Cisco Nexus 1000V User Manual

16-4
Cisco Nexus 1000V Troubleshooting Guide, Release 5.2(1)SV3(1.1)
OL-31593-01
Chapter 16 ACLs
Troubleshooting ACL Logging
• ACL Logging Troubleshooting Scenarios, page 16-5
Using the CLI to Troubleshoot ACL Logging on a VEM
The commands in this section will help you to troubleshoot ACL logging by examining ACL flows.
Viewing Current Flows
You can troubleshoot ACL logging by viewing the current flows on a VEM.
vemcmd show aclflows stats
EXAMPLE
The following example shows how to troubleshoot ACL logging:
[root@esx /]# vemcmd show aclflows stats
Current Flow stats:
Permit Flows: 1647
Deny Flows: 0
Current New Flows: 419 --- current new flows yet to be reported.
Viewing Active Flows
You can display all the active flows on a VEM.
vemcmd show aclflows [permit | deny]
If you do not specify permit or deny, the command displays both.
EXAMPLE
The following example shows how to display all the active flows on a VEM:
[root@esx /]# vemcmd show aclflows [permit | deny]
If SrcIP DstIP SrcPort DstPort Proto Direction Action Stats
Veth4 192.168.1.20 192.168.1.10 5345 8080 6 Ingress permit 1
Veth4 192.168.1.10 192.168.1.20 8080 5769 6 Egress permit 1
Veth4 192.168.1.20 192.168.1.10 6256 8080 6 Ingress permit 1
Veth4 192.168.1.10 192.168.1.20 8080 5801 6 Egress permit 1
Veth4 192.168.1.20 192.168.1.10 5217 8080 6 Ingress permit 1
Veth4 192.168.1.10 192.168.1.20 8080 57211 6 Egress permit 1
Veth4 192.168.1.10 192.168.1.20 8080 5865 6 Egress permit 1
Veth4 192.168.1.10 192.168.1.20 8080 5833 6 Egress permit 1
Veth4 192.168.1.20 192.168.1.10 5601 8080 6 Ingress permit 1
Veth4 192.168.1.10 192.168.1.20 8080 5705 6 Egress permit 1
Veth4 192.168.1.10 192.168.1.20 8080 5737 6 Egress permit 1
Veth4 192.168.1.20 192.168.1.10 5473 8080 6 Ingress permit 1
Veth4 192.168.1.20 192.168.1.10 57211 8080 6 Ingress permit 1
Flushing All ACL Flows
You can use the vemcmd flush aclflows command to detect any new flows that affect the VEM. Clear
all the existing flows, and then you can detect new flows that match any expected traffic. Syslog
messages are not sent when you do this action.

Cisco Nexus 1000V Specifications

General

Type	Virtual Switch
Manageable	Yes
NetFlow	Yes
SPAN	Yes
ERSPAN	Yes
Operating System	Cisco NX-OS
Form Factor	Virtual
Hypervisor Support	VMware ESXi
Features	VXLAN
Security Features	Port Security, Private VLANs, ACLs