Ipv6 Diagnostic and Troubleshooting: Icmp Rate-Limiting Ping For Ipv6 (Ping6) Traceroute For Ipv6 Dns Resolver For Ipv6

You might also like

Download as pdf or txt
Download as pdf or txt
You are on page 1of 18

9

IPv6DiagnosticandTroubleshooting
Contents
Introduction .................................................. 9-2
ICMP Rate-Limiting ........................................... 9-2
Ping for IPv6 (Ping6) .......................................... 9-4
Traceroute for IPv6 ........................................... 9-7
DNS Resolver for IPv6 ........................................ 9-10
DNSConfiguration ................. ........................ 9-10
ViewingtheCurrentConfiguration ............................ 9-12
OperatingNotes............................................ 9-12
Debug/Syslog for IPv6 ........................................ 9-13
ConfiguringDebugandEventLogMessaging ................... 9-13
DebugCommand ................... ........................ 9-14
ConfiguringDebugDestinations .............................. 9-16
LoggingCommand ......................................... 9-17
9-1
IPv6DiagnosticandTroubleshooting
Introduction
Introduction
Feature Default CLI
IPv6ICMPMessageIntervaland
TokenBucket
100ms
10maxtokens
9-3
ping6 Enabled
traceroute6 n/a
TheIPv6ICMPfeatureenablescontrolovertheerrorandinformational
messagerateforIPv6traffic,whichcanhelpmitigatetheeffectsofaDenial-
of-serviceattack.Ping6enablesverificationofaccesstoaspecificIPv6device,
andtraceroute6enablestracingtheroutetoanIPv6-enableddeviceonthe
network.
ICMPRate-Limiting
ICMPrate-limitingcontrolstherateatwhichICMPv6generateserrorand
informationalmessagesforfeaturessuchas:
neighborsolicitations
neighboradvertisements
multicastlistenerdiscovery(MLD)
pathMTUdiscovery(PMTU)
duplicateaddressdiscovery(DAD)
neighborunreachabilitydetection(NUD)
routerdiscovery
neighbordiscovery(NDP)
ICMPv6errormessagegenerationisenabledbydefault.Therateofmessage
generationcanbeadjusted,ormessagegenerationcanbedisabled.
9-2
IPv6DiagnosticandTroubleshooting
ICMPRate-Limiting
ControllingthefrequencyofICMPv6errormessagescanhelptopreventDoS
(Denial-of-Service)attacks.WithIPv6enabledontheswitch,youcancontrol
theallowablefrequencyofthesemessageswithICMPv6rate-limiting.
Syntax:. ipv6icmperror-interval<0-2147483647>[bucket-size<1-200>]
noipv6icmperror-interval
Thiscommandisexecutedfromtheglobalconfigurationlevel,
andusesatokenbucketmethodforlimitingtherateofICMP
errorandinformationalmessages.Usingthismethod,each
ICMPmessageusesonetoken,andamessagecanbesentonly
ifthereisatokenavailable.Inthedefaultconfiguration,anew
tokencanbeaddedevery100milliseconds,andamaximum
of10tokensareallowedinthetokenbucket.Ifthetokenbucket
isfull,anewtokencannotbeaddeduntilanexistingtokenis
usedtoenablesendinganICMPmessage.Youcanincreaseor
decreaseboththethefrequencywithwhichusedtokenscanbe
replacedand(optionally)thenumberoftokensallowedto
exist.
error-interval:Specifiesthetimeintervalinmilliseconds
betweensuccessivetokenadds.Increasingthisvalue
decreasestherateatwhichtokenscanbeadded.Asetting
of0disablesICMPmessaging.
Default:100;Range: 0- 2147483647.
bucket-size:Thisoptionalkeywordspecifiesthemaximum
numberoftokensallowedinthetokenbucketatanytime.
Decreasingthisvaluedecreasesthemaximumnumberof
tokensthatmaybeavailableatanytime.
Default:10;Range: 1-200.
YoucanchangetherateatwhichICMPmessagesareallowed
bychangingtheerror-intervalwithorwithoutacorre-
spondingchangeinthebucket-size.
Thenoipv6icmperror-intervalcommandresetsboththeerror-
intervalandthebucket-sizevaluestotheirdefaults.
UsetheshowruncommandtoviewthecurrentICMPerror
intervalsettings.
Forexample,thefollowingcommandlimitsICMPerrorandinformational
messagestonomorethan20every1second:
Pr oCur ve( conf i g) #i pv6 i cmp er r or - i nt er val 1000000 bucket - si ze
9-3
20
IPv6DiagnosticandTroubleshooting
PingforIPv6(Ping6)
PingforIPv6(Ping6)
ThePing6testisapoint-to-pointtestthatacceptsanIPv6addressorIPv6host
nametoseeifanIPv6switchiscommunicatingproperlywithanotherdevice
onthesameoranotherIPv6network.Apingtestchecksthepathbetweenthe
switchandanotherdevicebysendingIPpackets(ICMPEchoRequests).
Touseaping6commandwithanIPv6hostnameorfullyqualifieddomain
names,refertoDNSResolverforIPv6onpage9-10.
Youcanissuesingleormultiplepingtestswithvaryingrepetitionsandtimeout
periodstowaitforapingreply.
Repliestoeachpingtestaredisplayedontheconsolescreen.Tostopaping
testbeforeitfinishes,press[Ctrl] [C].
Formoreinformationaboutusingapingtest,refertotheTroubleshooting
appendixinthecurrentManagementandConfigurationGuideforyour
switch.
9-4
IPv6DiagnosticandTroubleshooting
PingforIPv6(Ping6)
Syntax: ping6<ipv6-address|hostname |switch-number >
[repetitions<1-10000>][timeout<1-60>][data-size<0-65507>]
[data-fill<0-1024>][source<ipv6-addr|vid>][oobm]
ping6<link-local-address%vlan<vid>|hostname |switch-number>
[repetitions<1-10000>][timeout<1-60>][data-size<0-65507>]
[data-fill<0-1024>][source<ipv6-addr|vid>][oobm]
PingsthespecifiedIPv6hostbysendingICMPversion6
(ICMPv6)echorequestpacketstothespecifiedhost.
<ipv6-address>:IPv6addressofadestinationhostdevice.
< link-local-address>%vlan<vlan-id>:IPv6link-local
address,where%vlan<vlan-id>specifiestheVLANID
number.
< hostname>:HostnameofanIPv6hostdeviceconfigured
onanIPv6DNSserver.
< switch-number>:NumberofanIPv6-basedswitchthatis
amemberofaswitchstack(IPv6subnet).Validvalues:1-
16.
<oobm>:Forswitchesthathaveaseparateout-of-band
management(OOBM)port,oobmspecifiesthatthetraffic
originatesfromtheout-of-bandmanagementport.
[repetitions<1-10000>]:NumberoftimesthatIPv6ping
packetsaresenttothedestinationIPv6host.Default:1.
[timeout<1-60>]:Numberofsecondswithinwhicharesponse
isrequiredfromthedestinationhostbeforethepingtest
timesout.Validvalues:1-60.Default:1second.
[data-size<0-65471]:Sizeofdata(inbytes)tobesentinping
packets.Validvalues:0- 65471.Default:0.
[data-fill<0-1024>]:Textstringusedasdatainpingpackets.
Range:upto1024alphanumericcharacters;Default:0.
[source<ipv6-addr|vid>]:TheIPv6addressofthepinging
deviceortheVLAN-IDonwhichthepingisbeingsent.
Default: 0(notextisused).
9-5
IPv6DiagnosticandTroubleshooting
PingforIPv6(Ping6)
Pr oCur ve# pi ng6 f e80: : 2: 1%vl an10
f e80: 0000: 0000: 0000: 0000: 0000: 0002: 0001 i s al i ve, t i me = 975 ms
Pr oCur ve# pi ng6 2001: db8: : a: 1c: e3: 3 r epet i t i ons 3
2001: 0db8: 0000: 0000: 000a: 001c: 00e3: 0003 i s al i ve, i t er at i on 1, t i me = 15 ms
2001: 0db8: 0000: 0000: 000a: 001c: 00e3: 0003 i s al i ve, i t er at i on 2, t i me = 15 ms
2001: 0db8: 0000: 0000: 000a: 001c: 00e3: 0003 i s al i ve, i t er at i on 3, t i me = 15 ms
3 packet s t r ansmi t t ed, 3 packet s r ecei ved, 0%packet l oss
r ound- t r i p ( ms) mi n/ avg/ max = 15/ 15/ 15
Pr oCur ve# pi ng6 2001: db8: : 214: c2f f : f e4c: e480 r epet i t i ons 3 t i meout 2
2001: db8: 0000: 0000: 0214: c2f f : f e4c: e480 i s al i ve, i t er at i on 1, t i me = 15 ms
2001: db8: 0000: 0000: 0214: c2f f : f e4c: e480 i s al i ve, i t er at i on 2, t i me = 10 ms
2001: db8: 0000: 0000: 0214: c2f f : f e4c: e480 i s al i ve, i t er at i on 3, t i me = 15 ms
Pr oCur ve# pi ng6 2001: db8: : 10
Request t i med out .
Figure9-1. ExamplesofIPv6PingTests
9-6
IPv6DiagnosticandTroubleshooting
TracerouteforIPv6
TracerouteforIPv6
Thetraceroute6commandenablesyoutotracetheroutefromaswitchtoa
hostdevicethatisidentifiedbyanIPv6addressorIPv6hostname.Inthe
commandoutput,informationoneach(router)hopbetweentheswitchand
thedestinationIPv6addressisdisplayed.
Touseatraceroute6commandwithanIPv6hostnameorfullyqualifieddomain
names,refertoDNSResolverforIPv6onpage9-10.
Notethateachtimeyouperformatracerouteoperation,thetraceroute
commandusesthedefaultsettingsunlessyouenterdifferentvalueswitheach
instanceofthecommand.
Repliestoeachtracerouteoperationaredisplayedontheconsolescreen.To
stopatracerouteoperationbeforeitfinishes,press[Ctrl] [C].
Formoreinformationabouthowtoconfigureanduseatracerouteoperation,
refertotheTroubleshootingappendixintheManagementandConfigura-
tionGuide.
9-7
IPv6DiagnosticandTroubleshooting
TracerouteforIPv6
Syntax: traceroute6<ipv6-address|hostname >
[minttl<1-255>[maxttl<1-255>
[timeout<1-60>][probes<1-5>][source<ipv6-addr |vid |oobm>
traceroute6<link-local-address%vlan<vid>|hostname >
[minttl<1-255>][maxttl<1-255>]
[timeout<1-60>][probes<1-5>][source<ipv6-addr |vid|oobm>
ListstheIPv6addressofeachhopintheroutetothespecified
destinationhostdevicewiththetime(inmicroseconds)
requiredforapacketreplytobereceivedfromeachnext-hop
device.
<ipv6-address>:IPv6addressofadestinationhostdevice.
<link-local-address>%vlan<vlan-id>:IPv6link-localaddress,
where%vlan<vlan-id>specifiestheVLANIDnumber.
<hostname>:HostnameofanIPv6hostdeviceconfiguredon
anIPv6DNSserver.
<oobm>:Forswitchesthathaveaseparateout-of-band
management(OOBM)port,oobmspecifiesthatthetraffic
originatesfromtheout-of-bandmanagementport.
minttl:Minimumnumberofhopsallowedforeachprobe
packetsentalongtheroute.Default:1;Range:1- 255.
Ifthe minttlvalueisgreaterthantheactualnumberofhops,
thetracerouteoutputdisplaysonlythehopsequaltoor
greaterthantheconfiguredminttlthresholdvalue.The
hopsbelowthethresholdvaluearenotdisplayed.
Ifthe minttlvalueisthesameastheactualnumberofhops,
onlythefinalhopisdisplayedinthecommandoutput.
Ifthe minttlvalueislessthantheactualnumberofhops,
allhopstothedestinationhostaredisplayed.
9-8







IPv6DiagnosticandTroubleshooting
TracerouteforIPv6
maxttl:Maximumnumberofhopsallowedforeachprobe
packetsentalongtheroute.Validvalues:1-255.Default:30.
Ifthe maxttlvalueislessthantheactualnumberofhops
requiredtoreachthehost,thetracerouteoutputdisplays
onlytheIPv6addressesofthehopsdetectedbythe
configuredmaxttlvalue.
timeout:Numberofsecondswithinwhicharesponseis
requiredfromtheIPv6deviceateachhopintheroutetothe
destinationhostbeforethetracerouteoperationtimesout.
Default:5seconds;Range:1-60.
probes:Numberoftimesatracerouteisperformedtolocate
theIPv6deviceatanyhopintheroutetothespecifiedhost
beforetheoperationtimesout.Default:3;Range:1-5.
[source<ipv6-addr|vid>]:ThesourceIPv6addressorVLAN
ofthetraceroutedeviceortheVLAN-IDonwhichthe
traceroutepacketisbeingsent.
Pr oCur ve# t r acer out e6 2001: db8: : 10
t r acer out e t o 2001: db8: : 10
1 hop mi n, 30 hops max, 5 sec. t i meout , 3 pr obes
1 2001: db8: : a: 1c: e3: 3 0 ms 0 ms 0 ms
2 2001: db8: 0: 7: : 5 7 ms 3 ms 0 ms
3 2001: db8: : 214: c2f f : f e4c: e480 0 ms 1 ms 0 ms
4 2001: db8: : 10 0 ms 1 ms 0 ms
Pr oCur ve# t r acer out e6 2001: db8: : 10 maxt t l 7
t r acer out e t o f e80: : 1: 2: 3: 4
1 hop mi n, 7 hops max, 5 sec. t i meout , 3 pr obes
1 2001: db8: : a: 1c: e3: 3 0 ms 0 ms 0 ms
2 2001: db8: 0: 7: : 5 0 ms 0 ms 0 ms
3 * 2001: db8: : 214: c2f f : f e4c: e480 *
4 * * *
5 * * *
6 * * *
7 * * *
DestinationIPv6address
Intermediaterouterhopswith
thetime(inmilliseconds)for
theswitchtoreceivea
responsefromeachofthe
threeprobessenttoeach
router.
Athop3,thefirstandthirdprobestimed
out,butthesecondprobereachedthe
router.Eachtimed-outprobeisdisplayed
withanasterisk(*).
Thefourremainingprobeswithinthe
configuredseven-hopmaximum(maxttl)
alsotimedoutwithoutfindinganext-hop
routerorthedestinationIPv6address.
Figure9-2. ExamplesofIPv6TracerouteProbes
9-9
IPv6DiagnosticandTroubleshooting
DNSResolverforIPv6
DNSResolverforIPv6
TheDomainNameSystem(DNS)resolverisdesignedforlocalnetwork
domainswhereitenablesuseofahostnameorfullyqualifieddomainname
tosupportDNS-compatiblecommandsfromtheswitch.Beginningwithsoft-
warereleaseK.13.01,DNSoperationsupportsthesefeatures:
dual-stackoperation:IPv6andIPv4DNSresolution
DNS-compatiblecommands:ping,ping6,traceroute,andtraceroute6
multiple,prioritizedDNSservers(IPv4andIPv6)
DNSConfiguration
UptothreeDNSserverscanbeconfigured.Theaddressesmustbeprioritized,
andcanbeforanycombinationofIPv4andIPv6DNSservers.
Not e ThissectiondescribesthecommandsforconfiguringDNSoperationforIPv6
DNSapplications.ForfurtherinformationandexamplesonusingtheDNS
feature,refertoDNSResolverinappendixC,Troubleshooting,inthe
currentManagementandConfigurationGuideforyourswitch.
Syntax:. [no]ipdnsserver-addresspriority<1-3><ip-addr>[oobm}
Usedattheglobalconfigleveltoconfiguretheaddressand
priorityofaDNSserver.Allowsforconfiguringuptothree
serversprovidingDNSservice.(Theserversmustallbeacces-
sibletotheswitch.)ThecommandallowsbothIPv4andIPv6
serversinanycombinationandanyorderofpriority.
priority<1-3>:IdentifiestheorderinwhichthespecifiedDNS
serverwillbeaccessedbyaDNSresolutionattempt.Aresolu-
tionattempttrieseachconfiguredDNSserveraddress,in
ascendingorderofpriority,untiltheattemptissuccessfulor
allconfiguredserveroptionshavebeentriedandfailed.To
changethepriorityofanexistingserveroption,youmust
removetheoptionfromtheswitchconfigurationandre-enter
itwiththenewpriority.Ifanotherserveraddressisconfig-
uredforthenewpriority,youmustalsoremovethataddress
fromtheconfigurationbeforere-assigningitspriorityto
anotheraddress.
Continuedonthenextpage.
9-10
IPv6DiagnosticandTroubleshooting
DNSResolverforIPv6
Continuedfromthepreviouspage.
Thenoformofthecommandremovesthespecifiedaddress
fromtheserveraddresslistconfiguredontheswitch.
<ip-addr>:SpecifiestheaddressofanIPv6orIPv4DNSserver.
[oobm]:Forswitchesthathaveaseparateout-of-bandmanage-
ment(OOBM)port,thisparameterspecifiesthatcommunica-
tionwiththeDNSservergoesthroughthatOOBMport.
Syntax:. [no]ipdnsdomain-name<domain-name-suffix>
Usedattheglobalconfigleveltoconfigurethedomainsuffix
thatisautomaticallyappendedtothehostnameenteredwith
acommandsupportingDNSoperation.Configuringthe
domainsuffixisoptionalifyouplantousefullyqualified
domainnamesinallcasesinsteadofjustenteringhostnames.
YoucanconfigureuptothreeaddressesforDNSserversinthe
sameordifferentdomains.However,youcanconfigureonly
onedomainnamesuffix.Thismeansthatafullyqualified
domainnamemustbeusedtoresolveaddressesforhoststhat
donotresideinthesamedomainastheoneyouconfigure
withthiscommand.Thatis,ifthedomainnamesuffixand
theaddressofaDNSserverforthatsamedomainareboth
configuredontheswitch,thenyouneedtoenteronlythehost
nameofthedesiredtargetwhenexecutingacommandthat
supportsDNSoperation.ButiftheDNSserverusedtoresolve
thehostnameforthedesiredtargetisinadifferentdomain
thanthedomainconfiguredwiththiscommand,thenyouneed
toenterthefullyqualifieddomainnameforthetarget.
Thenoformofthecommandremovestheconfigureddomain
namesuffix.
Forexample,supposeyouwanttoconfigurethefollowingontheswitch:
theaddress2001:db8::127:10whichidentifiesaDNSserverinthedomain
namedmygroup.procurve.net
apriorityof1fortheaboveserver
thedomainsuffixmygroup.procurve.net
9-11
IPv6DiagnosticandTroubleshooting
DNSResolverforIPv6
Assumethattheabove,configuredDNSserversupportsanIPv6devicehaving
ahostnameofmars-1(andanIPv6addressoffe80::215:60ff:fe7a:adc0)in
themygroup.procurve.netdomain.Inthiscaseyoucanusethedevice'shost
namealonetopingthedevicebecausethemygroup.procurve.netdomainhas
beenconfiguredasthedomainnameontheswitchandtheaddressofaDNS
serverresidinginthatdomainisalsoconfiguredontheswitch.Thecommands
forthesestepsareasfollows:
Pr oCur ve( conf i g) # i p dns ser ver pr i or i t y 1 2001: db8: : 127: 10
Pr oCur ve( conf i g) # i p dns domai n- name mygr oup. pr ocur ve. net
Pr oCur ve( conf i g) # pi ng6 mar s- 1
f e80: : 215: 60f f : f e7a: adc0 i s al i ve, t i me = 1 ms
Figure9-3. ExampleofConfiguringforaLocalDNSServerandPingingaRegisteredDevice
However,forthesamemars-1device,ifmygroup.procurve.netwasnotthe
configureddomainname,youwouldhavetousethefullyqualifieddomain
nameforthedevicenamedmars-1:
Pr oCur ve# pi ng6 mar s- 1. mygr oup. pr ocur ve. net
ForfurtherinformationandexamplesonusingtheDNSfeature,refertoDNS
ResolverinappendixC,Troubleshooting,inthecurrentManagementand
ConfigurationGuideforyourswitch.
ViewingtheCurrentConfiguration
UsetheshowipdnscommandtoviewthecurrentDNSserverconfiguration.
UsetheshowruncommandtoviewboththecurrentDNSserveraddresses
andthecurrentDNSdomainnameintheactiveconfiguration.
OperatingNotes
InsoftwarereleaseK.13.01,DNSaddressingisnotconfigurablefroma
DHCPv6server.
9-12
IPv6DiagnosticandTroubleshooting
Debug/SyslogforIPv6
Debug/SyslogforIPv6
TheDebug/Systemlogging(Syslog)forIPv6featureprovidesthesamelogging
functionsastheIPv4version,allowingyoutorecordIPv4andIPv6EventLog
anddebugmessagesonaremotedevicetotroubleshootswitchornetwork
operation.Forexample,youcansendmessagesaboutroutingmisconfigura-
tionsandothernetworkprotocoldetailstoanexternaldevice,andlateruse
themtodebugnetwork-levelproblems.
ConfiguringDebugandEventLogMessaging
TospecifythetypesofdebugandEventLogmessagesthatyouwanttosend
toanexternaldevice:
Usethedebug<debug-type>commandtosendmessagingreportsforthe
followingtypesofswitchevents:
ACLdenymatches
DHCPsnoopingevents
DynamicARPprotectionevents
EventsrecordedintheswitchsEventLog
IPv4OSPFandRIProutingevents
IPv6DHCPv6clientandNeighborDiscoveryevents
LLDPevents
Usethelogging<severityseverity-level|system-modulesystem-module>
commandtoselectasubsetofEventLogmessagestosendtoanexternal
devicefordebuggingpurposesaccordingto:
Severitylevel
Systemmodule
9-13
IPv6DiagnosticandTroubleshooting
Debug/SyslogforIPv6
DebugCommand
Syntax: [no]debug< debug-type>
ConfiguresthetypesofIPv4andIPv6messagesthataresentto
Syslogserversorotherdebugdestinations,where<debug-type>is
anyofthefollowingeventtypes:
acl
WhenamatchoccursonanACLdenystatementwitha
logparameter,anACLmessageissenttoconfigureddebug
destinations.(Default:Disabled-ACLmessagesfortraffic
thatmatchesdenyentriesarenotsent.)
all
ConfiguresallIPv4andIPv6debugmessagetypestobesent
toconfigureddebugdestinations.(Default:Disabled-No
debugmessagesaresent.)
arp-protect
ConfiguresmessagesforDynamicARPProtectioneventsto
besenttoconfigureddebugdestinations.(Default:Disabled
-Nodebugmessagesaresent.)
event
ConfiguresEventLogmessagestobesenttoconfigured
debugdestinations.
EventLogmessagesareenabledtobeautomaticallysentto
debugdestinationsinthefollowingconditions:
IfnoSyslogserveraddressisconfiguredandyouenter
theloggingcommandtoconfigureadestinationaddress.
IfatleastoneSyslogserveraddressisconfiguredinthe
startupconfigurationandtheswitchisrebootedorreset.
Eventlogmessagesarethedefaulttypeofdebugmessage
senttoconfigureddebugdestinations.
ip
ConfiguresIPv4OSPFandRIProutingmessagestobesent
toconfigureddebugdestinations.
9-14
IPv6DiagnosticandTroubleshooting
Debug/SyslogforIPv6
Syntax:. [no]debug< debug-type>(Continued)
ip[ospf<adj|event|flood|lsa-generation|packet|retransmission
|spf >]
ConfiguresspecifiedIPv4OSPFmessagetypestobesentto
configureddebugdestinations:
adj Adjacencychanges.
event OSPFevents.
flood Informationonfloodmessages.
lsa-generation NewLSAsaddedtodatabase.
packet Packetssent/received.
retransmission Retransmissiontimermessages.
spf Pathrecalculationmessages
ip[rip<database|event|trigger>]
ConfiguresspecifiedIPv4RIPmessagetypestobesentto
configureddebugdestinations:
databaseDatabasechanges
eventRIPevents
triggerTriggermessages
ipv6
ConfiguresmessagesforIPv6DHCPv6clientandneighbor
discoveryeventstobesenttoconfigureddebugdestina-
tions.
ipv6[dhcpv6-client<events|packets>|nd]
ConfiguresoneofthefollowingIPv6messagetypestobe
senttoconfigureddebugdestinations:
dhcpv6-clientseventsDHCPv6clientevents
dhcpv6-clientspacketsStatisticsonDHCPv6packets
transmittedonaswitchconfiguredasaDHCPv6client
ndEventsduringIPv6neighbordiscovery
lldp
ConfiguresallLLDPmessagetypestobesenttoconfigured
debugdestinations.
wireless-services
Configuresmessagesabouttheoperationofwireless-ser-
vicesmodulestobesenttoconfigureddebugdestinations.
9-15
IPv6DiagnosticandTroubleshooting
Debug/SyslogforIPv6
ConfiguringDebugDestinations
ADebug/SyslogdestinationdevicecanbeaSyslogserver(uptosixmaximum)
and/oraconsolesession:
Usethedebugdestination<logging|session|buffer>commandtoenable
(anddisable)SyslogmessagingonaSyslogserverortoaCLIsessionfor
thedebugmessagetypesconfiguredwiththedebugandloggingcom-
mands(seeConfiguringDebugandEventLogMessagingonpage9-13):
debugdestinationloggingenablestheconfigureddebugmessagetypes
tobesenttoSyslogserversconfiguredwiththeloggingcommand.
debugdestinationsessionenablestheconfigureddebugmessagetypes
tobesenttotheCLIsessionthatexecutedthiscommand.Thesession
canbeonanyoneterminalemulationdevicewithserial,Telnet,or
SSHaccesstotheCLIattheManagerlevelprompt.
debugdestinationbufferenablestheconfigureddebugmessagetypes
tobesenttoabufferinswitchmemory.
9-16
IPv6DiagnosticandTroubleshooting
Debug/SyslogforIPv6
LoggingCommand
Syntax: [no]logging< syslog-ipv4-addr >
EnablesordisablesSyslogmessagingtothespecifiedIPv4
address.Youcanconfigureuptosixaddresses.Ifyouconfig-
ureanaddresswhennonearealreadyconfigured,thiscom-
mandenablesdestinationlogging(Syslog)andtheEvent
debugtype.Therefore,ataminimum,theswitchbeginssend-
ingEventLogmessagestoconfiguredSyslogservers.Ifother
debugmessagetypesareconfigured,theyarealsosenttothe
Syslogserver.
nologgingremovesallcurrentlyconfiguredSysloglogging
destinationsfromtherunningconfiguration.
nologging<syslog-ipv4-address>removesonlythespecified
Syslogloggingdestinationfromtherunningconfiguration.
Note:ThenologgingcommanddoesnotdeletetheSyslogserver
addressesstoredinthestartupconfiguration.TodeleteSyslog
addressesinthestartupconfiguration,youmustenterthe
nologgingcommandfollowedbythewritememorycommand.To
verifythedeletionofaSyslogserveraddress,displaythe
startupconfigurationbyenteringtheshowconfigcommand.
ToblockthemessagessenttoconfiguredSyslogserversfrom
thecurrentlyconfigureddebugmessagetype,enterthenodebug
<debug-type>command.
TodisableSyslogloggingontheswitchwithoutdeletingcon-
figuredserveraddresses,enterthenodebugdestinationlogging
command.
ForcompleteinformationonhowtoconfigureaSyslogserverandDebug/
Syslogmessagereports,refertotheTroubleshootingappendixintheMan-
agementandConfigurationGuide.
9-17
IPv6DiagnosticandTroubleshooting
Debug/SyslogforIPv6
9-18

You might also like