Cisco Nexus 1000V User Manual

20-5
Cisco Nexus 1000V Troubleshooting Guide, Release 5.2(1)SV3(1.1)
OL-31593-01
Chapter 20 DHCP, DAI, and IPSG
Problems with IP Source Guard
Problems with IP Source Guard
The following are symptoms, possible causes, and solutions for problems with IP Source Guard.
Collecting and Evaluating Logs
You can use the commands in this section from the VSM to collect and view logs related to DHCP, DAI,
and IP Source Guard.
• VSM Logging, page 20-5
• Host Logging, page 20-6
VSM Logging
You can use the commands in this section from the VSM to collect and view logs related to DHCP, DAI,
and IP Source Guard.
Symptom Possible Causes Solution
Traffic disruptions ARP inspection is not configured on the VSM. On the VSM, verify that IP Source Guard is
configured as expected.
show port-profile name profile_name
show running interface if_ID
show ip verify source
For detailed information about configuring IP Source
Guard, see the Cisco Nexus 1000V Security
Configuration Guide
The IP address that corresponds to the
vEthernet interface is not in the snooping
binding table.
1. On the VSM, display the binding table.
show ip dhcp snooping binding
2. Configure the missing static entry or renew the
lease on the VM.
3. On the VSM, display the binding table again to
verify that the entry is added correctly.
show ip dhcp snooping binding
VSM Command Description
debug dhcp all Enables debug all for dhcp configuration flags
debug dhcp cdm-errors Enables debugging of cdm errors
debug dhcp cdm-events Enables debugging of cdm events
debug dhcp errors Enables debugging of errors
debug dhcp mts-errors Enables debugging of mts errors
debug dhcp mts-events Enables debugging of mts events
debug dhcp pkt-events Enables debugging of pkt events

Cisco Nexus 1000V Specifications

General

Type	Virtual Switch
Manageable	Yes
NetFlow	Yes
SPAN	Yes
ERSPAN	Yes
Operating System	Cisco NX-OS
Form Factor	Virtual
Hypervisor Support	VMware ESXi
Features	VXLAN
Security Features	Port Security, Private VLANs, ACLs