Problems With Ip Source Guard; Collecting And Evaluating Logs; Vsm Logging - Cisco Nexus 1000V Troubleshooting Manual

Chapter 20 DHCP, DAI, and IPSG

Problems with IP Source Guard

The following are symptoms, possible causes, and solutions for problems with IP Source Guard.
Symptom Possible Causes
Traffic disruptions ARP inspection is not configured on the VSM. On the VSM, verify that IP Source Guard is
The IP address that corresponds to the
vEthernet interface is not in the snooping
binding table.

Collecting and Evaluating Logs

You can use the commands in this section from the VSM to collect and view logs related to DHCP, DAI,
and IP Source Guard.
•
•

VSM Logging

You can use the commands in this section from the VSM to collect and view logs related to DHCP, DAI,
and IP Source Guard.
VSM Command
debug dhcp all
debug dhcp cdm-errors
debug dhcp cdm-events
debug dhcp errors
debug dhcp mts-errors
debug dhcp mts-events
debug dhcp pkt-events
OL-31593-01
VSM Logging, page 20-5
Host Logging, page 20-6
Solution
configured as expected.
show port-profile name profile_name
show running interface if_ID
show ip verify source
For detailed information about configuring IP Source
Guard, see the Cisco Nexus 1000V Security
Configuration Guide
On the VSM, display the binding table.
1.
show ip dhcp snooping binding
Configure the missing static entry or renew the
2.
lease on the VM.
On the VSM, display the binding table again to
3.
verify that the entry is added correctly.
show ip dhcp snooping binding
Description
Enables debug all for dhcp configuration flags
Enables debugging of cdm errors
Enables debugging of cdm events
Enables debugging of errors
Enables debugging of mts errors
Enables debugging of mts events
Enables debugging of pkt events
Cisco Nexus 1000V Troubleshooting Guide, Release 5.2(1)SV3(1.1)

Problems with IP Source Guard

20-5