Configuration Verifiers

MAC Verification (mac_verifier)

You can run verifiers to make sure the configuration is correct and consistent.

Description

Each MAC address contains information about the Site ID, Security Group Member ID, and interfaces.

Use this command to make sure that the virtual MAC addresses on physical and bond interfaces are the same for all Security Group Members.

You must run this command in the Expert mode.

Syntax

mac_verifier -h

mac_verifier [-l] [-v]

Parameters

Parameter

Description

-h

Shows the built-in help.

-l

Shows MAC address consistency on the Active Site.

-v

Shows information for each interface MAC Address.

Examples

[Expert@HostName-ch0x-0x:0]# mac_verifier
--------------------------------------------------------------------------------
Collecting information from SGMs...
--------------------------------------------------------------------------------
Verifying FW1 mac magic value on all SGMs...
Success
--------------------------------------------------------------------------------
Verifying IPV4 and IPV6 kernel values...
Success
--------------------------------------------------------------------------------
Verifying FW1 mac magic value in /etc/smodb.json...
Success
--------------------------------------------------------------------------------
Verifying MAC address on local chassis (Chassis 1)...
Success
--------------------------------------------------------------------------------
[Expert@HostName-ch0x-0x:0]#
 
[Expert@HostName-ch0x-0x:0]# mac_verifier -v
--------------------------------------------------------------------------------
Collecting information from SGMs...
--------------------------------------------------------------------------------
Verifying FW1 mac magic value on all SGMs...
FW1 mac magic value on all SGMs:
Command completed successfully
 
Success
--------------------------------------------------------------------------------
Verifying IPV4 and IPV6 kernel values...
IPV6 is not enabled
Success
--------------------------------------------------------------------------------
Verifying FW1 mac magic value in /etc/smodb.json...
FW1 mac magic value and /etc/smodb.json value are the same (160)
Success
--------------------------------------------------------------------------------
Verifying MAC address on local chassis (Chassis 1)...
-*- 2 blades: 1_01 1_02 -*-
BPEth0      MAC address of BPEth0 is correct
 
-*- 2 blades: 1_01 1_02 -*-
BPEth1      MAC address of BPEth1 is correct
 
-*- 2 blades: 1_01 1_02 -*-
eth1-05 00:1c:7f:81:05:a0
 
-*- 2 blades: 1_01 1_02 -*-
eth1-06 00:1c:7f:81:06:a0
 
-*- 2 blades: 1_01 1_02 -*-
eth1-07 00:1c:7f:81:07:a0
 
                                    ... output was truncated for brevity ...
                                
 
-*- 2 blades: 1_01 1_02 -*-
eth2-64 00:1c:7f:82:40:a0
 
Success
--------------------------------------------------------------------------------
[Expert@HostName-ch0x-0x:0]#

Layer 2 Bridge Verifier (asg_br_verifier, asg_brs_verifier)

Description

Use the "asg_br_verifier" command in Gaia gClish or the Expert mode to confirm that there are no bridge configuration problems in Virtual Systems in the Bridge Mode.

Notes:

  • You must run the "asg_br_verifier" command in the context of the specific Virtual System in the Bridge Mode.

  • This command also confirms that the "fdb_shadow" tables are the same for the Virtual System on different Security Group Members.

  • You can run the "asg_brs_verifier" command in the Expert mode from the context of any Virtual System to get the output for all Virtual Systems in the Bridge Mode.

Syntax for the asg_br_verifier command

asg_br_verifier -h

asg_br_verifier [-c] [-d] [-s] [-t] [-v]

Syntax for the asg_brs_verifier command

asg_brs_verifier -h

asg_brs_verifier [-d] [-s] [-t] [-v]

Parameters

Parameter

Description

-h

Shows the built-in help.

No Parameters

Runs bridge verification on all Virtual Systems.

-c

Also shows the table entries (unformatted output).

-d

Shows verbose unformatted output.

The "-d" and "-v" options are mutually exclusive.

-s

Also shows the table summary.

-t

Also shows the table entries (formatted output).

-v

Shows verbose formatted output.

The "-v" and "-d" options are mutually exclusive.

Examples

[Expert@HostName-ch0x-0x:0]# asg_br_verifier
================================================================================
vs #3
================================================================================
 
Number of entries in fdb_shadow table:
 
-*- 10 blades: 1_01 1_02 1_03 1_04 1_05 2_01 2_02 2_03 2_04 2_05 -*-
11
 
Status: OK
 
================================================================================
[Expert@HostName-ch0x-0x:0]#
 
[Expert@HostName-ch0x-0x:0]# asg_br_verifier -v
================================================================================
vs #3
================================================================================
 
Number of entries in fdb_shadow table:
 
-*- 9 blades: 1_01 1_03 1_04 1_05 2_01 2_02 2_03 2_04 2_05 -*-
11
-*- 1 blade: 1_02 -*-
0
 
 
Status: number of entries is different
 
================================================================================
 
Collecting table info from all SGMs. This may take a while.
 
Table entries in fdb_shadow table:
 
-*- 9 blades: 1_01 1_03 1_04 1_05 2_01 2_02 2_03 2_04 2_05 -*-
address="00:00:00:00:00:00" Interface="eth1-07"
address="00:10:AA:7D:08:81" Interface="eth2-07"
address="00:1E:9B:56:08:81" Interface="eth1-07"
address="00:23:FA:4E:08:81" Interface="eth1-07"
address="00:49:DC:58:08:81" Interface="eth2-07"
address="00:7E:60:77:08:81" Interface="eth1-07"
address="00:80:EA:55:08:81" Interface="eth1-07"
address="00:8D:86:52:08:81" Interface="eth2-07"
address="00:9E:8C:7F:08:81" Interface="eth1-07"
address="00:E5:DB:78:08:81" Interface="eth2-07"
address="00:E5:F7:78:08:81" Interface="eth2-07"
-*- 1 blade: 1_02 -*-
fdb_shadow table is empty
Status: Table entries in fdb_shadow table is different between SGMs
 
================================================================================
[Expert@HostName-ch0x-0x:0]#

Verifying VSX Gateway Configuration (asg vsx_verify)

Description

The "asg vsx_verify" command replaces the old verifier in the "smo verifiers" command and runs on a VSX system only.

Use this command to confirm that all Security Group Members have the same VSX configuration - Interfaces, Routes, and Virtual Systems.

  • The same MD5 of configuration files that must be identical between Security Group Members.

  • Similarity in configuration files that must be identical, but not necessarily written that way (like the /config/active file).

    The command uses the "db_cleanup" report to do this.

  • The same VSX configuration on Security Group Members.

  • Similarity of VMAC and BMAC addresses.

Use output when there is an inconsistency in the configuration.

The differences are compared in two ways:

  • The return value of the command run on the Security Group Members with the "gexec_inner_command"

  • The output of the commands

Example of a difference in the command output:

Difference between blade: 1_01 and blade: 2_01 found.
====================================================
--- 1_01
+++ 2_01
-73b4c20e598d6b495de7515ad4ea2fdc  /opt/CPsuite-R81.20/fw1/conf/fwha_vsx_conf_id.conf
+b21dfa3feab817c3640bbb984346cdf1  /opt/CPsuite-R81.20/fw1/conf/fwha_vsx_conf_id.conf

When a command fails, the output contains:

Command "asg xxx" failed to run on blade "2_01"

Syntax

asg vsx_verify [{-a | -c | -v}]

Parameters

Parameter

Description

-a

Includes Security Group Members in the Administrative DOWN state

-c

Compares:

  • Database configuration between Security Group Members

  • Operating system and database configuration on each Security Group Member

-v

Includes Virtual Systems configuration verification table

Examples

> asg vsx_verify -v
+------------------------------------------------------------------------------+
|Chassis 1 SGMs:                                                               |
|1_01 1_02 1_03                                                                |
+------------------------------------------------------------------------------+
 
+-------------------------------------------------------------------+
|VSX Global Configuration Verification                              |
+------+---------------------------------+------------------+-------+
|SGM   |VSX Configuration Signature      |Virtual Systems   |State  |
|      |VSX Configuration ID             |Installed\Allowed |       |
+------+---------------------------------+------------------+-------+
|all   |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
 
+--------------------------------------------------------------------------+
|Virtual Systems Configuration Verification                                |
+----+-----+-----------+---------------+----------------+---------+--------+
|VS  |SGM  |VS Name    |VS Type        |Policy Name     |SIC State|Status  |
+----+-----+-----------+---------------+----------------+---------+--------+
|0   |all  |VSX_OBJ    |VSX Gateway    |Standard        |Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|1   |all  |VSW-INT    |Virtual Switch |<Default Policy>|Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|2   |all  |VSW-INT    |Virtual Switch |<Not Applicable>|Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|3   |all  |VS-1       |Virtual System |Standard        |Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|4   |all  |VS-2       |Virtual System |Standard        |Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
Comparing Routes DB & OS. This procedure may take some time...
Press 'y' to skip this procedure...
Comparing..
 
+--------------------------------------------------------------------------+
|Summary                                                                   |
+--------------------------------------------------------------------------+
|VSX Configuration Verification completed successfully                     |
+--------------------------------------------------------------------------+
 
All logs collected to /var/log/vsx_verify.1360846320.log
>
 
> asg vsx_verify -v -a
Output
+--------------------------------------------------------------------------+
|Chassis 1 SGMs:                                                           |
|1_01* 1_02 1_03 1_04                                                      |
+--------------------------------------------------------------------------+
 
+-------------------------------------------------------------------+
|VSX Global Configuration Verification                              |
+------+---------------------------------+------------------+-------+
|SGM   |VSX Configuration Signature      |Virtual Systems   |State  |
|      |VSX Configuration ID             |Installed\Allowed |       |
+------+---------------------------------+------------------+-------+
|1_01  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
|1_02  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
|1_03  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
|1_04  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |DOWN   |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
|2_01  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
|2_02  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
|2_03  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
|2_04  |8ef02b3e73386afd6e044c78e466ea82 |5\25              |UP     |
|      |9                                |                  |       |
+------+---------------------------------+------------------+-------+
 
+--------------------------------------------------------------------------+
|Virtual Systems Configuration Verification                                |
+----+-----+-----------+---------------+----------------+---------+--------+
|VS  |SGM  |VS Name    |VS Type        |Policy Name     |SIC State|Status  |
+----+-----+-----------+---------------+----------------+---------+--------+
|0   |all  |VSX_OBJ    |VSX Gateway    |Standard        |Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|1   |all  |VSW-INT    |Virtual Switch |<Default Policy>|Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|2   |all  |VSW-INT    |Virtual Switch |<Not Applicable>|Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|3   |all  |VS-1       |Virtual System |Standard        |Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
|4   |all  |VS-2       |Virtual System |Standard        |Trust    |Success |
+----+-----+-----------+---------------+----------------+---------+--------+
Comparing Routes DB & OS. This procedure may take some time...
Press 'y' to skip this procedure...
Comparing..
 
+--------------------------------------------------------------------------+
|Summary                                                                   |
+--------------------------------------------------------------------------+
|VSX Configuration Verification completed with the following errors:       |
|1. [1_02:1] eth1-06 operating system   address doesn't match              |
|2. [1_02:1] eth1-06 DB address doesn't match                              |
|3. [1_01:1] Found inconsistency between addresses in operating system  ,DB and NCS ofeth1-06 |
|                                                                          |
+--------------------------------------------------------------------------+
All logs collected to /var/log/vsx_verify.1360886320.log
>