Showing Flow Debug Statistics; Acl Logging Troubleshooting Scenarios; Troubleshooting A Syslog Server Configuration - Cisco Nexus 1000V Troubleshooting Manual

Chapter 15 ACLs
S e n d d o c u m e n t c o m m e n t s t o n e x u s 1 k - d o c f e e d b a c k @ c i s c o . c o m .

Showing Flow Debug Statistics

You can show ACL debug statistics.
To display internal ACL flow statistics, enter the following command:
vemcmd show aclflows dbgstats
To clear all internal ACL flow debug statistics, enter the following command:
vemcmd clear aclflows dbgstats

ACL Logging Troubleshooting Scenarios

This section describes situations that you might encounter when you are using ACL logging.

Troubleshooting a Syslog Server Configuration

If syslog messages are not being sent from the VEM, you can check the syslog server configuration and
check if ACL logging is configured by entering the commands shown in the following procedure.
BEFORE YOU BEGIN
Before beginning this procedure, you must know or do the following:
•
SUMMARY STEPS
1.
2.
3.
PROCEDURE
Command
Step 1
show logging ip access-list status
Example
n1000v # show logging ip
access-list status
n1000v #
Step 2
vemcmd show acllog config
Example:
n1000v# vemcmd show acllog config
n1000v #
Step 3
vemcmd show aclflows dbgstats
Example:
n1000v# vemcmd show aclflows
dbgstats
n1000v #
OL-28795-01
You are logged in to the VSM and VEM CLI.
show logging ip access-list status
vemcmd show acllog config
vemcmd show aclflows dbgstats
Description
Verifies that the remote syslog server is configured
properly.
Verifies ACL logging on the VEM.
Checks to see if any errors occurred.
Cisco Nexus 1000V Troubleshooting Guide, Release 4.2(1)SV2(2.1)
Troubleshooting ACL Logging
15-5