Travelling Techie

Adventures in VMware

User Tools

Site Tools


Sidebar

Tags

Recent Changes

About The Author

Brandon Neill is a VMware Certified Instructor and Consultant. He specializes in NSX and vRealize Automation. In addition to teaching Official VMware Classes, he provides contract training and consulting services.

troubleshooting_nsx

Troubleshooting NSX

It's a little old now, but this troubleshooting guide is a great resource, and was the initial refernce material that I used.

Troubleshooting Tools

Central CLI

The Central CLI was introduced in NSX 6.2, and it allows for you to run most commands from NSX Manager, without having to log on to the individual ESXi hosts or controllers to gather information. See the NSX Command Line Interface Reference (6.3) To Retrieve basic information about NSX Components

# show controller list all
# show cluster all
# show cluster cluster-id
# show logical-switch list all
# show logical-router list all
# show edge all

Controllers

From Central CLI

Show controller list all

From Controller

Controller Cluster Information

# show control-cluster status
# show control-cluster startup-nodes
# show control-cluster roles
# show control-cluster connections

Controller Network Information

# show network interface
# show network default-gateway
# show network dns-servers
# show network ntp-servers
# show network ntp-status

Controller Troubleshooting Commands

# traceroute <ip_address>
# ping <ip address>
# ping interface addr <alternate_src_ip> <ip_address>
# watch network interface breth0 traffic

Logical Switches

From Central CLI

From Controller

To view VNI information and TCP connections to hosts

# show control-cluster logical-switches vni <vni>
# show control-cluster logical-switches connection-table 5001

To view per-VNI tables

# show control-cluster logical-switches vtep-table 5001
# show control-cluster logical-switches mac-table 5001
# show control-cluster logical-switches arp-table 5001

From ESXi Shell

# esxcli network vswitch dvs vmware vxlan list
# esxcli network vswitch dvs vmware vxlan network list --vds-name=<VDS_ID>
# esxcli network vswitch dvs vmware vxlan network mac list --vds-name=<VDS_ID> --vxlan-id=<VNI>
# esxcli network vswitch dvs vmware vxlan network arp list --vds-name=<VDS_ID> --vxlan-id=<VNI>
# esxcli network vswitch dvs vmware vxlan network vtep list --vds-name=<VDS_ID> --vxlan-id=<VNI>
# esxcli network vswitch dvs vmware vxlan network port list --vds-name=<VDS_ID> --vxlan-id=<VNI>
# esxcli network vswitch dvs vmware vxlan network stats list --vds-name=<VDS_ID> --vxlan-id=<VNI>

Logical Routers

From Central CLI

From Controller

List Logical Routers, intefaces, and routes.

# show control-cluster logical-routers instance all
# show control-cluster logical-routers interface-summary <LR-ID>
# show control-cluster logical-routers interface <LR-ID> <Interface ID>
# show control-cluster logical-routers routes <LR-ID>

ESXi Shell

To list the DLR Instances, LIFs, Routing table, ARP information and Designated Instance

# net-vdr --instance -l
# net-vdr --lif -l <VDR_NAME>
# net-vdr -R -l <VDR_NAME>
# net-vdr --nbr -l <VDR_NAME>
# net-vdr --di —stats

Bridging

Central CLI

ESXi Host

To List bridge instances and learned MACs

# net-vdr --bridge -l <VDR_NAME>
# net-vdr -b --mac <VDR_NAME>

ESG Services

From Central CLI



From ESG Console

General

# show system memory
# show service network connections
# show system network stats

Troubleshooting

# traceroute

Load balancer

# show service loadbalancer 
# show service loadbalancer error
# show service loadbalancer monitor
# show service loadbalancer pool
# show service loadbalancer session
# show service loadbalancer table
# show service loadbalancer virtual
# show service monitor
# show service monitor service

L2 VPN

# show configuration l2vpn
# show service l2vpn
# show service l2vpn bridge
# show service l2vpn conversion table
# show service l2vpn trunk-table

Distributed Firewall

From ESXi Shell

# summarize-dvfilter
# vsipioctl getfilters
# vsipioctl getrules -f <FILTER_NAME>
# vsipioctl getaddrsets -f <FILTER_NAME>

ESXi Hosts

From Central CLI

From ESXi Shell

Verify VIB Installation

# esxcli software vib get --vibname esx-vxlan
# esxcli software vib get --vibname esx-vsip
# esxcli software vib get --vibname esx-dvfilter-switch-security

Controller Connectivity

# net-vdl2 -l
# esxcli network ip connection list| grep tcp | grep 1234

Packet Captures

From Controller

From ESG

From ESXi Host

troubleshooting_nsx.txt · Last modified: 2017/10/12 13:36 by brandon