Chapter 2
Tools Used in Troubleshooting
S e n d d o c u m e n t c o m m e n t s t o n e x u s 1 k - d o c f e e d b a c k @ c i s c o . c o m .
Authentication refers to the authentication of users for access to a specific device. You can use RADIUS
to manage user accounts for access to an Cisco Nexus 1000V device. When you try to log into a device,
Cisco Nexus 1000V validates you with information from a central RADIUS server.
Authorization refers to the scope of access that you have once you have been authenticated. Assigned
roles for users can be stored in a RADIUS server along with a list of actual devices that the user should
have access to. Once the user has been authenticated, then switch can then refer to the RADIUS server
to determine the extent of access the user will have within the switch network.
Accounting refers to the log information that is kept for each management session in a switch. This
information may be used to generate reports for troubleshooting purposes and user accountability.
Accounting can be implemented locally or remotely (using RADIUS).
The following is an example of an accounting log entries.
n1000v# show accounting log
Sun Dec 15 04:02:27 2002:start:/dev/pts/0_1039924947:admin
Sun Dec 15 04:02:28 2002:stop:/dev/pts/0_1039924947:admin:vsh exited normally
Sun Dec 15 04:02:33 2002:start:/dev/pts/0_1039924953:admin
Sun Dec 15 04:02:34 2002:stop:/dev/pts/0_1039924953:admin:vsh exited normally
Sun Dec 15 05:02:08 2002:start:snmp_1039928528_172.22.95.167:public
Sun Dec 15 05:02:08 2002:update:snmp_1039928528_172.22.95.167:public:Switchname
The accounting log only shows the beginning and ending (start and stop) for each session.
Note
Syslog
The system message logging software saves messages in a log file or directs the messages to other
devices. This feature provides the following capabilities:
•
•
•
Syslog lets you store a chronological log of system messages locally or sent to a central Syslog server.
Syslog messages can also be sent to the console for immediate use. These messages can vary in detail
depending on the configuration that you choose.
Syslog messages are categorized into 7 severity levels from debug to critical events. You can limit the
severity levels that are reported for specific services within the switch.
Log messages are not saved across system reboots. However, a maximum of 100 log messages with a
severity level of critical and below (levels 0, 1, and 2) can logged to a local file or server.
Logging Levels
Cisco Nexus 1000V supports the following logging levels:
•
•
•
•
•
OL-28795-01
Logging information for monitoring and troubleshooting.
Selection of the types of logging information to be captured.
Selection of the destination of the captured logging information.
0-emergency
1-alert
2-critical
3-error
4-warning
Cisco Nexus 1000V Troubleshooting Guide, Release 4.2(1)SV2(2.1)
Syslog
2-5