Reachability issues from APIC to servers.

[subashchandran]

Hi All,

APIC---------L3_SW----------ASA_FW-----------VPN----Remote end

1.1.1.x-------------2.2.2.x

allowed all subnets in the ASA crypto map.

++able to ping 1.1.1.1 to 2.2.2.1 and 2 IP

++.3 and .4 IP are not pinging from IP

I am not geeting any Pckts in ASA in the capture.

How to check in the APIC, the Pckt is going out from APIC NIC.

Thks 

Subash

[Zach Seils]

Hi Subash,

Are you trying to reach the oobmgmt interface of the APIC? If so, you can check the APIC interface configuration and statistics using normal Linux commands.  For example:

admin@apic1:~> ip a show oobmgmt
8: oobmgmt: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP 
 link/ether f8:c2:88:ad:34:f6 brd ff:ff:ff:ff:ff:ff
 inet 10.122.141.109/27 brd 10.122.141.127 scope global oobmgmt
 inet6 fe80::fac2:88ff:fead:34f6/64 scope link 
 valid_lft forever preferred_lft forever
admin@apic1:~> 
admin@apic1:~> netstat -Ioobmgmt
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
oobmgmt 1500 0 18532654 0 0 0 11956865 0 0 0 BMRU
admin@apic1:~>

Regards,
Zach

[subashchandran]

Hi Zach,

Can you please share some tcpdump commands for troubleshooting.

[Zach Seils]

If you are looking for ICMP packets on the oobmgmt interface, you can use:

admin@apic1:~> tethereal -i oobmgmt icmp

Regards,
Zach