Chapter 8 L3Sec; Troubleshooting L3Sec - Cisco Nexus 1000V Troubleshooting Manual

L3Sec
This chapter describes how to secure the internal control plane communications (Control and Packet
traffic) of Nexus 1000V in a more robust way than in previous releases. It operates only in Layer 3
Control mode.
•

Troubleshooting L3Sec

The following are symptoms, possible causes and solutions identified while troubleshooting L3Sec.
Symptom
Table 8-1 Troubleshooting L3Sec
Possible Causes
SVS connection is not up.
Key mismatch between VSM /
VEM.
Boot variables are not set.
OL-31593-01
Troubleshooting L3Sec, page 8-1
Solution
1. Verify SVS connection.
Show svs connection
If the connection is "not connected", do connect
2.
Verify key fields mismatch between switch opaque data and vem.
1.
Do, show vms internal info dvs and check the keys present.
2.
On vem, perform "vemcmd show sod" and check if the fields chunk1, chunk2 and
3.
chunk3 are matching.
If mismatches, disable and enable l3sec again using "[no] enable l3sec" under
4.
svs-domain.
Verify running config.
1.
Show running config
If "enable l3sec" is present under svs-domain.
2.
If not present, do "enable l3sec" and check for any error messages and perform action
3.
accordingly.
C H A P T E R
Cisco Nexus 1000V Troubleshooting Guide, Release 5.2(1)SV3(1.1)
8
8-1