11-16-2015 08:26 AM - edited 03-01-2019 04:53 AM
Hi All,
APIC---------L3_SW----------ASA_FW-----------VPN----Remote end
1.1.1.x-------------2.2.2.x
allowed all subnets in the ASA crypto map.
++able to ping 1.1.1.1 to 2.2.2.1 and 2 IP
++.3 and .4 IP are not pinging from IP
I am not geeting any Pckts in ASA in the capture.
How to check in the APIC, the Pckt is going out from APIC NIC.
Thks
Subash
11-16-2015 10:05 AM
Hi Subash,
Are you trying to reach the oobmgmt interface of the APIC? If so, you can check the APIC interface configuration and statistics using normal Linux commands. For example:
admin@apic1:~> ip a show oobmgmt
8: oobmgmt: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP
link/ether f8:c2:88:ad:34:f6 brd ff:ff:ff:ff:ff:ff
inet 10.122.141.109/27 brd 10.122.141.127 scope global oobmgmt
inet6 fe80::fac2:88ff:fead:34f6/64 scope link
valid_lft forever preferred_lft forever
admin@apic1:~>
admin@apic1:~> netstat -Ioobmgmt
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
oobmgmt 1500 0 18532654 0 0 0 11956865 0 0 0 BMRU
admin@apic1:~>
Regards,
Zach
11-16-2015 10:04 PM
Hi Zach,
Can you please share some tcpdump commands for troubleshooting.
11-17-2015 05:52 AM
If you are looking for ICMP packets on the oobmgmt interface, you can use:
admin@apic1:~> tethereal -i oobmgmt icmp
Regards,
Zach
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: