Cisco ASR 9000 Series Routing Configuration Manual page 699

Implementing Data Plane Security
SUMMARY STEPS
1. show lisp session
2. show lisp site [ instance-id EID instance-ID ]rloc members [ registrations [ rloc-addr]]
3. show lisp vrf vrf_name session [peer_address]
4. show lisp decapsulation filter
5. show cef vrf [locator-vrf] address_family lisp decapsulation [ instance-id EID-instance-ID ] detail
location RLOC-facing LC
6. show controllers np struct LISP-INSTANCE-HASH detail all-entries [ all | np ] location RLOC-facing
LC
DETAILED STEPS
Command or Action
Step 1 show lisp session
Example:
R11-MSMR#show lisp session
Sessions for VRF default, total: 8, established: 7
Peer
2001:DB8:A:1::2
2001:DB8:A:2::2
2001:DB8:A:3::2
2001:DB8:B:1::2
2001:DB8:B:2::2
2001:DB8:C:1::2
2001:DB8:C:2::2
2001:DB8:E:F::2
R11-MSMR#
Step 2 show lisp site [ instance-id EID instance-ID ]rloc members [ registrations
[ rloc-addr]]
Example:
R114-MSMR#show lisp site rloc members
LISP RLOC membership for EID table default (IID 0), 5 entries
RLOC
1.2.3.4
10.0.1.2
10.0.2.2
13:12::1
2001:DB8:2:3::2
Step 3 show lisp vrf vrf_name session [peer_address]
State Up/Down
Up 00:04:13
Up 00:04:13
Up 00:03:53
Up 00:04:04
Init never
Up 00:03:55
Up 00:03:54
Up 00:04:04
Origin
config
registration
config & registration
config
registration
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
Verify Data Plane Security Configurations
Purpose
On a LISP device, to display a current list of
reliable transport (TCP) sessions, use the show
lisp session command in the EXEC
configuration mode. In this example, reliable
transport LISP sessions are displayed on the
Map-Server. In the output, seven sessions are
In/Out Users
2/7 2 established and one session is in the Init state
2/7 2
(the decapsulation filter rloc source member
2/7 2
command had not been applied at that site; the
2/6 2
0/0 1
session was not established).
2/6 2
2/6 2
6/19 4
To display the gleaned and configured EID
instance membership use the show lisp site
command in the EXEC configuration mode.
The 'origin' column in the output shows
whether the RLOC member has been manually
configured, automatically gleaned from
received registrations, or both. The 'valid'
Valid
Yes column shows whether the RLOC is a valid
Yes
member that is distributed to (P)xTRs. A listed
Yes
RLOC may not be valid if it is gleaned from
Yes
Yes
registrations, but the 'override' option is used
in the 'modify-discovered' configuration and
the specified locator-set does not include the
RLOC. When the optional 'registrations'
keyword is specified the command displays
the list of registrations contributing to a
membership entry.
669