allowed
3.
VLAN list.
Cisco Nexus 1000V Troubleshooting Guide, Release 5.2(1)SV3(1.1)
Problems with Ports
9-7