cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1191
Views
0
Helpful
3
Replies

Reachability issues from APIC to servers.

subashchandran
Level 1
Level 1

Hi All,

APIC---------L3_SW----------ASA_FW-----------VPN----Remote end

1.1.1.x-------------2.2.2.x

allowed all subnets in the ASA crypto map.

++able to ping 1.1.1.1 to 2.2.2.1 and 2 IP

++.3 and .4 IP are not pinging from IP

I am not geeting any Pckts in ASA in the capture.

How to check in the APIC, the Pckt is going out from APIC NIC.

Thks 

Subash

3 Replies 3

Zach Seils
Level 7
Level 7

Hi Subash,

Are you trying to reach the oobmgmt interface of the APIC? If so, you can check the APIC interface configuration and statistics using normal Linux commands.  For example:

admin@apic1:~> ip a show oobmgmt
8: oobmgmt: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP
link/ether f8:c2:88:ad:34:f6 brd ff:ff:ff:ff:ff:ff
inet 10.122.141.109/27 brd 10.122.141.127 scope global oobmgmt
inet6 fe80::fac2:88ff:fead:34f6/64 scope link
valid_lft forever preferred_lft forever
admin@apic1:~>
admin@apic1:~> netstat -Ioobmgmt
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
oobmgmt 1500 0 18532654 0 0 0 11956865 0 0 0 BMRU
admin@apic1:~>

Regards,
Zach

Hi Zach,

Can you please share some tcpdump commands for troubleshooting.

If you are looking for ICMP packets on the oobmgmt interface, you can use:

admin@apic1:~> tethereal -i oobmgmt icmp

Regards,
Zach

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Save 25% on Day-2 Operations Add-On License