Viewing Internal Networks on MHO-200 - mhons

Use this command to show information about internal networks of an Orchestrator in your Maestro environment:

  1. Connect to the command line on any Orchestrator in your Maestro environment.
  2. Log in to the Expert mode.
  3. Go to the Orchestrator "MHO" namespace shell: 
    mhons
  4. Run the relevant Linux commands:

    • ip <parameters>

    • ping <parameters>

    • etc.

    To exit the mhons shell and go back to the previous shell, run: exit

    Example commands:

    Information

    CLI Syntax

    Show IP addresses of all interfaces

    ip -o addr show

    Show all routes

    ip route

    Test connectivity with a Peer Orchestrator over the Internal Sync network

    ping <IP Address of Internal Sync Port on Peer Orchestrator>

    Show information about the Internal Sync tunnel (VNI, VTEP, UDP port)

    ip -d link show mho-<Remote-Site>-<Member>-esync

    Show information about Orchestrator authentication - ESP SAs and SPIs for each peer

    ip xfrm state

    Show information about Orchestrator authentication - ICMP-bypass / ESP-required policies

    ip xfrm policy

    Capture an encapsulated frame on the wire

    tcpdump -e -vv -ni mho-<ID of Remote Site>-<ID of Remote Member>-bond udp port 4789

    Confirm the next-hop monitor is running

    systemctl is-active mho_nexthop_monitor