Device Diagnostics

This utility enables you to run CLI commands on a device from inside the ExtremeCloud IQ interface to perform basic network connectivity diagnostics, check status, and diagnose several functions.

  1. Select a device to diagnose.
  2. Select Diagnostics.
  3. Select one of the following CLI commands:
    • Ping: Have the selected device ping the IP address of its own mgt0 interface (default). You can change the target to any IP address, such as the default gateway, or an address beyond the gateway, such as a DNS server.
    • Show Log: Displays the event log for the device.
    • Show Version: Displays the version running on the device.
    • Show Running Config: Displays the configuration running on the device.
    • Show Startup Config: Displays the configuration used by the device on reboot.
    • Show IP Routes: Displays the IP routing table.
    • Show MAC Routes: Displays the MAC forwarding table.
    • Show ARP Cache: Displays the ARP cache.
    • Show Roaming Cache: Displays the roaming cache, which contains MAC addresses and PMKs (pairwise master keys) for wireless clients and MAC addresses for the authenticating devices. This table also includes the user profile ID number of the client and details about the PMK.
    • Show DNXP Neighbors: Displays neighboring hive members in the same or different subnets. This is the equivalent of entering the show amrp dnxp neighbor command. Hive members use AMRP to support roaming clients. DNXP is a component of AMRP that supports Layer 3 roaming. Hive members in different subnets use DNXP to create tunnels on an as-needed basis between themselves, allowing clients to seamlessly roam between subnets, while preserving their IP address settings, authentication state, encryption keys, firewall sessions, and QoS enforcement settings. Tunnels are not required for clients roaming among members in the same subnet.
    • Show DNXP Cache: Displays the DNXP cache, which provides information that the device uses to form an association with a client that has already associated with a DNXP neighbor and that could possibly roam to it.
    • Show AMRP Tunnel: Displays information about DNXP, INXP, and VPN tunnels, including tunnel type, the peer IP address, and how long the tunnel has been up.
    • Show GRE Tunnel: Displays packet statistics for client traffic that members send through GRE tunnels between themselves. Extreme Networks devices use GRE tunnels for DNXP, INXP, and wireless VPN.
    • Debug AFC Data Exchange: Displays raw AFC request and response data from the AFC server.
    • Show Tunnel Clients: Displays a list of tunnels with their IP address and a list of MAC addresses, tunneled through the corresponding GRE tunnel.
    • Show IKE Event: Displays up to 12 recent events during IKE phase 1 and phase 2 negotiations between a VPN client device and VPN server device.
    • Show IKE SA: Displays the cookies and creation times of SAs (security associations) established during IKE phase 1 negotiations between a VPN client and VPN server. If there are no SAs, the negotiations were either incomplete or unsuccessful. Use this option to check the log messages for more details.
    • Show IPsec SA: Displays the SAs established during IKE phase 2 negotiations between a VPN client and VPN server.
    • Show IPsec Tunnel: View details about the IPsec tunnel including the amount of traffic between the VPN client and servers.
    • Show CPU: Displays total, per user, and per system CPU utilization.
    • Show Memory: Displays total, free, used, buffered, and cached memory.
    Note

    Note

    For Tunnel Concentrator devices, only the following subset of diagnostics is available:
    • Ping
    • Show GRE Tunnel
    • Show Tunnel Clients
    • Show Log