Troubleshooting A Mismatched Configuration Between A Vsm And A Vem - Cisco Nexus 1000V Troubleshooting Manual

Chapter 15 ACLs
S e n d d o c u m e n t c o m m e n t s t o n e x u s 1 k - d o c f e e d b a c k @ c i s c o . c o m .
2.
3.
PROCEDURE
Command
Step 1
show logging ip access-list status
Example:
n1000v # show logging ip access-list status
n1000v #
Step 2
vemcmd show acllog config
Example:
n1000v # vemcmd show acllog config
n1000v #
Step 3 logging ip access-list cache max-deny-
flows <num>
Example:
n1000v # logging ip access-list cache
max-deny- flows <num>
n1000v #

Troubleshooting a Mismatched Configuration between a VSM and a VEM

If syslog messages are not being sent and the flow information counters are invalid, the configuration
between a VSM and a VEM might be mismatched. Enter the commands shown in this procedure.
Modify any mismatched configurations using the appropriate configuration command. If the problem
persists, enable acllog debugging on both VSM and the VEM and retry the commands.
BEFORE YOU BEGIN
Before beginning this procedure, you must know or do the following:
•
SUMMARY STEPS
1.
2.
OL-28795-01
vemcmd show acllog config
logging ip access-list cache max-deny- flows <num>
You are logged in to the CLI in EXEC mode.
show logging ip access-list status
vemcmd show acllog config
Description
Verifies that ACL logging is configured properly.
Verifies ACL logging on the VEM.
Increases maximum flows to the desired value.
Cisco Nexus 1000V Troubleshooting Guide, Release 4.2(1)SV2(2.1)
Troubleshooting ACL Logging
15-7