This utility enables you to run CLI commands on a device from inside the ExtremeCloud
IQ interface to perform basic network connectivity diagnostics, check status, and
diagnose several functions.
-
Select a device to
diagnose.
-
Select Diagnostics.
-
Select one of the following CLI
commands:
- Ping:
Have the selected device ping the IP address of its own mgt0 interface
(default). You can change the target to any IP address, such as the
default gateway, or an address beyond the gateway, such as a DNS
server.
- Show Log:
Displays the event log for the device.
- Show
Version: Displays the version running on the
device.
- Show Running
Config: Displays the configuration running on the
device.
- Show Startup
Config: Displays the configuration used by the device on
reboot.
- Show IP
Routes: Displays the IP routing table.
- Show MAC
Routes: Displays the MAC forwarding table.
- Show ARP
Cache: Displays the ARP cache.
- Show Roaming
Cache: Displays the roaming cache, which contains MAC
addresses and PMKs (pairwise master keys) for wireless clients and MAC
addresses for the authenticating devices. This table also includes the
user profile ID number of the client and details about the PMK.
- Show DNXP
Neighbors: Displays neighboring hive members in the same
or different subnets. This is the equivalent of entering the show amrp dnxp
neighbor command. Hive members use AMRP to support roaming
clients. DNXP is a component of AMRP that supports Layer 3 roaming. Hive
members in different subnets use DNXP to create tunnels on an as-needed
basis between themselves, allowing clients to seamlessly roam between
subnets, while preserving their IP address settings, authentication
state, encryption keys, firewall sessions, and QoS enforcement settings.
Tunnels are not required for clients roaming among members in the same
subnet.
- Show DNXP
Cache: Displays the DNXP cache, which provides
information that the device uses to form an association with a client
that has already associated with a DNXP neighbor and that could possibly
roam to it.
- Show AMRP
Tunnel: Displays information about DNXP, INXP, and VPN
tunnels, including tunnel type, the peer IP address, and how long the
tunnel has been up.
- Show GRE
Tunnel: Displays packet statistics for client traffic
that members send through GRE tunnels between themselves. Extreme
Networks devices use GRE tunnels for DNXP, INXP, and wireless VPN.
- Debug AFC Data
Exchange: Displays raw AFC request and response data
from the AFC server.
- Show Tunnel
Clients: Displays a list of tunnels with their IP
address and a list of MAC addresses, tunneled through the corresponding
GRE tunnel.
- Show IKE
Event: Displays up to 12 recent events during IKE phase
1 and phase 2 negotiations between a VPN client device and VPN server
device.
- Show IKE
SA: Displays the cookies and creation times of SAs
(security associations) established during IKE phase 1 negotiations
between a VPN client and VPN server. If there are no SAs, the
negotiations were either incomplete or unsuccessful. Use this option to
check the log messages for more details.
- Show IPsec
SA: Displays the SAs established during IKE phase 2
negotiations between a VPN client and VPN server.
- Show IPsec
Tunnel: View details about the IPsec tunnel including
the amount of traffic between the VPN client and servers.
- Show CPU:
Displays total, per user, and per system CPU utilization.
- Show
Memory: Displays total, free, used, buffered, and cached
memory.
Note
For Tunnel Concentrator devices, only the following subset of diagnostics
is available:
- Ping
- Show GRE Tunnel
- Show Tunnel Clients
- Show Log
