Cisco 9134 - MDS Multilayer Fabric Switch Troubleshooting Manual page 458

IPsec Issues
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Issue the show interface gigabitethernet command on both switches. Verify that the interfaces are up
Step 1
and their IP addresses are correct. Issue the no shutdown command if necessary. The command outputs
follow:
MDSA# show interface gigabitethernet 7/1
GigabitEthernet7/1 is up
Hardware is GigabitEthernet, address is 0005.3001.804e
MTU 1500 bytes
Port mode is IPS
Speed is 1 Gbps
Beacon is turned off
Auto-Negotiation is turned on
5 minutes input rate 7728 bits/sec, 966 bytes/sec, 8 frames/sec
5 minutes output rate 7968 bits/sec, 996 bytes/sec, 8 frames/sec
7175 packets input, 816924 bytes
7285 packets output, 840018 bytes, 0 underruns
MDSC# show interface gigabitethernet 1/2
GigabitEthernet1/2 is up
Hardware is GigabitEthernet, address is 0005.3001.7f0f
MTU 1500 bytes
Port mode is IPS
Speed is 1 Gbps
Beacon is turned off
Auto-Negotiation is turned on
5 minutes input rate 7528 bits/sec, 941 bytes/sec, 8 frames/sec
5 minutes output rate 7288 bits/sec, 911 bytes/sec, 8 frames/sec
7209 packets input, 835518 bytes
7301 packets output, 827630 bytes, 0 underruns
Step 2 Issue the show interface fcip command on both switches. Verify that each interface is using the correct
profile, the peer internet addresses are configured correctly, and the FCIP tunnels are compatible. Issue
the no shutdown command if necessary. The command outputs follow:
MDSA# show interface fcip 1
fcip1 is trunking
Hardware is GigabitEthernet
Port WWN is 21:90:00:0d:ec:02:64:80
Peer port WWN is 20:14:00:0d:ec:08:5f:c0
Admin port mode is auto, trunk mode is on
Port mode is TE
Port vsan is 1
Speed is 1 Gbps
Trunk vsans (admin allowed and active) (1,100,200,302-303,999,3001-3060)
Trunk vsans (up)
Trunk vsans (isolated)
Trunk vsans (initializing)
Write acceleration mode is off
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
22-10
Internet address is 10.10.100.231/24
0 multicast frames, 0 compressed
0 input errors, 0 frame, 0 overrun 0 fifo
0 output errors, 0 collisions, 0 fifo
0 carrier errors
Internet address is 10.10.100.232/24
0 multicast frames, 0 compressed
0 input errors, 0 frame, 0 overrun 0 fifo
0 output errors, 0 collisions, 0 fifo
0 carrier errors
Using Profile id 1 (interface GigabitEthernet7/1)
Peer Information
Peer Internet address is 10.10.100.232 and port is 3225
FCIP tunnel is protected by IPSec
Chapter 22
(1)
(100,200,302-303,999,3001-3060)
()
Troubleshooting IPsec
OL-9285-05