Cisco Virtual Security Gateway for Microsoft Hyper-V Command Reference Guide, Release 5.2(1)VSG1(4.1)

Cisco Nexus 1000V Series Switch Commands

This chapter provides information about the Cisco Virtual Security Gateway (VSG) related commands on the Cisco Nexus 1000V Series switch and the Cisco Cloud Services Platform networking appliance.

capability l3-vservice

To configure a port profile to be used with l3-vn-service, use the capability l3-vservice command. To remove the capability from a port profile, use the no form of this command.

capability l3-vservice

no capability l3-vservice

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

port-profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to configure a port profile to be used with l3-vservice:

n1000v# config t

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# capability l3-vservice

This example shows how to remove the l3-vservice configuration from the port profile:

n1000v# config t

n1000v(config)# port-profile testprofile

n1000v(config-port-prof)# no capability l3-vservice

Related Commands


Command	Description
show port-profile	Displays information about the port profiles.

clear vservice connection

To clear the Cisco vservice connections, use the clear vservice connection command.

clear vservice connection [module module-num]

Syntax Description


module	(Optional) Clears a specific module.
module-num	Module number. The range is from 3 to 66.

Defaults

None

Command Modes

EXEC

Global configuration (config)

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to clear Cisco VSG connections:

vsm# clear vservice connection

Related Commands


Command	Description
show vservice	Displays Cisco VSG information.

clear vservice statistics

To clear the Cisco vservice statistics, use the clear vservice statistics command.

clear vservice statistics [module module-number | ip <ip-address>]

Syntax Description


module	(Optional) Clears a module.
module-number	Module number. The range is from 3 to 66.
ip	IP address.
ip-address	IP address.

Defaults

None

Command Modes

EXEC

Global configuration (config)

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to clear Cisco VSG vservice statistics for existing modules:

vsm# clear vservice statistics

Cleared statistics successfully in module 4

Cleared statistics successfully in module 6

Related Commands


Command	Description
show vservice	Displays Cisco VSG information.

copy running-config startup-config

To copy the running configuration to the startup configuration, use the copy running-config startup-config command.

copy running-config startup-config

Syntax Description

This command has no arguments or keywords.

Defaults

None

Command Modes

Any command mode

Supported User Roles

network-admin
network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

Use this command to save configuration changes in the running configuration to the startup configuration in persistent memory. When a device reload or switchover occurs, the saved configuration is applied.

Examples

This example shows how to save the running configuration to the startup configuration:

vsm# copy running-config startup-config

[########################################] 100%

Related Commands


Command	Description
show running-config	Displays the running configuration.
show running-config diff	Displays the differences between the running configuration and the startup configuration.
show startup-config	Displays the startup configuration.
write erase	Erases the startup configuration in the persistent memory.

log-level

To set logging severity levels for the Cisco Virtual Network Management Center (VNMC) policy agent, use the log-level command. To reset logging levels, use the no form of this command.

log-level {critical | debug0 | debug1 | debug2 | debug3 | debug4 | info | major | minor | warn}

no {critical | debug0 | debug1 | debug2 | debug3 | debug4 | info | major | minor | warn}

Syntax Description


critical	Sets the logging level to critical.
debug0	Sets the logging level to debug 0.
debug1	Sets the logging level to debug 1.
debug2	Sets the logging level to debug 2.
debug3	Sets the logging level to debug 3.
debug4	Sets the logging level to debug 4.
info	Sets the logging level to information.
major	Sets the logging level to major.
minor	Sets the logging level to minor.
warn	Sets the logging level to warning.

Command Default

None

Command Modes

Cisco VNMC policy agent configuration (config-vnm-policy-agent)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to set the logging level to critical:

vsm# configure

vsm(config)# vnm-policy-agent

vsm(config-vnm-policy-agent)# log-level critical

Related Commands


Command	Description
vnm-policy-agent	Enables the Cisco VNMC policy agent configuration mode.

org

To create a Cisco Virtual Network Management Center (VNMC) organization (domain), use the org command. To delete a Cisco VNMC organization, use the no form of this command.

org organization-name

no org [organization-name]

Syntax Description


organization-name	Organization name. The number of characters is from 1 to 251.

Command Default

None

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

Cisco VNMC organizations are Cisco VNMC domains.

You can hierarchically manage Cisco VNMC organizations. A user that is assigned at a top level organization has automatic access to all organizations under it. For example, an engineering organization can contain a software engineering organization and a hardware engineering organization. A locale that contains only the software engineering organization has access to system resources only within that organization. However, a locale that contains the engineering organization has access to the resources for both the software engineering and hardware engineering organizations.

Examples

This example shows how to create an organization:

vsm# configure

Enter configuration commands, one per line. End with CNTL/Z.

vsm(config)# port-profile pP1

vsm(config-port-prof)# org root/tenant1

vsm(config-port-prof)#

Related Commands


Command	Description
vservice	Sets the IP address for a virtual firewall.

ping vsn

To ping the virtual service nodes (VSN) from the vPath, use the ping vsn command. There is no no form of this command.

ping vsn {all | {ip <ip-addr>}} src-module {all | vpath-all | <module-num>} [timeout <secs>] [count {unlimited | <count>}]

Syntax Description


ip	Designates that a specific IP address is to be pinged.
ip-addr	IP address of the specific VSN.
all	Indicates that all VSNs must be pinged.
src-module	Designates the source module for the ping.
module-num	Module number for the source path.
vpath all	Designates that all source vPaths are to be used.
timeout	(Optional) Designates a timeout.
secs	Duration of the pinging operation in seconds.
count	(Optional) Designates a count of pings.
count	Number of pings to be counted.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

There is no no form of this command.

Examples

This example shows how to ping a Cisco VSG:

vsm# ping ?

  <CR>

  A.B.C.D or Hostname  IP address of remote system

  WORD               Enter Hostname

  mpls               Ping an MPLS network

  multicast          Multicast ping

  vsn                VSNs to be pinged

vsm# ping vsn

Input parameters:

·	vsn : VSNs to be pinged.

o	all : All VSNs that are currently associated to at least one VM. In other words, 
all VSNs specified in port-profiles that are bound to at least one VM.

o	ip-addr <ip-addr> : All VSNs configured with this IP address.

·	src-module : Source modules to orginate ping request from.

o	all : All online modules.

o	vpath-all : All modules having VMs associated to port-profiles that has vn-service 
defined.

o	<module-num> : A online module number.

·	timeout <secs> : Time to wait for response from VSNs, in seconds. Default is 1 sec.

·	count : Number of ping packets to be sent.

o	<count> : Sepcifies number of ping packets to be sent. Default is 5. Min 1, Max 
2147483647.

o	unlimited : Send ping packets until command is stopped.

Specify the IP address if the VSN to be pinged is not associated to any VMs yet.

In the output, the status of the ping request for each VSN for each module is shown. On a successful ping, the round-trip time of the ping request/response for a VSN is shown in microseconds next to the module number. On a failure, the failure message is shown next to the module number.

Various forms:

ping vsn all src-module all                (Ping all VSNs from all modules)

ping vsn all src-module vpath-all              (Ping all VSNs from all modules having

                                                VMs associated to VSNs)

ping vsn all src-module 3                      (Ping all VSNs from the specified module)

ping vsn ip 106.1.1.1 src-module all           (Ping specified VSN from all modules)

ping vsn ip 106.1.1.1 src-module vpath-all   (Ping specified VSN from all modules

                                                having VMs associated to VSNs)

This example shows that the timeout and count options apply to all of the above commands:

ping vsn all src-vpath all timeout 2 count 10

ping vsn all ip 106.1.1.1 count unlimited

Errors:

VSN response timeout - VSN is down, not reachable or not responding.

VSN ARP not resolved - VEM couldn't resolve MAC address of VSN.

no response from VEM - VEM is not sending ping response to VSM. Can happen when VEM

                       is down and VSM not detected it yet.

These examples show how to display all of the source module traffic:

vsm# ping vsn all src-module all

ping vsn 10.1.1.44 vlan 0 from module 9 10 11 12, seq=0 timeout=1-sec

  module(usec)   :  9(508)

  module(failed) : 10(VSN ARP not resolved) 11(VSN ARP not resolved)

                   12(VSN ARP not resolved)

ping vsn 10.1.1.40 vlan 0 from module 9 10 11 12, seq=0 timeout=1-sec

  module(usec)   :  9(974) 11(987) 12(1007)

  module(failed) : 10(VSN ARP not resolved)

ping vsn 10.1.1.44 vlan 0 from module 9 10 11 12, seq=1 timeout=1-sec

  module(usec)   :  9(277) 10(436) 11(270) 12(399)

ping vsn 10.1.1.40 vlan 0 from module 9 10 11 12, seq=1 timeout=1-sec

  module(usec)   :  9(376) 10(606) 11(468) 12(622)

ping vsn 10.1.1.44 vlan 0 from module 9 10 11 12, seq=2 timeout=1-sec

  module(usec)   :  9(272) 10(389) 11(318) 12(357)

ping vsn 10.1.1.40 vlan 0 from module 9 10 11 12, seq=2 timeout=1-sec

  module(usec)   :  9(428) 10(632) 11(586) 12(594)

ping vsn 10.1.1.44 vlan 0 from module 9 10 11 12, seq=3 timeout=1-sec

  module(usec)   :  9(284) 10(426) 11(331) 12(387)

ping vsn 10.1.1.40 vlan 0 from module 9 10 11 12, seq=3 timeout=1-sec

  module(usec)   :  9(414) 10(663) 11(644) 12(698)

ping vsn 10.1.1.44 vlan 0 from module 9 10 11 12, seq=4 timeout=1-sec

  module(usec)   :  9(278) 10(479) 11(334) 12(469)

ping vsn 10.1.1.40 vlan 0 from module 9 10 11 12, seq=4 timeout=1-sec

  module(usec)   :  9(397) 10(613) 11(560) 12(593)

vsm# ping vsn ip 10.1.1.40 src-module vpath-all

ping vsn 10.1.1.40 vlan 0 from module 9 11 12, seq=0 timeout=1-sec

  module(usec)   :  9(698) 11(701) 12(826)

ping vsn 10.1.1.40 vlan 0 from module 9 11 12, seq=1 timeout=1-sec

  module(usec)   :  9(461) 11(573) 12(714)

ping vsn 10.1.1.40 vlan 0 from module 9 11 12, seq=2 timeout=1-sec

  module(usec)   :  9(447) 11(569) 12(598)

ping vsn 10.1.1.40 vlan 0 from module 9 11 12, seq=3 timeout=1-sec

  module(usec)   :  9(334) 11(702) 12(559)

ping vsn 10.1.1.40 vlan 0 from module 9 11 12, seq=4 timeout=1-sec

  module(usec)   :  9(387) 11(558) 12(597)

vsm#

Related Commands


Command	Description
ping	Activates a signal to verify connections with other devices on a path.

policy-agent-image

To designate the policy agent image local URL as bootflash, use the policy-agent-image command. To remove the designation, use the no form of the command.

policy-agent-image bootflash:

no policy-agent-image bootflash:

Syntax Description


bootflash:	Designates the policy agent image local URL as bootflash.

Command Default

None

Command Modes

VNMC policy agent configuration (config-vnm-policy-agent)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to designate the local URL that contains the policy agent image:

vsm# configure

vsm(config)# vnm-policy-agent

vsm(config-vnm-policy-agent)# policy-agent-image bootflash:

Related Commands


Command	Description
vnm-policy-agent	Enables the VNM policy agent configuration mode.

pop

To pop a mode off the stack or to restore a mode, use the pop command.

pop file-name

Syntax Description


file-name	Name of the file.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to restore from a file called file1:

vsm# pop file1

Related Commands


Command	Description
push	Pushes the current mode onto the stack.

port-profile

To create a port profile and enter port profile configuration mode, use the port-profile command. To remove the port profile configuration, use the no form of this command.

port-profile profile-name

no port-profile profile-name

Syntax Description


profile-name	Port profile name. The number of characters is from 1 to 80.

Defaults

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

The port profile name must be unique for each port profile.

Examples

This example shows how to create a port profile called AccessProf:

vsm# configure

vsm(config)# port-profile AccessProf

This example shows how to remove the port profile called AccessProf:

vsm# configure

vsm(config)# no port-profile AccessProf

Related Commands


Command	Description
show port-profile	Displays information about the port profiles.

push

To push the current mode onto stack or to save it, use the push command.

push file-name

Syntax Description


file-name	Name of the file.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to push file1 onto the stack:

vsm# push file1

Related Commands


Command	Description
pop	Pops the current mode off the stack.

registration-ip

To set the service registry IP address, use the registration-ip command. To discard the service registry IP address, use the no form of this command.

registration-ip ip-address

no registration-ip

Syntax Description


ip-address	Service registry IP address. The format is A.B.C.D.

Command Default

None

Command Modes

Cisco VNMC policy agent configuration mode (config-vnm-policy-agent)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to set the service registry IP address:

vsm# configure

vsm(config)# vnm-policy-agent

vsm(config-vnm-policy-agent)# registration-ip 209.165.200.23

Related Commands


Command	Description
vnm-policy-agent	Enters the Cisco VNMC policy agent configuration mode.

shared-secret

To set the shared secret password for communication between the Cisco VSG, the Virtual Supervisor Module (VSM), and the Cisco Virtual Network Management Center (VNMC), use the shared-secret command. To discard the shared secret password, use the no form of this command.

shared-secret shared-secret-password

no shared-secret

Syntax Description


shared-secret-password	Shared secret password. The number of characters is from 1 to 64. You must use at least one uppercase character.

Command Default

None

Command Modes

Cisco VNMC policy agent configuration mode (config-vnm-policy-agent)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to set the shared secret password:

vsm# configure

vsm(config)# vnm-policy-agent

vsm(config-vnm-policy-agent)# shared-secret Password123

Related Commands


Command	Description
vnm-policy-agent	Enters VNM policy agent configuration mode.

show org port brief

Displays the ports attached to the port profile where org is configured, use the show org port brief command.

show org port brief [port-profile pp_name | vethernet veth_num] [module module_num]

Syntax Description


port-profile	(Optional) Displays the port information for the specified port-profile name.
pp_name	Port-profile name.
vethernet	(Optional) Displays the port information for the specified virtual Ethernet number.
vethernet_num	Specifies the virtual Ethernet number.
module	(Optional) Displays the module number.
module_num	Displays the module number to see the virtual Ethernet connections on the module.

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show org port brief command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•module—Filters the output per a specific module number.

•|—Pipes the command output to a filter.

Examples

This example shows how to display the port profile information:

Veth 		Mod VM-Name           vNIC  IP-Address

  2   		4 fc3-2610-4           2  	100.1.1.1

  5  	 	5 fc3-2610-5           3  	100.1.1.2

  9   	5 fc3-2610-6           				1  	100.1.1.3

show running-config

To display the running configuration, use the show running-config command.

Syntax Description


aaa	(Optional) Displays the Authentication, Authorization and Accounting (AAA) configuration.
aclmgr	(Optional) Displays the running configuration for Access Control List (ACL) manager.
adjmgr	(Optional) Displays adjacency manager information.
all	(Optional) Displays the current operating configurations.
am	(Optional) Displays Application Management (AM) information.
arp	(Optional) Displays Address Resolution Protocol (ARP) information.
cdp	(Optional) Displays the Cisco Discovery Protocol (CDP) configuration.
cert-enroll	(Optional) Displays certificate enrollment information.
diff	(Optional) Displays the difference between the running and startup configurations.
eem
exclude	(Optional) Excludes the running configuration of specified features.
exclude-provision	(Optional) Excludes the provision informaiton.
expand-port-profile	(Optional) Displays port profile information.
icmpv6	(Optional) Displays Internet Control Message Protocol (ICMPv6) information.
igmp	(Optional) Displays Internet Group Management Protocol (IGMP) information.
interface	(Optional) Displays interface configurations.
ip	(Optional) Displays Internet Protocol (IP) information.
ipqos	(Optional) Displays the running configuration for the IP Quality of Service (QoS) manager.
ipv6	(Optional) Displays IPv6 information.
l3vm	(Optional) Displays Layer 3 Virtual Machine (L3VM) information.
license	(Optional) Displays the licensing configuration.
monitor	(Optional) Displays Ethernet Switched Port Ananlyzer (SPAN) session information.
network	(Optional) Displays network information.
ntp	(Optional) Displays Network Time Protocol (NTP) information.
port-profile	(Optional) Displays port-profile configurations.
port-security	(Optional) Displays port-security configurations.
radius	(Optional) Displays the Remote Authentication Dial In User Service (RADIUS) configuration.
rpm	(Optional) Displays RPM information.
security	(Optional) Displays the security configurations.
spanning-tree	(Optional) Displays spanning-tree protocol information.
vdc-all	(Optional) Displays all Virtual Device Context (VDC) configurations.
vlan	(Optional) Displays virtual large area network (VLAN) information.
vrf	(Optional) Displays Virtual Routing and Forwarding (VRF) information.
vshd	(Optional) Displays the running configuration for virtual shared hardware device (VSHD).
acllog	Displays acllog information.
vservice	Displays virtual service node.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show running-config command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display the running configuration:

vsm-hpv# show running-config

!Command: show running-config

!Time: Sun May  5 20:04:22 2013

version 5.2(1)SM1(5.1)

svs switch edition essential

hostname VSM-hpv

no feature telnet

feature network-segmentation-manager

username admin password 5 $1$KxvwqWCb$8PqeCVrfY6QDy9nau.hBf.  role network-admin

banner motd #Nexus 1000V Switch

ip domain-lookup

errdisable recovery cause failed-port-state

svs license volatile

vem 3

  host id 0F5A5036-A5BF-1244-896D-760C4E3AC29C

vem 4

  host id 1022F40A-D033-FB44-B228-6B48FBD14928

snmp-server user admin network-admin auth md5 0xda2d510adcc26f463fc5c476a19be55b priv 
0xda2d510adcc26f463fc5c476a19be55b localizedkey

rmon event 1 log trap public description FATAL(1) owner PMON@FATAL

rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL

rmon event 3 log trap public description ERROR(3) owner PMON@ERROR

rmon event 4 log trap public description WARNING(4) owner PMON@WARNING

rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO

vrf context management

  ip route 0.0.0.0/0 10.2.0.1

vlan 1,550-555,914

port-channel load-balance ethernet source-mac

port-profile default max-ports 32

port-profile default port-binding static

port-profile type vethernet NSM_template_vlan

  no shutdown

  guid 86ceec5b-7a9c-4df4-9218-333bfc6f40a5

  description NSM default port-profile for VLAN networks. Do not delete.

  state enabled

port-profile type vethernet NSM_template_segmentation

  no shutdown

  guid 4a6cf01d-80df-48b2-87d8-0b0a15e7d450

  description NSM default port-profile for VXLAN networks. Do not delete.

  state enabled

port-profile type ethernet Uplink

  no shutdown

  guid 2122b8d9-8d21-4fb3-9e75-971fbb1a266d

  max-ports 512

  state enabled

port-profile type ethernet uplink_network_default_policy

  no shutdown

  guid bf7bd8ce-9a90-4af2-98c9-d7f8bafa9cb2

  max-ports 512

  description NSM created profile. Do not delete.

  state enabled

port-profile type vethernet N1K

  no shutdown

  guid 70cff39e-9136-434c-8f36-f17e82210031

  state enabled

  publish port-profile

port-profile type vethernet service

  no shutdown

  guid 6b9b60fd-4aff-40da-896c-7df7bc252908

  state enabled

  publish port-profile

port-profile type vethernet ha

  no shutdown

  guid 7f598f09-68d6-47a3-97e0-158ce8558292

  state enabled

  publish port-profile

port-profile type vethernet vnadp

  capability l3-vservice

  no shutdown

  guid d41c34d0-7c93-4fec-92ef-1f4383276b28

  state enabled

  publish port-profile

port-profile type vethernet veth-1

  org root/Tenant-1

  vservice node VSG-138 profile SP11

  no shutdown

  guid 14fa09d3-6cf8-4c55-b7f5-ad0ae4e4c8bd

  state enabled

  publish port-profile

port-profile type vethernet veth-2

  org root/Tenant-1/VDC-1/App-1/Tier-1

  vservice node VSG-138 profile SP14

  no shutdown

  guid 4be00543-2965-4d4e-be39-2f0ed5c606e6

  state enabled

  publish port-profile

port-profile type vethernet veth-3

  org root/Tenant-1/VDC-1/App-1/Tier-1

  vservice node VSG-N1010 profile SP11

  no shutdown

  guid 335f49a3-95e8-4c88-b078-7a5424f4537b

  state enabled

Related Commands publish port-profile


Command	Description
show aaa	Displays AAA information.

show running-config vservice node

To display the configuration details of the service nodes in the network, use the show running-config vservice node command.

show running-config vservice node [node-name]

Syntax Description


node-name	(Optional) Name of the vservice node.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show running-config vservice node command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•node-name—Displays the configuration of the specified vservice node name.

•|—Pipes the command output to a filter.

Examples

This example shows how to display information about a configured vservice node:

vsm# show running-config vservice node

!Command: show running-config vservice node

!Time: Wed May 8 06:54:03 2013

version 5.2(1)SM1(5.1)

logging level vns_agent 2

vservice node VSGl3 type vsg

ip address 192.168.180.33

adjacency l3

fail-mode close

vservice node VSGhv-l3 type vsg

ip address 192.168.180.31

adjacency l3

fail-mode close

Related Commands


Command	Description
vservice node	Configures a service node.

show vnm-pa status

To display the installation status of a policy agent, use the show vnm-pa status command.

show vnm-pa status

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vnm-pa status command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display the installation status of the policy agent:

vsm# configure

vsm(config)# show vnm-pa status

VNM Policy-Agent status is - Installed Successfully. Version 1.0(0.512)-vsm

vsm(config)#

Related Commands


Command	Description
vnm-policy-agent	Enters the Cisco VNMC policy agent configuration mode.

show vservice brief

To display only a brief summary about the Cisco VSG, use the show vservice brief command.

show vservice brief {[node-name <node name>] | { [node-l3] [node-ipaddr <ip-addr>}} | [ module <module-num>]}}

Syntax Description


node-l3	Displays the port information for the Layer 3 adjacency of a node.
node-ipaddr	Displays the port information for the specified IP address of the node.
ip-addr	Specifies the IP address of the service node.
module	(Optional) Displays module number.
module-num	Specifies the module number to see all the VSN connections on the module.
node-name	(Optional) Displays service node name.
node-name	Specifies the service node.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice brief command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display a summary of the Cisco VSGs:

vsm# show vservice brief

--------------------------------------------------------------------------------

                                   License Information

--------------------------------------------------------------------------------

Type      In-Use-Lic-Count  UnLicensed-Mod

vsg                      2

asa                      0

--------------------------------------------------------------------------------

                                   Node Information

--------------------------------------------------------------------------------

 ID Name                     Type   IP-Address      Mode   State   Module

  2 VSG-N1010                vsg    10.1.0.200      l3     Unreach 4,

  3 VSG-Root                 vsg    10.1.0.150      l3     Unreach 4,

--------------------------------------------------------------------------------

                                   Path Information

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

                                   Port Information

--------------------------------------------------------------------------------

PortProfile:veth-10

Org:root/Tenant-1/VDC-1/App-1/Tier-1

Node:VSG-N1010(10.1.0.200)                    Profile(Id):SP11(16)

Veth Mod VM-Name                              vNIC

   3   4 vm-ub-11

PortProfile:veth-3

Org:root/Tenant-1/VDC-1/App-1/Tier-1

Node:VSG-Root(10.1.0.150)                     Profile(Id):SP100(16)

Veth Mod VM-Name                              vNIC

   5   4 vm-win-16

   6   4 vm-ub-10

PortProfile:veth-3

Org:root/Tenant-2/VDC-2/App-2/Tier-2

Node:VSG-Root(10.1.0.150)                     Profile(Id):SP100(22)

Veth Mod VM-Name                              vNIC

   4   4 vm-win-15

show vservice connection

To display Cisco VSG connections, use the show vservice connection command.

show vservice connection [port-profile <pp_name> | service-profile <sp_name> | node-name <node_name> | {[node-l3] [node-ipaddr <ip_addr>]}] [module <module_num>]

Syntax Description


port-profile	Filters the port information for the specified port-profile name.
port-profile	Specifies the port-profile name.
service-profile	Filters the port information for the specified service-profile name.
service_profile	Specifies the service-profile name.
node-name	(Optional) Displays service node name.
node-name	Specifies the service node.
node-l3	Displays the port information for the Layer 3 adjacency of a node.
node-ipaddr	Displays the port information for the specified IP address of the node.
ip-addr	Specifies the IP address of the service node.
module	(Optional) Displays module number.
module-num	Specifies the module number to see all the VSN connections on the module.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice connection command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display Cisco VSG connections:

vsm-hpv# show vservice connection

Actions(Act):

d - drop                             s - reset

p - permit                           t - passthrough

r - redirect                         e - error

_ - not processed yet                upper case - offloaded

Flags:

A - seen ack for syn/fin from src    a - seen ack for syn/fin from dst

E - tcp conn established (SasA done)

F - seen fin from src                f - seen fin from dst

R - seen rst from src                r - seen rst from dst

S - seen syn from src                s - seen syn from dst

T - tcp conn torn down (FafA done)   x - IP-fragment connection

#Port-Profile:(null)                           Node:VSG-Root

#Module 4

Proto SrcIP[:Port]          SAct  DstIP[:Port]          DAct  Flags       Bytes

show vservice detail

To display detailed information about the Cisco VSG, use the show vservice detail command.

show vservice detail {[node-name <node name>] | { [node-l3] [node-ipaddr <ip-addr>}} | [ module <module-num>]}}

Syntax Description


node-name	(Optional) Displays service node name.
node-name	Specifies the service node.
node-l3	Displays the port information for the Layer 3 adjacency of a node.
node-ipaddr	Displays the port information for the specified IP address of the node.
ip-addr	Specifies the IP address of the service node.
module	(Optional) Displays module number.
module-num	Specifies the module number to see all the VSN connections on the module.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vsn detail command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display detailed information about Cisco VSGs:

vsm-hpv# show vservice detail

--------------------------------------------------------------------------------

                                   License Information

--------------------------------------------------------------------------------

Mod  VSG-Lic-Count

  4              2

--------------------------------------------------------------------------------

                                   Node Information

--------------------------------------------------------------------------------

Node ID:3      Name:VSG-Root

Type:vsg       IPAddr:10.1.0.150       Fail:close  L3

Mod  State     MAC-Addr                VVer

  4  Alive     --                         2

--------------------------------------------------------------------------------

                                   Path Information

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

                                   Port Information

--------------------------------------------------------------------------------

PortProfile:veth-10

Org:root/Tenant-1/VDC-1/App-1/Tier-1

Node:VSG-Root(10.1.0.150)                     Profile(Id):SP100(16)

Veth5

Module  :4

VM-Name :vm-win-16

vNIC:Network Adapter

DV-Port :884f1580-0ad6-4958-a74a-c27b3febbe28--8884a888-09e1-4503-8074-de32e3e2

af85

VM-UUID :884F1580-0AD6-4958-A74A-C27B3FEBBE28

DVS-UUID:633a90b8-98bd-4264-b3b6-7a0d77b73ba1

vsm#

-------------------

Related Commands


Command	Description
show vservice port vethernet	Displays information about virtual Ethernet (vEth) ports.

show vservice license brief

To display a brief summary about the Cisco VSG license information, use the show vservice license brief command.

show vservice license brief

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice license brief command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display the brief information about the license:

n1000v# show vservice license brief

--------------------------------------------------------------------------------

                                   License Information

--------------------------------------------------------------------------------

Type      In-Use-Lic-Count  UnLicensed-Mod

vsg                      2

asa                      0

Related Commands


Command	Description
show license usage	Displays the vservice node license usage.

show vservice license detail

To display the detail about the Cisco VSG license information, use the show vservice license detail command.

show vservice license detail {module module_num}

Syntax Description


module	Filters the module number.
module_num	Module number. The range is from 3 to 66.

Command Default

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice license detail command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display the brief information about the license:

VSM-hpv# show vservice license detail mod 4

--------------------------------------------------------------------------------

                                   License Information

--------------------------------------------------------------------------------

Mod  VSG-Lic-Count  ASA-Lic-Count

  4              2              0

Related Commands


Command	Description
show license usage	The vservice license usage.

show vservice node mac brief

To display a brief summary about the MAC address of the Cisco VSG service node, use the show vservice node mac brief command.

show vservice node mac brief

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice node mac brief command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display the MAC address of the Cisco VSG service node

VSM-hpv# show vservice node mac brief

--------------------------------------------------------------------------------

                                   Node Information

--------------------------------------------------------------------------------

ID Type   IP-Address      MAC-Addr          Mode   Fail  State   Module

  3 vsg    10.1.0.150      00:00:00:00:00:00 l3     close Alive    4,

show vservice node brief

To display a brief summary about the Cisco VSG vservice node, use the show vservice node brief command.

show vservice node brief {[name <name>] | {[l3] [ipaddr <ip_addr>]} } [module <module_num>]}

Syntax Description


name	(Optional) Displays service node name.
name	Service node.
l3	Displays the port information for the Layer 3 adjacency.
ipaddr	Displays the port information for the specified IP address of the node.
ip_addr	Node's IP address.
module	(Optional) Displays module keyword.
module-num	Module number to see all the VSN connections on the module.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice node brief command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display a brief summary about the Cisco VSG vservice node.

VSM-hpv# show vservice  node brief

-------------------------------------------------------------------------

                                   Node Information

-------------------------------------------------------------------------

ID Name                     Type   IP-Address      Mode   State   Module

  3 VSG-Root                 vsg    10.1.0.150      l3     Alive  4,

show vservice node detail

To display details about the Cisco VSG vservice node, use the show vservice node detail command.

show vservice node detail {[name <name>] | {[l3] [ipaddr <ip_addr>]} } [module <module_num>]}

Syntax Description


name	(Optional) Displays service node name.
name	Service node.
l3	Displays the port information for the Layer 3 adjacency.
ipaddr	Displays the port information for the specified IP address of the node.
ip_addr	Node's IP address.
module	(Optional) Displays module keyword.
module-num	Module number to see all the VSN connections on the module.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice node detail command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display the Cisco VSG service node:

VSM-hpv# show vservice node detail

--------------------------------------------------------------------------------

Node Information

--------------------------------------------------------------------------------

Node ID:3 Name:VSG-Root

Type:vsg IPAddr:10.1.0.150 Fail:close L3

Mod State MAC-Addr VVer

  4  Alive     --                         2

show vservice port brief

To display a brief summary about the configured ports in the network, use the show vservice port brief command.

show vservice port brief [port-profile <pp_name> | <veth_if> | service-profile <sp_name> | node-name <node_name> | {[node-l3] [node-ipaddr <ip_addr>]}] [module <module_num>]}

Syntax Description


port-profile	Displays the port information for the specified port-profile name.
pp_name	Port-profile name.
veth_if	Virtual ethernet interface.
service-profile	Displays the port information for the specified service-profile name.
service_profile	Service-profile name.
node-name	(Optional) Displays service node name.
node-name	Service node.
node-l3	Displays the port information for the Layer 3 adjacency of a node.
node-ipaddr	Displays the port information for the specified IP address of the node.
ip_addr	Node's IP address.
module	(Optional) Displays module keyword.
module-num	Module number to see all the VSN connections on the module.

Command Modes

EXEC

Supported User Roles

Network-admin

Network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice port brief command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•module—Filter the output per a specific module number.

•|—Pipes the command output to a filter.

Examples

This example shows how to display a brief summary about of the vservice ports for module number 4:

vsm# show vservice port brief module 4

--------------------------------------------------------------------------------

                                   Port Information

--------------------------------------------------------------------------------

PortProfile:

Org:root/Tenant-1/VDC-1/App-1/Tier-1

Node:VSG-Root(10.1.0.150)                     Profile(Id):SP100(16)

Veth Mod VM-Name                              vNIC

   5   4 vm-win-16

Related Commands


Command	Description
vservice port detail	Displays details of the configured ports in the network.

show vservice port detail

To display details about the configured ports in the network, use the show vservice port detail command.

show vservice port detail [port-profile <pp_name> | <veth_if> | service-profile <sp_name> | node-name <node_name> | {[node-l3] [node-ipaddr <ip_addr>]}] [module <module_num>]}

Syntax Description


port-profile	Displays the port information for the specified port-profile name.
pp_name	Port-profile name.
veth_if	Virtual ethernet interface.
service-profile	Displays the port information for the specified service-profile name.
service_profile	Service-profile name.
node-name	(Optional) Displays service node name.
node-name	Service node.
node-l3	Displays the port information for the Layer 3 adjacency of a node.
node-ipaddr	Displays the port information for the specified IP address of the node.
ip_addr	Node's IP address.
module	(Optional) Displays module keyword.
module-num	Module number to see all the VSN connections on the module.

Command Modes

EXEC

Supported User Roles

network-admin

network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice port detail command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•module—Filter the output per a specific module number.

•|—Pipes the command output to a filter.

Examples

This example shows how to display details about of the vservice for module 4:

vsm# show vservice port detail module 4

--------------------------------------------------------------------------------

                                   Port Information

--------------------------------------------------------------------------------

PortProfile:

Org:root/Tenant-1/VDC-1/App-1/Tier-1

Node:VSG-Root(10.1.0.150)                     Profile(Id):SP100(16)

Veth5

Module  :4

VM-Name :vm-win-16

vNIC:Network Adapter

DV-Port :884f1580-0ad6-4958-a74a-c27b3febbe28--8884a888-09e1-4503-8074-de32e3e2a

f85

VM-UUID :884F1580-0AD6-4958-A74A-C27B3FEBBE28

DVS-UUID:633a90b8-98bd-4264-b3b6-7a0d77b73ba1

Related Commands

Related Commands--------------------------------------------------------------------------------

Related Commands Port Information

Related Commands--------------------------------------------------------------------------------

Related CommandsPortProfile:tC-bd5-vsgbd6

Related CommandsOrg:root/tC

Related CommandsNode:vsgtCbd6(10.10.10.103) Profile(Id):sp-tC(5)

Related CommandsVeth9

Related Commands Module :4

Related Commands VM-Name :cos-8.10-bd5-spvsgbd6

Related Commands vNIC:Network Adapter 2

Related Commands DV-Port :4421

Related Commands VM-UUID :50 35 a1 39 18 76 76 18-89 89 27 33 1a 30 50 20

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.8.8.10,

Related CommandsVeth23

Related Commands Module :4

Related Commands VM-Name :cos-8.41-bd6-vsgbd6

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :4425

Related Commands VM-UUID :50 35 d5 98 de c1 04 5b-3e 84 a6 2c 9f 04 2b c2

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.8.8.41,

Related CommandsVeth37

Related Commands Module :4

Related Commands VM-Name :xp-8.11-504-vsg504

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :4424

Related Commands VM-UUID :50 35 bc 16 8c fa a8 66-ae d9 1f ca 30 e5 21 3e

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.8.8.11,

Related CommandsVeth51

Related Commands Module :4

Related Commands VM-Name :cos-8.37-503-s...04vasa503

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :4416

Related Commands VM-UUID :50 35 1d f6 ba 4e 26 7e-78 02 03 a8 cf c6 ed d9

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.8.8.37,

Related CommandsVeth53

Related Commands Module :4

Related Commands VM-Name :cos-8.31-503-vsgbd6

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :4420

Related Commands VM-UUID :50 35 42 e3 93 f9 aa 46-3e 94 bb fd 39 23 a7 c0

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.8.8.31,

Related Commands

Related CommandsPortProfile:tD-bd5-spvsgl3vasabd5

Related CommandsOrg:root/tD

Related CommandsPath:sp-tDvsgl3vasabd5 NumOfSvc:2

Related CommandsNode Profile(Id)

Related Commands vsgl3tD104(10.10.10.204) sp-tD(6)

Related Commands vasatDbd5(172.8.8.201) ep-tD(8)

Related CommandsVeth72

Related Commands Module :4

Related Commands VM-Name :cos-8.40-bd5-s...l3vasabd5

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :3712

Related Commands VM-UUID :50 35 af 46 40 bb ef 61-37 9e c7 6f 5a 97 4e 18

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.8.8.40,

Related Commands

Related CommandsPortProfile:tD-504-vsg504

Related CommandsOrg:root/tD

Related CommandsNode:vsgl2tD104(10.10.10.104) Profile(Id):sp-tD(6)

Related CommandsVeth69

Related Commands Module :4

Related Commands VM-Name :cos-8.38-504-vsg504

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :4642

Related Commands VM-UUID :50 35 9a 63 d0 6a ff de-a5 66 65 2c 06 be e4 c1

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.8.8.38,

Related Commands

Related CommandsPortProfile:tD-bd5-vsgl3

Related CommandsOrg:root/tD

Related CommandsNode:vsgl3tD104(10.10.10.204) Profile(Id):sp-tDl3(7)

Related CommandsVeth50

Related Commands Module :4

Related Commands VM-Name :2k3-9.8-bd6-spvsgl3

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :3777

Related Commands VM-UUID :50 35 93 44 8b 31 35 e1-02 50 e1 5c 5e 3f 51 2a

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:172.9.9.8,

Related Commands

Related CommandsPortProfile:test

Related CommandsOrg:

Related CommandsNode:testip(0.0.0.0) Profile(Id):test(1)$

Related CommandsVeth60

Related Commands Module :4

Related Commands VM-Name :cos-jbo9.7-bd6-spvsgl3

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :4800

Related Commands VM-UUID :50 35 7a f3 bb 72 4a 48-46 71 59 86 34 a4 2c 06

Related Commands DVS-UUID:6f df 35 50 6b 49 88 d0-ce 2f 69 82 57 25 38 55

Related Commands IP-Addrs:

Related Commands

Related CommandsPortProfile:tC-bd6-vsgbd6

Related CommandsOrg:root/tC

Related CommandsNode:vsgtCbd6(10.10.10.103) Profile(Id):sp-tC(5)

Related CommandsVeth11

Related Commands Module :4

Related Commands VM-Name :cos-9.13-bd6-vsgl3

Related Commands vNIC:Network Adapter 1

Related Commands DV-Port :4832

Related Commands VM-UUID :50 35 f0 fb 15 4a 82 57 25 38 55

Related Commands IP-Addrs:172.9.9.13,

Related Commands


Command	Description
show vservice port brief	Displays a brief summary about the configured ports in the network.

show vservice statistics

To display the information about the configuration, MAC address, state of associated Cisco VSG and Virtual Ethernet Module (VEM), virtual Ethernet interfaces to which Cisco VSGs are bound, and Virtual Service Node (VSN) statistics for all VEM modules associated with Cisco VSGs, use the show vservice statistics command.

show vservice statistics [ip ip-addr | module module-num]

Syntax Description


ip	(Optional) Displays IP address statistics.
ip-addr	MAC address.
module	(Optional) Displays VEM module statistics.
module-num	Module number.

Command Default

None

Command Modes

EXEC

Supported User Roles

network-admin
network-operator

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can use the following operators with the show vservice statistics command:

•>—Redirects the output to a file.

•>>—Redirects the output to a file in append mode.

•|—Pipes the command output to a filter.

Examples

This example shows how to display statistics for a module:

VSM-hpv# show vservice statistics module 4

#VSN  VLAN: 0, IP-ADDR: 10.1.0.150

  Module: 4

    #VPath Packet Statistics     Ingress         Egress           Total

    Total Seen                         2              2               4

    Policy Redirects                   2              2               4

    No-Policy Passthru                 0              0               0

    Policy-Permits Rcvd                1              2               3

    Policy-Denies  Rcvd                0              0               0

    Permit Hits                        0              0               0

    Deny   Hits                        0              0               0

    Decapsulated                       1              2               3

    Fail-Open                          0              0               0

    Badport Err                        0              0               0

    VSN Config Err                     0              0               0

    VSN State Down                   228           1288            1516

    Encap Err                          0              0               0

    Version Mismatch                   0              0               0

    V1 In svcPath                      0              0               0

    All-Drops                        228           1288            1516

    Flow Notificns Sent                                               0

    Total Rcvd From VSN                                               5

    Non-Cisco Encap Rcvd                                              0

    VNS-Port Drops                                                    2

    Policy-Action Err                                                 0

    Decap Err                                                         0

    L2-Frag Sent                                                      0

    L2-Frag Rcvd                                                      0

    L2-Frag Coalesced                                                 0

    Encap exceeded MTU                                                0

    ICMP Too Big Rcvd                                                 0

    #VPath Flow Statistics

    Active Flows                       0  Active Connections                 0

    Forward Flow Create                1  Forward Flow Destroy               1

    Reverse Flow Create                1  Reverse Flow Destroy               2

    Flow ID Alloc                      3  Flow ID Free                       3

    Connection ID Alloc                1  Connection ID Free                 1

    L2 Flow Create                     1  L2 Flow Destroy                    1

    L3 Flow Create                     0  L3 Flow Destroy                    0

    L4 TCP Flow Create                 0  L4 TCP Flow Destroy                0

    L4 UDP Flow Create                 2  L4 UDP Flow Destroy                2

    L4 Oth Flow Create                 0  L4 Oth Flow Destroy                0

    Embryonic Flow Create              0  Embryonic Flow Bloom               0

    L2 Flow Timeout                    2  L2 Flow Offload                    3

    L3 Flow Timeout                    0  L3 Flow Offload                    0

    L4 TCP Flow Timeout                0  L4 TCP Flow Offload                0

    L4 UDP Flow Timeout                5  L4 UDP Flow Offload                0

    L4 Oth Flow Timeout                0  L4 Oth Flow Offload                0

    Flow Lookup Hit                    5  Flow Lookup Miss                   3

    Flow Dual Lookup                   8  L4 TCP Tuple-reuse                 0

    TCP chkfail InvalACK               0  TCP chkfail SeqPstWnd              0

    TCP chkfail WndVari                0

    Flow Classify Err                  0  Flow ID Alloc Err                  0

    Conn ID Alloc Err                  0  Hash Alloc Err                     0

    Flow Exist                         0  Flow Entry Exhaust                 0

    Flow Removal Err                   0  Flow Entry Miss                    0

    Flow Full Match Err                0  Bad Action Receive                 0

    Invalid Flow Pair                  3  Invalid Connection                 0

    Hash Alloc                         0  Hash Free                          0

    InvalFID Lookup Err                0  Deferred Delete                    0

Related Commands


Command	Description
show vservice port vethernet	Displays information about virtual Ethernet (vEth) ports.

state (port profile)

To enable the operational state of a port profile, use the state command. To disable the operational state of a port profile, use the no form this command.

state enabled

no state enabled

Syntax Description


enabled	Enables the port profile.

Defaults

Disabled

Command Modes

Port profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to enable the operational state of a port profile:

vsm# configure

vsm(config)# port-profile testprofile

vsm(config-port-prof)# state enabled

Related Commands


Command	Description
show port-profile	Displays port profile information.

tcp state-checks

To configure the Cisco Nexus 1000V switch to perform TCP state checks, use the tcp state-checks command. To return to the default setting, use the no form of the command.

tcp state-checks

no tcp state-checks

Syntax Description

There are no arguments.

Command Modes

vservice global configuration (config-vservice-global)

Supported User Roles

network-admin

system-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

Because the default TCP state checks in vPath are different for each check, the no form of this command may enable or disable the respective checks. See the "Defaults" section, before you enter the no form of this command.

Examples

This example shows how to configure the switch to perform the default TCP state checks:

n1000v(config)# vservice global type vsg

n1000v(config-vservice-global)# tcp state-checks

Related Commands


Command	Description
vservice global type vsg	Enters the vservice global configuration mode.

vlan

To create a VLAN and enter VLAN configuration mode, use the vlan command. To remove a VLAN, use the no form of this command.

vlan {id | dot1Q tag native}

no vlan {id | dot1Q tag native}

Syntax Description


id	VLAN identification number. The range is from 1 to 4094.
dot1Q tag native	Specifies an IEEE 802.1Q virtual LAN.

Defaults

VLAN 1

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

Specify a VLAN range by using a dash. For example, 1-9 or 20-30.

Examples

This example shows how to create a VLAN and enter VLAN configuration mode:

vsm# configure

vsm(config)# vlan 100

vsm(config-vlan)#

This example shows how to remove a VLAN:

vsm# configure

vsm(config)# no vlan 100

Related Commands


Command	Description
show vlan	Displays the VTP VLAN status.

vservice

To associate a port profile with a service node, use the vservice command from the config-port-profile mode of the port profile. To delete a port-profile configuration, use the no form of this command.

vservice {node node_name [profile profile_name]}

no vservice

Syntax Description


node	Specifies the service node to associate the port profile with.
node_name	Predefined service node name.
profile	(Optional) Specifies the service profile that the service node is to be associated with.
profile_name	Predefined service profile name.

Defaults

None

Command Modes

Port-profile configuration (config-port-prof)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You can associate the service node to the chosen port-profile entity. The node need to be predefined. If the node is of type VSG specifying a profile is mandatory.

Examples

This example shows how to configure a port profile with a node and service profile:

vsm(config)# port-profile port1 <-------- Enter the mode of the port-profile entity you 
want to configure

vsm(config-port-prof)# vservice node vsg1 profile sp1

Related Commands


Command	Description
show port-profile	Displays information about the port profiles.

vservice global type vsg

To enter vservice global configuration mode, use the vservice global type vsg command.

vservice global type vsg

Syntax Description

This command has no keywords or arguments.

Command Default

None

Command Modes

vservice global configration (config-vservice-global)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Examples

This example shows how to enter vservice global configuration mode:

n1000v# configure <------ enter the config mode

n1000v(config)# vservice global type vsg

n1000v(config-vservice-global)#

Related Commands


Command	Description
tcp state-checks	Configures selective TCP state checks on the switch traffic.

vservice node

To configure a service node, use the vservice node command. To disable a service node, use the no form of this command.

vservice node node_name type {vsg}
ip address ip-address | no ip address
adjacency {l3} | no adjacency failmode {close | open} | no failmode

no vservice node node_name
no ip address
no adjacenc
no failmode

Syntax Description


node_name	Service node name to identify it in the network.
type	Specifies the type of service node to be configured.
vsg	Specifies the Cisco VSG service node.
ip address	Specifies the IP address of the service node. This IP address should match the IP address of the data interface node.
ip-address	IP address of the associated service node.
no	No IP address associated with the service node.
adjacency	Specifies the adjacency for Layer 3 mode.
l3	Specifies Layer 3 (using IP address) mode for the service node.
failmode	Sets the state to be in either fail close or fail open mode.
close	Drops packets if the Cisco VSG is down. This is the default value.
open	Allows the packets to pass through if the Cisco VSG is down.

Command Default

None

Command Modes

Global configration (config)

Supported User Roles

Network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

Use vservice node command to configure a service node with an existing Cisco VSG. That node is associated with a port profile.

You can only delete inactive vservice nodes. The inactive nodes are not configured with any Virtual Machines (VMs).

Examples

This example shows how to enter vservice-node mode and configure the IP address of a vservice node, adjacency, and fail-mode settings:

vsm(config)# vservice node test type vsg <------- enter the vservice-node mode

vsm(config-vservice-node)# ip address 1.1.11.11

vsm(config-vservice-node)# adjacency l3

vsm(config-vservice-node)# fail-mode close

Related Commands


Command	Description
show vservice node brief	Displays brief information about the vservice node.
show vservice node detail	Displays detailed information about the vservice node.

vservice license

To assign Cisco VSG licenses to specific modules, use the vservice license command. To disable volatile licenses, use the no form of this command.

vservice license type {vsg} {transfer | volatile} {src-module mod_no | license-pool} {dst-module mod_no | license-pool}

[no] vservice license type {vsg} volatile

Syntax Description


type	Specifies the service node license. The options are Cisco VSG.
vsg	Specifies the VSG license type that you can assign to a specific module.
transfer	Specifies that the license needs to be transferred.
volatile	Specifies the volatile licenses within the network.
src-module	Specifies the source module from which the license is to be transferred.
mod_no	Module number. The acceptable number range is from 3 to 66.
license-pool	Specifies that the license has to be transferred from a module to the pool or from the pool to a module.
dst-module	Specifies the destination module to which the license is to be assigned.

Defaults

None

Command Modes

EXEC

Supported User Roles

Network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

You cannot transfer volatile licenses to the license pool. You cannot specify any keyword after you enter "volatile" at the command line.

You can transfer the licenses within the modules and license pool. This command also enables (activate) the volatile licenses.

Examples

This example shows how to transfer a Cisco VSG license from a module to the license pool:

vsm(config)# vservice license type vsg transfer src-module 4 license-pool

This example shows how to enable volatile Cisco VSG licenses:

vsm(config)# vservice license type vsg volatile

Related Commands


Command	Description
show vservice license brief	Displays usage information per license type.
show vservice license detail	Displays the license type per module.

vnm-policy-agent

To enter Cisco Virtual Network Management Center (VNMC) policy agent mode, use the vnm-policy-agent command.

vnm-policy-agent

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Global configuration (config)

Supported User Roles

network-admin

Command History


Release	Modification
5.2(1)SM1(5.1)	This command was introduced.

Usage Guidelines

Use the Cisco VNMC policy agent configuration mode to configure policy agents.

Examples

This example shows how enter policy agent mode:

vsm# configure

vsm(config)# vnm-policy-agent

vsm(config-vnm-policy-agent)#

Related Commands


Command	Description
configure	Enters global configuration mode.

Bias-Free Language

Results

Chapter: Cisco Nexus 1000V Series Switch Commands

Cisco Nexus 1000V Series Switch Commands

capability l3-vservice

Syntax Description

Defaults

Command Modes

Command History

Examples

Related Commands

clear vservice connection

Syntax Description

Defaults

Command Modes

Command History

Examples

Related Commands

clear vservice statistics

Syntax Description

Defaults

Command Modes

Command History

Examples

Related Commands

copy running-config startup-config

Syntax Description

Defaults

Command Modes

Command History

Usage Guidelines

Examples

Related Commands

log-level

Syntax Description

Command Default

Command Modes

Command History

Examples

Related Commands

org

Syntax Description

Command Default

Command Modes

Command History

Usage Guidelines

Examples

Related Commands

ping vsn

Syntax Description

Command Default

Command Modes

Command History

Usage Guidelines

Examples

Related Commands

policy-agent-image

Syntax Description

Command Default

Command Modes

Command History

Examples

Related Commands

pop

Syntax Description

Command Default

Command Modes

Command History

Examples

Related Commands

port-profile

Syntax Description

Defaults

Command Modes

Command History

Usage Guidelines

Examples

Related Commands

push