To participate in this event, please use the button below to ask your questions
Ask questions from Thursday 17th to Tuesday 22nd of December, 2020
For more information, visit the CLI Analyzer category.
The Packet Capture Tool is supported for the following underlying CLI based tools:
Embedded Packet Capture (both IOS and IOS-XE Routers and Switches)
ASA Packet Capture
CPU Queue Debugging (4500 Switches)
Ethanalyzer (NX-OS Switches)
ELAM (Nexus 7000)
So the short answer is yes the ISR4000 also supports it. Additional details on using it are available here:
The reaching back to Cisco for "System Diagnostics" and other tools leverage HTTPS (TCP/443), and it is an outbound connection (like a web browser would). The only "inbound" connection would be for CLI Session Sharing and the that would likely require some port forwarding, etc. You can see the default port in Settings -> Connections... it is TCP/8090, so if you wanted to have someone external to your firewall connect to a session share hosted internally, you would need to likely open port TCP/8090 and do some additional NAT to forward that port to some host within your network. If two CLI Analyzers are on the same LAN and Layer-3 reachable, then Session Sharing should work fine. During the demo, NIck's laptop and mine were able to reach one another through Cisco's network so we didn't need to open any firewall rules/ports on the devices between us.
The access is granted on a per-session basis. So During the demo Magnus only had access to the ASA that he was grated access to. If I wanted to grant access to the other devices in the demo we would have done that on a device by device basis by clicking first on the "Session Sharing" icon in the top right, and then clicking on "Share Session" and then sharing the ip address and Session Key. The individual joining the share then clicks on "New Session" and changes it from SSH to "Shared" and inputs these details.
Additional details about Session Sharing are available in the CLI Analyzer by clicking on:
Feature Guide -> 3.1.0 Features -> Session Sharing
Hope that helps
You can enable "Session Sharing" on a per device basis once you yourself have connected to it. In the upper right of the client, you will see this icon:
That will enable that session to be shared... If you don't see that option... check the Setting -> Connections to ensure "Session Sharing" is enabled.
Thanks for your question. Right now there is no way to analyze multiple 'show tech' outputs through a single interface. We will make a note of your request as a possible future enhancement.
There is a new tool that is a possibility for what you are asking, called CX Cloud that you may want to look into:
Hope that help,
The external API's that are leverage by the CLI Analyzer are not exposed for direct usage outside of the tool itself. If you are looking to analyze multiple devices at once you might want to look at the "Connected TAC" covered here:
It goes over the the concept of "My Diagnostic Bridge" which is a separate VM installed on your network that enables multiple diagnostic scans on a scheduled or on demand basis across multiple devices.