Copyright © 2014-2017 VMware, Inc. All rights reserved. Copyright and trademark information.
EN-002321-00
NSX-T Command-Line Interface Reference
NSX-T 1.1.0
Table of Contents
About This Book
The NSX-T Command-Line Interface Reference describes how to use the NSX-T
Command-Line Interface (CLI) and includes examples and command overviews.
Intended Audience
The information in this guide is written
for experienced systems and network administrators who are familiar with virtual
machine technology and virtual datacenter operations.
VMware Technical Publications Glossary
VMware Technical Publications provides a glossary of terms that might
be unfamiliar to you. For definitions of terms as they are used in
VMware technical documentation go to
http://www.vmware.com/support/pubs.
Document Feedback
VMware welcomes your suggestions for improving our documentation.
If you have comments, send your feedback to
docfeedback@vmware.com.
Introduction to the NSX-T CLI
Each NSX-T virtual appliance contains a command-line interface (CLI).
The command syntax and output format of NSX-T commands are not guaranteed
to be the same from release to release. If you are automating tasks, please use the
API. See the NSX-T API Guide for details.
Logging In and Out of the CLI
Before you can run CLI commands, you must connect to
an NSX-T virtual appliance. You can connect to the console or through
SSH.
If you did not enable SSH while installing the appliance, you can use the
set service ssh start-on-boot command to enable
the SSH service.
To log out, type exit from Basic mode.
CLI Command Modes
The commands available to you at any given time depend on the mode you
are currently in.
NSX-T CLI Commands
Activate clustering services on this controller. Run the
activate control-cluster command after the controller has joined the cluster.Example
nsx-controller-2> activate control-cluster
Control cluster activation successful.
Mode
Basic
Availability
Controller
Create a backup of NSX Manager cluster data. This backup should
be performed regularly, at least weekly.
If you do not provide a passphrase on the command line, you will be prompted to enter one. The passphrase is used to encrypt the backup. If you forget the passphrase, you will not be able to restore the backup.
Only one of the managers in an NSX Manager cluster is responsible for running cluster backups. If you attempt to run a cluster backup on a different NSX Manager, the response includes the IP address of the NSX Manager that is currently responsible for backups.
Important: This backup command is one part of the backup process. You must complete all backup and restore tasks in the correct order. See the NSX-T Administration Guide for information and instructions about performing backups and restores.
| Option | Description |
|---|---|
| <filename> | Filename argument Allowed pattern: ^[^/ *;&|]+$ |
| <passphrase> | Backup passphrase |
Example
Cluster backup on a manager that is not currently responsible for backups:
nsx-manager-1> backup cluster file backup-cluster-20160314.zip
Passphrase:
% Backups on multi-node clusters can only be initiated on the master node: 192.168.110.202
Cluster backup on a manager that is currently responsible for backups:
nsx-manager-2> backup cluster file backup-cluster-20160314.zip
Passphrase:
nsx-manager-2>
Mode
Basic
Availability
Manager
Create a backup of an NSX Manager node. This backup only needs
to be performed once.
If you do not provide a passphrase on the command line, you will be prompted to enter one. The passphrase is used to encrypt the backup. If you forget the passphrase, you will not be able to restore the backup.
Important: This backup command is one part of the backup process. You must complete all backup and restore tasks in the correct order. See the NSX-T Administration Guide for information and instructions about performing backups and restores.
| Option | Description |
|---|---|
| <filename> | Filename argument Allowed pattern: ^[^/ *;&|]+$ |
| <passphrase> | Backup passphrase |
Example
nsx-manager-1> backup node file backup-node-192.168.110.201-20160314.bak
Passphrase:
nsx-manager-1>
Mode
Basic
Availability
Manager
Move to the bottom of the path. The arrow moves to show which interface is current.
Example
nsx-edge-1(path)> bottom
interface : de650f56-276d-46ef-959e-960752acfe19
interface : 140ca8de-61e0-4bba-b429-6a3791b0846a
port : 9eff9e4e-9157-4107-a0dd-c79350dce6f7
port : 53bab4b1-f0df-451b-af80-0a9d5e580186
interface : 2a7bf881-1f89-4833-833e-47673b79901a
interface : bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
port : 5b2068d0-8c28-4427-8be4-48f422f92309
port : eb3bd495-9ce3-40b4-a955-c2ddc4893cfa
interface : 1fec3ffa-213d-4d2b-ae1b-e12857434846
interface : 13592f56-be3c-4d3d-88de-7d5825dd51bb
port : c588fc5d-dd62-45b2-bc16-3dae466c16c7
port : 2120ef07-05e3-477f-8d96-e2be390784db
interface : 3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278
interface : dd10beb2-3673-43a5-b180-ecc46e830ee0
->port : fdc429ef-d778-421b-bf84-e1063a7bf5ab
Mode
Path
Availability
Edge
Clear the security banner or message of the day. The banner is reset to the system default banner.
Example
nsx> clear banner
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Clear the statistics for the specified BFD session
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> clear bfd-session local-ip 192.168.250.60 remote-ip 192.168.250.61 stats
nsx-edge-1>
Mode
Basic
Availability
Edge
Clear the statistics for all BFD sessions.
Example
nsx-edge-1> clear bfd-session stats
nsx-edge-1>
Mode
Basic
Availability
Edge
Reset all BGP neighbor connections.
Example
nsx-edge-1(tier0_sr)> clear bgp neighbors
nsx-edge-1(tier0_sr)>
Mode
Tier0_sr
Availability
Edge
Clear flow cache statistics for all fastpath cores.
Example
nsx-edge-1> clear dataplane flow-cache stats
nsx-edge-1>
Mode
Basic
Availability
Edge
Turn off BGP debugging.
Example
nsx-edge-1(tier0_sr)> clear debug bgp
nsx-edge-1(tier0_sr)>
Mode
Tier0_sr
Availability
Edge
Turn off IPS tracing
Example
nsx-edge-1(tier0_sr)> clear debug routing ipstrace
nsx-edge-1(tier0_sr)>
Mode
Tier0_sr
Availability
Edge
Clear the Edge cluster state history.
Example
nsx-edge-1> clear edge-cluster history state
nsx-edge-1>
Mode
Basic
Availability
Edge
Disable mandatory access control on the node.
Example
nsx-edge-1> clear hardening-policy mandatory-access-control enabled
Mandatory Access Control is disabled.
Mode
Basic
Availability
Controller, Edge, Manager
Clear the high availability state history for the logical router in the VRF context.
Example
nsx-edge-1(tier1_sr)> clear high-availability history state
nsx-edge-1(tier1_sr)>
Mode
Tier0_sr, Tier1_sr
Availability
Edge
Remove all network configuration from the specified interface.
| Option | Description |
|---|---|
| <interface-name> | Network interface argument |
Example
nsx-edge> clear interface eth0 ip
nsx-edge>
Mode
Basic
Availability
Edge
Clear the network interface plane configuration.
| Option | Description |
|---|---|
| <interface-name> | Configurable network interface argument |
Example
nsx-edge> clear interface eth0 plane
nsx-edge>
Mode
Basic
Availability
Edge
Clear all logging server configuration.
Example
nsx> clear logging-servers
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Clear the high availability state history for the specified logical router. Only service routers have a high availability status. Use the
get logical-routers command to get a list of logical routers and their router types.| Option | Description |
|---|---|
| <uuid> | UUID argument |
Example
nsx-edge-1> clear logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 high-availability history state
nsx-edge-1>
Mode
Basic
Availability
Edge
Destroy NSX environment on this host without removing its transport node from management plane.
Mode
Basic
Availability
ESXi, KVM
Clear all name servers from the DNS configuration.
Example
nsx> clear name-servers
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Clear statistics for the specified physical port.
| Option | Description |
|---|---|
| <physical-port-name> | Datapath String argument |
Example
nsx-edge-1> clear physical-port fp-eth2 stats
nsx-edge-1>
Mode
Basic
Availability
Edge
Remove all domain names from the DNS search list.
Example
nsx> clear search-domains
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Clear the install-upgrade service's enabled property.
Example
nsx-manager-1> clear service install-upgrade enabled
nsx-manager-1>
Mode
Basic
Availability
Manager
Configure the snmp service to not start on boot.
Example
nsx> clear service snmp start-on-boot
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Configure the SSH service to not start on boot.
Example
nsx> clear service ssh start-on-boot
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Copy a local file to a remote destination.
| Option | Description |
|---|---|
| <filename> | Existing file argument |
| <url> | Remote file url (e.g. scp://username@ip_address/filepath/filename) |
Example
nsx> copy file support-bundle-0.tgz url scp://admin@192.168.210.200/home/admin/
admin@192.168.210.200's password:
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Copy a remote file to the local file store. If no destination file is specified, the copied file has the same file name as the source file. You can use the
file argument to specify a different destination file name.| Option | Description |
|---|---|
| <url> | Remote file url (e.g. scp://username@ip_address/filepath/filename) |
| <filename> | Filename argument Allowed pattern: ^[^/ *;&|]+$ |
Example
nsx> copy url scp://admin@192.168.210.200/home/admin/file-0.txt
admin@192.168.210.200's password:
nsx>
or
nsx> copy url scp://admin@192.168.210.200/home/admin/file-1.txt file newfile-1.txt
admin@192.168.210.200's password:
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Deactivate clustering services on this controller. Run the
deactivate control-cluster command after the controller has been detached from the cluster.Example
nsx-controller-2> deactivate control-cluster
Control cluster deactivation successful.
Mode
Basic
Availability
Controller
Delete a packet capture session configuration.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
Example
nsx-edge-1> del capture session 1
nsx-edge-1>
Mode
Basic
Availability
Edge, KVM
Delete a packet capture session configuration.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
Example
nsx-edge-1(path)> del capture session 1
nsx-edge-1(path)>
Mode
Path
Availability
Edge
Delete the specified interface from a packet capture session configuration. If you are only monitoring one interface, this deletes the monitoring session configuration.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
| <interface-name> | Network interface argument |
Example
kvm-1> del capture session 1 interface b592a7c8-4e21-493e-b0fc-0b1d152c949c
kvm-1>
Mode
Basic
Availability
KVM
Delete the specified interface from a packet capture session configuration. If you are only monitoring one interface, this deletes the monitoring session configuration.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
| <port-uuid-name> | Datapath String argument |
Example
nsx-edge-1> del capture session 1 interface fp-eth1
nsx-edge-1>
Mode
Basic
Availability
Edge
Delete a local file.
| Option | Description |
|---|---|
| <filename> | Existing file argument |
Example
nsx> del file support-bundle-0.tgz
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Delete the specified logging server configuration. You can use the
get logging-servers command to display the current logging server configuration.| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | A hostname or IP address with optional port delimited by a colon |
| <proto> | Logging server protocol Allowed values: tcp, udp, tls |
| <level> | Level of log entries to export Allowed values: emerg, alert, crit, err, warning, notice, info, debug |
| <facility> | Comma delimited list of facilities of log entries to export |
| <messageid> | Comma delimited list of MSGIDs of log entries to export |
Example
nsx> del logging-server 192.168.110.60 proto udp level info facility syslog messageid SYSTEM,FABRIC
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Delete the specified name server from the DNS configuration.
| Option | Description |
|---|---|
| <ip-address> | Name server IP address argument |
Example
nsx> del name-server 192.168.110.11
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Remove an existing NTP server.
| Option | Description |
|---|---|
| <hostname-or-ip-address> | A hostname or IP address |
Example
nsx-manager-1> del ntp-server 172.31.32.2
nsx-manager-1>
Mode
Basic
Availability
Controller, Edge, Manager
Delete the specified network route.
| Option | Description |
|---|---|
| <prefix> | CIDR notation argument |
| <gateway-ip> | Gateway IP address argument |
| <interface-name> | Configurable network interface argument |
Example
nsx> del route prefix 10.10.10.0/24 gateway 192.168.110.1
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Delete the specified domain name from the DNS search list.
| Option | Description |
|---|---|
| <domain> | Search domain argument |
Example
nsx> del search-domains eng.example.com
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Delete the specified host entry from the SSH known hosts file.
| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | A hostname or IP address with optional port delimited by a colon |
Example
nsx> del ssh-known-host 192.168.110.105
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Detach the specified controller from the controller cluster. Run the
detach control-cluster command from a controller that will remain in the cluster, not from the controller you intend to detach.| Option | Description |
|---|---|
| <ip-address[:port]> | IP address of an NSX Controller and optional port |
Example
nsx-controller-1> detach control-cluster nsx-controller-2
Successfully detached node from the control cluster.
Mode
Basic
Availability
Controller
Detach the specified controller from the management cluster. The controller must also be removed from the control cluster by logging into the controller CLI and running the
detach control-cluster command on a node other than the one being detached.| Option | Description |
|---|---|
| <controller-node-uuid> | UUID of a controller node |
Example
nsx-manager-1> detach controller cebd518a-b2c5-4b56-8f68-52455284c7eb
The detach operation completed successfully
nsx-manager-1>
Mode
Basic
Availability
Manager
Detach this hypervisor host from the management plane. You can specify any NSX Manager in the management cluster in this command.
Use the API username and password for the specified NSX Manager. If you do not provide a password on the command line, you will be prompted to enter one.
Get the NSX Manager thumbprint by running the get certificate api thumbprint command on the specified NSX Manager.
| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | Hostname or IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
Example
host-1> detach management-plane 192.168.110.105 username admin thumbprint 898b75618e3e56615d53f987a720ff22b6381f4b85bec1eb973214ff7361f8b8
Password for API user:
Node successfully removed
Mode
Basic
Availability
ESXi, KVM
Detach this Edge from the management plane.
| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | Hostname or IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
Example
nsx-edge> detach management-plane 192.168.110.105 username admin thumbprint 7f1374c339b592da504b352857a0bdc4e77b9b998a9971f9335633210f667c97
Password for API user:
Node successfully deregistered
Mode
Basic
Availability
Edge
Detach this keymanager from the management plane. You can specify any NSX Manager in the management cluster in this command.
Use the API username and password for the specified NSX Manager. If you do not provide a password on the command line, you will be prompted to enter one.
Get the NSX Manager thumbprint by running the get certificate api thumbprint command on the specified NSX Manager.
| Option | Description |
|---|---|
| <ip-address[:port]> | IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
Example
nsx-keymanager-1> detach management-plane 192.168.110.105 username admin
thumbprint fef089bbfbd2e10da6ee08c7ff4a95da1368587abfd2c6db59c8db540bc43e58
Password for API user:
Node successfully unregistered and keymanager service stopped
Mode
Basic
Availability
Move down the path. The arrow moves to show which interface is current.
Example
nsx-edge-1(path)> get path
interface : de650f56-276d-46ef-959e-960752acfe19
interface : 140ca8de-61e0-4bba-b429-6a3791b0846a
port : 9eff9e4e-9157-4107-a0dd-c79350dce6f7
port : 53bab4b1-f0df-451b-af80-0a9d5e580186
interface : 2a7bf881-1f89-4833-833e-47673b79901a
interface : bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
port : 5b2068d0-8c28-4427-8be4-48f422f92309
port : eb3bd495-9ce3-40b4-a955-c2ddc4893cfa
interface : 1fec3ffa-213d-4d2b-ae1b-e12857434846
interface : 13592f56-be3c-4d3d-88de-7d5825dd51bb
port : c588fc5d-dd62-45b2-bc16-3dae466c16c7
->port : 2120ef07-05e3-477f-8d96-e2be390784db
interface : 3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278
interface : dd10beb2-3673-43a5-b180-ecc46e830ee0
port : fdc429ef-d778-421b-bf84-e1063a7bf5ab
nsx-edge-1(path)> down
interface : de650f56-276d-46ef-959e-960752acfe19
interface : 140ca8de-61e0-4bba-b429-6a3791b0846a
port : 9eff9e4e-9157-4107-a0dd-c79350dce6f7
port : 53bab4b1-f0df-451b-af80-0a9d5e580186
interface : 2a7bf881-1f89-4833-833e-47673b79901a
interface : bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
port : 5b2068d0-8c28-4427-8be4-48f422f92309
port : eb3bd495-9ce3-40b4-a955-c2ddc4893cfa
interface : 1fec3ffa-213d-4d2b-ae1b-e12857434846
interface : 13592f56-be3c-4d3d-88de-7d5825dd51bb
port : c588fc5d-dd62-45b2-bc16-3dae466c16c7
port : 2120ef07-05e3-477f-8d96-e2be390784db
->interface : 3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278
interface : dd10beb2-3673-43a5-b180-ecc46e830ee0
port : fdc429ef-d778-421b-bf84-e1063a7bf5ab
Mode
Path
Availability
Edge
Exit the VRF context mode if you are in it. Otherwise, exit the CLI.
Example
nsx-edge-1> vrf 1
nsx-edge-1(tier1_sr)> exit
nsx-edge-1>
Mode
Availability
Controller, Edge, ESXi, KVM, Manager
Display the ARP table.
Example
nsx-manager-1> get arp-table
Protocol Address Hardware Addr Type Interface
Internet 192.168.110.201 00:50:56:a9:8a:8c ether eth0
Internet 192.168.110.101 00:50:56:a9:45:29 ether eth0
Internet 192.168.110.1 68:ef:bd:4e:98:7f ether eth0
Internet 192.168.110.10 00:50:56:a6:e0:14 ether eth0
Mode
Basic
Availability
Controller, Edge, Manager
Display the ARP table for the logical router in the VRF context.
Example
nsx-edge-1(vrf)> get context arp-table
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
arp
interface : c66fc321-df74-4aaa-835e-95dc815fe7ae
IP : 172.16.130.13
MAC : 00:50:56:8e:3e:0b
state : perm
interface : f6ef3b50-64a0-4948-ab9e-9135963d4b8b
IP : 169.0.0.2
MAC : 02:50:56:00:00:05
state : reach
timeout : 429
interface : be290c92-74ed-437c-bbf1-dd78673b6a5a
IP : 172.16.120.11
MAC : 00:50:56:8e:15:e5
state : reach
timeout : 482
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
IP : 172.16.110.11
MAC : 00:50:56:8e:91:12
state : perm
Mode
VRF, Tier0_sr, Tier1_sr
Availability
Edge
Get the amount of time, in seconds, that an account will remain locked
out of the API after exceeding the maximum number of failed
authentication attempts.
Example
nsx> get auth-policy api lockout-period
900 seconds
Mode
Basic
Availability
Manager
In order to trigger an account lockout, all authentication
failures must occur in this time window. If the reset
period exprires, the failed login count is reset to zero.
Example
nsx> get auth-policy api lockout-period
300 seconds
Mode
Basic
Availability
Manager
Get the number of failed API authentication attempts that are
allowed before the account is locked. If set to 0, account
lockout is disabled.
Example
nsx> get auth-policy api max-auth-failures
5
Mode
Basic
Availability
Manager
Get the amount of time, in seconds, that an account will remain locked
out of the CLI after exceeding the maximum number of failed
authentication attempts.
Example
nsx> get auth-policy cli lockout-period
900 seconds
Mode
Basic
Availability
Controller, Edge, Manager
Get the number of failed CLI authentication attempts that are
allowed before the account is locked. If set to 0, account
lockout is disabled.
Example
nsx> get auth-policy cli max-auth-failures
3
Mode
Basic
Availability
Controller, Edge, Manager
Get the minimum number of characters that passwords must have.
Example
nsx> get auth-policy minimum-password-length
8 characters
Mode
Basic
Availability
Controller, Edge, Manager
Display parameters defined in global logical router BFD
Example
nsx-edge-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 bfd-config
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : SERVICE_ROUTER_TIER0
BFD configurations:
Enabled : true
Min RX Interval: 1000
Min TX Interval: 1000
Min RX TTL : 255
Multiplier : 3
Mode
Tier0_sr
Availability
Edge
Display information about the specified BFD session.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> get bfd-session local-ip 192.168.250.60 remote-ip 192.168.250.61
BFD Session
Diag : Control Detection Time Expired(from local)
Forwarding : last true (current true)
Last_down_time : 2016-02-09 22:38:47
Last_up_time : 2016-02-09 22:38:52
Local_address : 192.168.250.60
Remote_address : 192.168.250.61
Remote_diag : No Diagnostic
Remote_state : up
Rx_cfg_min : 500
Rx_interval : 500
State : up
Tx_cfg_min : 100
Tx_interval : 500
Mode
Basic
Availability
Edge
Display statistics for the specified BFD session.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> get bfd-session local-ip 192.168.250.60 remote-ip 192.168.250.61 stats
BFD Session
Admin_down_count : 0
Cpath_down_count : 0
Down_count : 1
Local_address : 192.168.250.60
Remote_address : 192.168.250.61
Rx_drop : 0
Rx_drop_admin_down : 0
Rx_drop_auth_set : 0
Rx_drop_bad_version : 0
Rx_drop_intf_unmatch : 0
Rx_drop_multipoint_set: 0
Rx_drop_null_my_disc : 0
Rx_drop_null_your_disc: 0
Rx_drop_pkt_len_unmatch: 0
Rx_drop_pkt_too_short: 0
Rx_drop_rx_ttl_small : 0
Rx_drop_your_disc_unmatch: 0
Rx_drop_zero_multipier: 0
Rx_packets : 44993
Tx_error : 0
Tx_packets : 49249
Up_count : 2
Mode
Basic
Availability
Edge
Display BFD sessions in a logical router
Example
nsx-edge-1> get logical-r 9d9668b8-d850-49ce-a88d-49bcb0425748 bfd-session
Logical Router
UUID : 9d9668b8-d850-49ce-a88d-49bcb0425748
vrf : 1
type : PLR-SR
Port : a10753a7-40d9-4fcc-bff1-58746042ad05
BFD sessions:
Source : 13.13.13.12
Peer : 13.13.13.13
Enabled : True
State : Unreachable
Min RX Interval: 1001
Min TX Interval: 1002
RX TTL : 255
Multiplier : 3
User(count) : BGP(1)
Mode
Tier0_sr
Availability
Edge
Display information about BFD sessions.
Example
nsx-edge-1> get bfd-sessions
BFD Session
Diag : Control Detection Time Expired(from local)
Forwarding : last true (current true)
Last_down_time : 2016-02-09 22:38:47
Last_up_time : 2016-02-09 22:38:52
Local_address : 192.168.250.60
Remote_address : 192.168.250.62
Remote_diag : No Diagnostic
Remote_state : up
Rx_cfg_min : 500
Rx_interval : 500
State : up
Tx_cfg_min : 100
Tx_interval : 500
BFD Session
Diag : Control Detection Time Expired(from local)
Forwarding : last true (current true)
Last_down_time : 2016-02-09 22:38:47
Last_up_time : 2016-02-09 22:38:52
Local_address : 192.168.250.60
Remote_address : 192.168.250.61
Remote_diag : No Diagnostic
Remote_state : up
Rx_cfg_min : 500
Rx_interval : 500
State : up
Tx_cfg_min : 100
Tx_interval : 500
Mode
Basic
Availability
Edge
Display the BFD sessions statistics.
Example
nsx-edge-1> get bfd-sessions stats
BFD Global Counters
Bfd_sessions_count : 2
Last_notify_time : 2016-02-09 22:38:52
Last_nsxa_msg_receive_time: 2016-02-09 22:38:52
Nsxa_connect_count : 1
Nsxa_disconnect_count: 0
Nsxa_err_msg_receive_count: 0
Nsxa_msg_receive_count: 166085
Nsxa_notify_count : 107287
Rx_drop_bad_csum : 0
Rx_drop_count : 32
Rx_drop_intf_type : 0
Rx_drop_ip_mismatch : 0
Rx_drop_non_bfd : 0
Rx_drop_non_udp : 0
Rx_drop_null_bfd_session: 32
Rx_drop_null_intf : 0
Rx_drop_runt_pkt : 0
Rx_drop_udp_len : 0
BFD Session
Admin_down_count : 0
Cpath_down_count : 0
Down_count : 1
Local_address : 192.168.250.60
Remote_address : 192.168.250.62
Rx_drop : 0
Rx_drop_admin_down : 0
Rx_drop_auth_set : 0
Rx_drop_bad_version : 0
Rx_drop_intf_unmatch : 0
Rx_drop_multipoint_set: 0
Rx_drop_null_my_disc : 0
Rx_drop_null_your_disc: 0
Rx_drop_pkt_len_unmatch: 0
Rx_drop_pkt_too_short: 0
Rx_drop_rx_ttl_small : 0
Rx_drop_your_disc_unmatch: 0
Rx_drop_zero_multipier: 0
Rx_packets : 44754
Tx_error : 0
Tx_packets : 48989
Up_count : 2
.
.
.
Mode
Basic
Availability
Edge
Display all BGP learned routes.
Example
nsx-edge-1(tier0_sr)> get bgp
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf MED AS Path
* 0.0.0.0/0 192.168.100.253 100 0 64521 !
* 10.10.10.0/24 192.168.100.253 100 0 64521 I
* 172.16.110.0/24 169.0.0.1 100 0 !
* 172.16.120.0/24 169.0.0.1 100 0 !
* 172.16.130.0/24 169.0.0.1 100 0 !
Mode
Tier0_sr
Availability
Edge
Display all BGP NLRI matching the community.
| Option | Description |
|---|---|
| <bgp-community> | Bgp Community argument |
Example
nsx-edge-1(tier0_sr)> get bgp community 100:28
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf Weight MED AS Path
* 28.28.28.0/24 192.168.10.3 100 0 0 101 I
Mode
Tier0_sr
Availability
Edge
Display all BGP neighbor information.
Example
nsx-edge-1(tier0_sr)> get bgp neighbor
BGP neighbor: 192.168.100.253 Remote AS: 64521
BGP state: Established, up
Hold Time: 3s Keepalive Interval: 1s
Capabilities:
Route Refresh: advertised and received
Address Family: IPv4 Unicast:advertised and received
Graceful Restart: none
Restart Remaining Time: 0
Messages: 6011 received, 6009 sent
Minimum time between advertisements: 30s (default)
For Address Family IPv4 Unicast:advertised and received
Route Refresh: 0 received, 0 sent
Prefixes: 2 received, 3 sent, 3 advertised
1 Connections established, 1 dropped
Local host: 192.168.100.103, Local port: 52202
Remote host: 192.168.100.253, Remote port: 179
Mode
Tier0_sr
Availability
Edge
Display information about the specified BGP neighbor.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-edge-1(tier0_sr)> get bgp neighbor 192.168.100.253
BGP neighbor: 192.168.100.253 Remote AS: 64521
BGP state: Established, up
Hold Time: 3s Keepalive Interval: 1s
Capabilities:
Route Refresh: advertised and received
Address Family: IPv4 Unicast:advertised and received
Graceful Restart: none
Restart Remaining Time: 0
Messages: 6131 received, 6129 sent
Minimum time between advertisements: 30s (default)
For Address Family IPv4 Unicast:advertised and received
Route Refresh: 0 received, 0 sent
Prefixes: 2 received, 3 sent, 3 advertised
1 Connections established, 1 dropped
Local host: 192.168.100.103, Local port: 52202
Remote host: 192.168.100.253, Remote port: 179
Mode
Tier0_sr
Availability
Edge
Display routes advertised to the specified BGP neighbor.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-edge-1(tier0_sr)> get bgp neighbor 192.168.100.253 advertised-routes
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf MED AS Path
172.16.110.0/24 192.168.100.103 0 0 64520 !
172.16.120.0/24 192.168.100.103 0 0 64520 !
172.16.130.0/24 192.168.100.103 0 0 64520 !
Mode
Tier0_sr
Availability
Edge
Display routes learned from the specified BGP neighbor.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-edge-1(tier0_sr)> get bgp neighbor 192.168.100.253 routes
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf MED AS Path
* 0.0.0.0/0 192.168.100.253 100 0 64521 !
* 10.10.10.0/24 192.168.100.253 100 0 64521 I
Mode
Tier0_sr
Availability
Edge
Display summarized BGP neighbor information.
Example
nsx-edge-1(tier0_sr)> get bgp neighbor summary
BGP summary information for VRF default
Router ID: 192.168.10.2 Local AS: 100
Neighbor AS State Up/DownTime #InMsgs #OutMsgs #InPfx #OutPfx
192.168.10.3 101 Establ 0d0h0m11s 17 13 5 0
192.168.10.6 4000 Active 0d0h0m0s 0 0 0 0
Mode
Tier0_sr
Availability
Edge
Display the bond interface with the specified name. Specify the
stats argument to display the statistics for the interface.| Option | Description |
|---|---|
| <bond-name> | Datapath device name argument |
Example
nsx-edge-1> get bond bond0
Bond
Hash algorithm : layer 2+3+4
Mode : lacp active
Name : bond0
Port id : 2
Slaves :
Name : fp-eth0
LACP state :
Local admin key : 11
Local oper key : 11
Local oper port state : ACT FTO AGG DEF
Local port internal state: LACP_ENABLED
Local port number : 1
Local port priority : 255
Local port rx machine state: DEFAULTED
Local timeout cfg : fast
Partner age in sec : 2
Partner device id : 00:00:00:00:00:00
Partner mode : LACP passive
Partner oper key : 0
Partner oper port state:
Partner port number : 0
Partner port priority : 0
Partner timeout cfg : slow
State : stand-alone
State : active
Name : fp-eth1
LACP state :
Local admin key : 11
Local oper key : 11
Local oper port state : ACT FTO AGG DEF
Local port internal state: LACP_ENABLED
Local port number : 2
Local port priority : 255
Local port rx machine state: DEFAULTED
Local timeout cfg : fast
Partner age in sec : 2
Partner device id : 00:00:00:00:00:00
Partner mode : LACP passive
Partner oper key : 0
Partner oper port state:
Partner port number : 0
Partner port priority : 0
Partner timeout cfg : slow
State : stand-alone
State : active
Status : up
nsx-edge-1> get bond bond0 stats
Bond
Name : bond0
Slaves :
Name : fp-eth0
LACP drops : 0
Rx LACP errors : 0
Rx LACP pdus : 10
Tx LACP errors : 0
Tx LACP pdus : 10
Name : fp-eth1
LACP drops : 0
Rx LACP errors : 0
Rx LACP pdus : 10
Tx LACP errors : 0
Tx LACP pdus : 10
name : bond0
rx_bytes : 1488
rx_drop_no_match : 0
rx_errors : 0
rx_misses : 0
rx_nombufs : 0
rx_packets : 12
tx_bytes : 0
tx_drops : 0
tx_errors : 0
tx_packets : 0
Mode
Basic
Availability
Edge
Display all bond interfaces. Specify the
stats argument to display the statistics for the interfaces.Example
nsx-edge-1> get bonds
Bond
Hash algorithm : layer 2+3+4
Mode : lacp active
Name : bond0
Port id : 2
Slaves :
Name : fp-eth0
LACP state :
Local admin key : 11
Local oper key : 11
Local oper port state : ACT FTO AGG DEF
Local port internal state: LACP_ENABLED
Local port number : 1
Local port priority : 255
Local port rx machine state: DEFAULTED
Local timeout cfg : fast
Partner age in sec : 2
Partner device id : 00:00:00:00:00:00
Partner mode : LACP passive
Partner oper key : 0
Partner oper port state:
Partner port number : 0
Partner port priority : 0
Partner timeout cfg : slow
State : stand-alone
State : active
Name : fp-eth1
LACP state :
Local admin key : 11
Local oper key : 11
Local oper port state : ACT FTO AGG DEF
Local port internal state: LACP_ENABLED
Local port number : 2
Local port priority : 255
Local port rx machine state: DEFAULTED
Local timeout cfg : fast
Partner age in sec : 2
Partner device id : 00:00:00:00:00:00
Partner mode : LACP passive
Partner oper key : 0
Partner oper port state:
Partner port number : 0
Partner port priority : 0
Partner timeout cfg : slow
State : stand-alone
State : active
Status : up
nsx-edge-1> get bonds stats
Bond
Name : bond0
Slaves :
Name : fp-eth0
LACP drops : 0
Rx LACP errors : 0
Rx LACP pdus : 10
Tx LACP errors : 0
Tx LACP pdus : 10
Name : fp-eth1
LACP drops : 0
Rx LACP errors : 0
Rx LACP pdus : 10
Tx LACP errors : 0
Tx LACP pdus : 10
name : bond0
rx_bytes : 1488
rx_drop_no_match : 0
rx_errors : 0
rx_misses : 0
rx_nombufs : 0
rx_packets : 12
tx_bytes : 0
tx_drops : 0
tx_errors : 0
tx_packets : 0
Mode
Basic
Availability
Edge
Display information about the specified bridge.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
esx-1> get bridge 69377c84-c661-4935-956b-e42399411b2b
Bridge
-------------------------------------------------------------------------------------
Bridge UUID : 69377c84-c661-4935-956b-e42399411b2b
DVS name : nsxvswitch
Ref count : 2
Number of networks : 2
Number of uplinks : 0
Mode
Basic
Availability
ESXi
Display MAC table for the specified bridge.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
esx-1> get bridge 255e190d-2a9e-4ca0-917e-80dfbb89ac34 mac-table
Bridge MAC Table
-----------------------------------------------------------------------------------------------
MAC Address Type VLAN ID VXLAN ID Destination Port Age
===============================================================================================
00:50:56:86:7c:9f Dynamic 0 33672 50331650 2
00:50:56:86:ee:f1 Dynamic 16 0 50331650 2
Mode
Basic
Availability
ESXi
Display networks on the specified bridge.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
esx-1> get bridge 69377c84-c661-4935-956b-e42399411b2b networks
Bridge Networks
-----------------------------------------------------------------------------------------------
Network name : vxlan-48009-type-bridging
Ref count : 2
Network type : 1
VLAN ID : 0
VXLAN ID : 48009
Ageing time : 300
Fdb entry hold time : 1
FRP filter enable : True
port ID : 50331679
Ref count : 1
VLAN ID : 4095
IOChains installed : 0
Network name : vlan-150-type-bridging
Ref count : 2
Network type : 1
VLAN ID : 150
VXLAN ID : 0
Ageing time : 300
Fdb entry hold time : 1
FRP filter enable : True
port ID : 50331679
Ref count : 1
VLAN ID : 4095
IOChains installed : 0
Mode
Basic
Availability
ESXi
Display information about bridges on this bridge node.
Example
esx-1> get bridges
Bridges Summary
----------------------------------------------------------------------
Bridge UUID Number of networks Ref count
69377c84-c661-4935-956b-e42399411b2b 2 1
Mode
Basic
Availability
ESXi
Display the whole cache table. Optionally specify arguments to display only the local configuration, remote configuration, local L2, or remote L2 information.
Example
ESXi-1> get cache-table config local
Type Entity State Version Property
VIF c1e6743d-403a-4495-b3c0-a5f6a4c70899 INVALID_STATE 0
VIF c1e6743d-403a-4495-b3c0-a5f6a4c70899 VIF_MAC 0 state_type: VIF_MAC
vif_macs {
mac: 52234243676
}
ESXi-1> get cache-table l2 remote
Entry VNI RoutingDomainID Type Version Value
VNI 48008 0
VNI 48008 VTEP 0 vtep {
vtep_ip {
ipv4: 3232258054
}
vtep_label {
label: 30721
}
segment_id {
ipv4: 3232235520
}
vtep_mac {
mac: 345046909758
}
bfd_enabled: false
}
VNI 48008 VM_MAC 0 vm_mac {
vm_mac {
mac: 52241337010
}
vtep_ip {
ipv4: 3232258054
}
vtep_mac {
mac: 345046909758
}
}
Mode
Basic
Availability
Edge, ESXi, KVM
Display information about the specified packet capture session.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
Example
nsx-edge-1> get capture session 1
Packet Capture Session
ID : 1
PORTS : ['fp-eth0', 'fp-eth1']
Mode
Basic
Availability
Edge, KVM
Display configured packet capture sessions. Session 0 is reserved for captures started with the
start capture interface <interface-name> command.Example
nsx-edge-1> get capture sessions
Packet Capture Session
ID : 0
PORTS : []
Packet Capture Session
ID : 1
PORTS : ['fp-eth0', 'fp-eth1']
Packet Capture Session
ID : 2
PORTS : ['d0c59cee-6095-5eeb-815b-ae6732d749e4']
Packet Capture Session
ID : 3
PORTS : []
Mode
Basic
Availability
Edge, KVM
Display the API server's certificate.
Example
nsx-manager-1> get certificate api
-----BEGIN CERTIFICATE-----
MIIDfzCCAmegAwIBAgIEVQEDTTANBgkqhkiG9w0BAQsFADBwMQswCQYDVQQGEwJVUzELMAkGA1UE
...
/JbzbimmEgaC3Yy5rOZXUnhn+dANkUShIeGIpOnH7rpLrrPYcB1Hx31jieY=
-----END CERTIFICATE-----
Mode
Basic
Availability
Manager
Display the API server's certificate thumbprint.
Example
nsx-manager-1> get certificate api thumbprint
82d99b793ff84f1f1f01f420656975522a03b9bebe87c50bcff80e7d3ebe8705
Mode
Basic
Availability
Manager
Display the translations for the specified container group. Specify the
translation type argument to display translations of a specific type.| Option | Description |
|---|---|
| <uuid> | Cgroup identifier |
| <translation-type> | Translation type Allowed values: logical-objects, ips, vifs, macs |
Example
nsx-controller-1> get cgroup 2d22c229-bffb-405a-8246-8e50c01d1fc6 logical-objects
id: 2d22c229-bffb-405a-8246-8e50c01d1fc6, type: Container
id: 1d467d11-df42-4eff-96d0-3018c0fc6e93, type: Container
id: 6e05fa9f-72d2-4102-8970-d93a301b93d8, type: Container
Mode
Basic
Availability
Controller
Display all container groups.
Example
nsx-controller-1> get cgroups
id: 2d22c229-bffb-405a-8246-8e50c01d1fc6, type: Container
id: 31c4853f-3e2e-458b-ad64-6164c66ebb66, type: Container
id: fb4781b1-a748-4009-bfa6-06ab7edeb98e, type: Container
id: d807d5d9-f9ca-4863-8ab5-b209ba42ed64, type: Container
Mode
Basic
Availability
Controller
Display container groups with the specified IP address.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-controller-1> get cgroups with ip 192.168.1.2
id: fb4781b1-a748-4009-bfa6-06ab7edeb98e, type: Container
Mode
Basic
Availability
Controller
Display container groups with the specified MAC address.
| Option | Description |
|---|---|
| <hardware-address> | Network hardware address argument |
Example
nsx-controller-1> get cgroups with mac 00:50:56:8e:13:51
id: 31c4853f-3e2e-458b-ad64-6164c66ebb66, type: Container
Mode
Basic
Availability
Controller
Display container groups with the specified network interface.
| Option | Description |
|---|---|
| <vif> | VIF ID |
Example
nsx-controller-1> get cgroups with vif vif-15
id: d807d5d9-f9ca-4863-8ab5-b209ba42ed64, type: Container
Mode
Basic
Availability
Controller
Show inactivity timeout in seconds.
Example
nsx> get cli-timeout
1200 seconds
Mode
Basic
Availability
Controller, Edge, Manager
Display the current date and time.
Example
nsx> get clock
Sat Dec 12 2015 UTC 00:11:33.168
Mode
Basic
Availability
Controller, Edge, Manager
Display information for a specific entity in the netcpa state cache.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
ESXi-1> get config-entity d4488025-61ee-4a48-8084-cd1d6d336d4d
Type Version Property
INVALID_PROPERTY 1
LSP_SWITCH_ID 1 property_type: LSP_SWITCH_ID
lsp_switch_id {
left: 1115610831154593976
right: 11409124099256201133
}
LSP_IP_DISCOVERY 1 property_type: LSP_IP_DISCOVERY
lsp_ip_discovery {
arp_snooping_enabled: true
dhcp_snooping_enabled: true
}
LSP_ATTACHMENT 1 property_type: LSP_ATTACHMENT
lsp_attachment {
vif_attachment {
vif_id: "c1e6743d-403a-4495-b3c0-a5f6a4c70899"
type: VM
}
}
LSP_SWITCH_SECURITY 1 property_type: LSP_SWITCH_SECURITY
lsp_switch_security {
config_spoof_guard {
enable: false
port_enable: false
}
dhcp_client_filter: false
dhcp_server_filter: true
bpdu_filter: true
dhcp_snooping: false
block_non_ip_traffic: false
}
LSP_ADMIN_STATE_UP 1 property_type: LSP_ADMIN_STATE_UP
lsp_admin_state_up: true
LSP_MAC_MANAGEMENT 1 property_type: LSP_MAC_MANAGEMENT
lsp_mac_management {
mac_change_allowed: false
mac_learning {
unicast_flooding_allowed: false
aging_time: 300
enabled: false
}
}
LSP_QOS 1 property_type: LSP_QOS
lsp_qos {
dscp {
trust_mode: TRUSTED
dscp_value: 0
}
cos: 0
shaper_config {
type: INGRESS_RATE
average: 0
peak: 0
burst: 0
}
shaper_config {
type: INGRESS_BROADCAST_RATE
average: 0
peak: 0
burst: 0
}
shaper_config {
type: EGRESS_RATE
average: 0
peak: 0
burst: 0
}
}
Mode
Basic
Availability
Edge, ESXi, KVM
Display configuration settings in command line syntax.
Example
nsx> get configuration
!
set route prefix 0.0.0.0/0 gateway 192.168.110.1 interface eth0
set route prefix 192.168.110.0/24 interface eth0
set search-domains example.com
set timezone Etc/UTC
set name-servers 192.168.110.10
set ntp-server 0.ubuntu.pool.ntp.org
set ntp-server 1.ubuntu.pool.ntp.org
set ntp-server 2.ubuntu.pool.ntp.org
set ntp-server 3.ubuntu.pool.ntp.org
set ntp-server ntp.ubuntu.com
set hostname nsx
Mode
Basic
Availability
Controller, Edge, Manager
Display control channel connection information for the specified hypervisor host.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-controller-1> get control-channel ip 192.168.210.51 connection
Host-IP Port ID
192.168.210.51 27386 648
Mode
Basic
Availability
Controller
Display control channel connection statistics for the specified hypervisor host.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-controller-1> get control-channel ip 192.168.210.51 connection-stats
messages.received 43352
messages.received.dropped 0
messages.transmitted 43429
messages.transmit.dropped 0
Mode
Basic
Availability
Controller
Display statistics for the controller to hypervisor control channel.
Example
nsx-controller-1> get control-channel stats
messages.received 86928
messages.received.dropped 0
messages.transmitted 87784
messages.transmit.dropped 0
messages.processing.dropped 0
connections.up 5
connections.down 3
connections.timeout 3
connections.active 2
Mode
Basic
Availability
Controller
Display statistics over time for the controller to hypervisor control channel.
Example
nsx-controller-1> get control-channel stats-sample
23:56:30 23:56:40 23:56:50 23:57:00 23:57:10 23:57:20 23:57:30 23:57:40 23:57:50 23:58:00
messages.received 86922 86924 86926 86928 86930 86932 86934 86936 86938 86940
messages.received.dropped 0 0 0 0 0 0 0 0 0 0
messages.transmitted 87778 87780 87782 87784 87786 87788 87790 87792 87794 87796
messages.transmit.dropped 0 0 0 0 0 0 0 0 0 0
messages.processing.dropped 0 0 0 0 0 0 0 0 0 0
connections.up 5 5 5 5 5 5 5 5 5 5
connections.down 3 3 3 3 3 3 3 3 3 3
connections.timeout 3 3 3 3 3 3 3 3 3 3
connections.active 2 2 2 2 2 2 2 2 2 2
Mode
Basic
Availability
Controller
Display the controller cluster thumbprint. The security model for this controller must be set before using this command. Use the
set control-cluster security-model command to set the security model.Example
nsx-controller-1> get control-cluster certificate thumbprint
b821493e3cbf1f04af002fae2d44c1dc7459793bdf4385794b0903efa497dbeb
Mode
Basic
Availability
Controller
Create a certificate signing request (CSR).
| Option | Description |
|---|---|
| <csr-filename> | Name for the CSR file Allowed pattern: ^[^/ *;&|]+$ |
Example
nsx-controller-1> get control-cluster csr file.csr
Common Name (e.g. server FQDN or YOUR name): nsx-controller.example.com
Country Name (2 letter code): US
State or Province Name (full name): California
Locality Name (e.g., city): Palo Alto
Organization Name (e.g., company): Example, Inc
Organizational Unit Name (e.g, section): IT
Successfully created a certificate signing request.
Mode
Basic
Availability
Controller
Get the controller cluster status.
Example
nsx-controller-1> get control-cluster status
uuid: a463a496-d8fe-4135-a60a-665333a5624a
is master: true
in majority: true
uuid address status
a463a496-d8fe-4135-a60a-665333a5624a 192.168.110.108 active
32ccb0aa-d74a-44f4-b76a-12716a759e32 192.168.110.109 active
b49e4c31-1d2e-4600-9fed-66ae1d8862b9 192.168.110.110 active
Mode
Basic
Availability
Controller
Get verbose controller cluster status.
Example
nsx-controller-1> get control-cluster status verbose
NSX Controller Status:
uuid: 9d61f3df-60d3-4c02-a6dc-75237ec5edbe
is master: false
in majority: true
uuid address status
adc96b47-8067-49c0-98cc-d427f5ab2406 10.160.95.64 active
9d61f3df-60d3-4c02-a6dc-75237ec5edbe 10.161.4.7 active
27634f7c-b905-4c26-967c-9252acbf6db2 10.161.8.34 active
Cluster Management Server Status:
uuid rpc address rpc port global id vpn address status
64bb9678-af32-4658-973c-e6a77bdfffd1 10.161.4.7 7777 1 10.0.0.1 connected
2c7396cb-9612-4b6f-b006-81c0bd21b791 10.161.8.34 7777 2 10.0.0.2 connected
db0b6963-65c6-4405-96d9-153a79c7f3f4 10.160.95.64 7777 3 10.0.0.3 connected
Zookeeper Ensemble Status:
Zookeeper Server IP: 10.0.0.1, reachable, ok
Zookeeper version: 3.5.1-alpha--1, built on 12/03/2015 14:18 GMT
Latency min/avg/max: 0/0/105
Received: 93104
Sent: 93324
Connections: 7
Outstanding: 0
Zxid: 0x100000215
Mode: leader
Node count: 51
Connections:
/10.0.0.3:47335[1](queued=0,recved=6189,sent=6197,sid=0x10000104d2c0044,lop=PING,est=1450333546218,to=40000,lcxid=0xac,lzxid=0x100000215,lresp=189591062,llat=1,minlat=0,avglat=0,maxlat=7)
/10.0.0.2:51511[1](queued=0,recved=18826,sent=18826,sid=0x10000104d2c0009,lop=PING,est=1450225468496,to=30000,lcxid=0x3,lzxid=0x100000215,lresp=189582555,llat=0,minlat=0,avglat=0,maxlat=8)
/10.0.0.2:51510[1](queued=0,recved=18825,sent=18825,sid=0x10000104d2c0008,lop=PING,est=1450225468464,to=30000,lcxid=0x2,lzxid=0x100000215,lresp=189582631,llat=0,minlat=0,avglat=0,maxlat=6)
/10.0.0.3:47332[1](queued=0,recved=6272,sent=6274,sid=0x10000104d2c0043,lop=PING,est=1450333540372,to=40000,lcxid=0xfa,lzxid=0x100000215,lresp=189579900,llat=1,minlat=0,avglat=0,maxlat=10)
/10.0.0.1:56383[0](queued=0,recved=1,sent=0)
/10.0.0.1:51741[1](queued=0,recved=18857,sent=18862,sid=0x10000104d2c0002,lop=PING,est=1450225325339,to=30000,lcxid=0x13,lzxid=0x100000215,lresp=189587874,llat=0,minlat=0,avglat=0,maxlat=6)
/10.0.0.2:51543[1](queued=0,recved=14277,sent=14339,sid=0x10000104d2c0011,lop=PING,est=1450225548462,to=40000,lcxid=0xb0,lzxid=0x100000215,lresp=189580439,llat=0,minlat=0,avglat=0,maxlat=14)
Zookeeper Server IP: 10.0.0.2, reachable, ok
Zookeeper version: 3.5.1-alpha--1, built on 12/03/2015 14:18 GMT
Latency min/avg/max: 0/0/71
Received: 44056
Sent: 44151
Connections: 4
Outstanding: 0
Zxid: 0x100000215
Mode: follower
Node count: 51
Connections:
/10.0.0.1:58497[1](queued=0,recved=14717,sent=14735,sid=0x20000127d000005,lop=GETC,est=1450226200991,to=40000,lcxid=0x292,lzxid=0x100000215,lresp=189546742,llat=0,minlat=0,avglat=0,maxlat=42)
/10.0.0.1:58499[1](queued=0,recved=14160,sent=14203,sid=0x20000127d000006,lop=PING,est=1450226201030,to=40000,lcxid=0x6b,lzxid=0xffffffffffffffff,lresp=189540338,llat=0,minlat=0,avglat=0,maxlat=43)
/10.0.0.1:34844[0](queued=0,recved=1,sent=0)
/10.0.0.2:36754[1](queued=0,recved=14548,sent=14566,sid=0x20000127d000004,lop=PING,est=1450226200562,to=40000,lcxid=0x1df,lzxid=0xffffffffffffffff,lresp=189549590,llat=0,minlat=0,avglat=0,maxlat=40)
Zookeeper Server IP: 10.0.0.3, reachable, ok
Zookeeper version: 3.5.1-alpha--1, built on 12/03/2015 14:18 GMT
Latency min/avg/max: 0/6/57
Received: 63
Sent: 62
Connections: 1
Outstanding: 0
Zxid: 0x100000215
Mode: follower
Node count: 51
Connections:
/10.0.0.1:54356[0](queued=0,recved=1,sent=0)
Mode
Basic
Availability
Controller
Display the ccp sessions in the netcpa state cache.
Example
ESXi-1> get controller sessions
Session Index State Controller
Session 0 UP 10.192.80.196
L2 48008 UP 10.192.80.196
Mode
Basic
Availability
Edge, ESXi, KVM
Display the controllers connected to this node.
Example
nsx> get controllers
Controller IP Port SSL Status Is Physical Master Session State
10.160.131.81 1234 enabled connected false null
10.160.193.174 1234 enabled connected true up
10.160.134.250 1234 enabled not used false null
Mode
Basic
Availability
Edge, ESXi, KVM
Display the system CPU information.
Example
nsx-manager-1> get cpu-stats
processor : 0
vendor_id : GenuineIntel
cpu family : 6
model : 62
model name : Intel(R) Xeon(R) CPU E5-2440 v2 @ 1.90GHz
stepping : 4
microcode : 0x427
cpu MHz : 1900.000
cache size : 20480 KB
physical id : 0
siblings : 1
core id : 0
cpu cores : 1
apicid : 0
initial apicid : 0
fpu : yes
fpu_exception : yes
cpuid level : 13
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts nopl xtopology tsc_reliable nonstop_tsc aperfmperf pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm ida arat pln pts dtherm fsgsbase tsc_adjust smep
bogomips : 3800.00
clflush size : 64
cache_alignment : 64
address sizes : 42 bits physical, 48 bits virtual
power management:
processor : 1
vendor_id : GenuineIntel
cpu family : 6
model : 62
model name : Intel(R) Xeon(R) CPU E5-2440 v2 @ 1.90GHz
stepping : 4
microcode : 0x427
cpu MHz : 1900.000
cache size : 20480 KB
physical id : 2
siblings : 1
core id : 0
cpu cores : 1
apicid : 2
initial apicid : 2
fpu : yes
fpu_exception : yes
cpuid level : 13
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts nopl xtopology tsc_reliable nonstop_tsc aperfmperf pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm ida arat pln pts dtherm fsgsbase tsc_adjust smep
bogomips : 3800.00
clflush size : 64
cache_alignment : 64
address sizes : 42 bits physical, 48 bits virtual
power management:
Mode
Basic
Availability
Controller, Edge, Manager
Display information about the current interface.
Example
nsx-edge-1(path)> get current
{
"admin": "up",
"enable-firewall": false,
"enable-span": false,
"force-reassemble": false,
"ifuid": 289,
"ifuuid": "de650f56-276d-46ef-959e-960752acfe19",
"internal_operation": "up",
"ipns": [
"192.168.130.3/24"
],
"lrouter": "f2a25dd6-4ceb-4bf5-8ad5-3e80d2970d60",
"mac": "02:50:56:00:00:04",
"mtu": 1600,
"peer": "54710465-99a0-481b-ac04-2ff4eda2f270",
"redirect-to-kernel": true,
"stats": {
"rx_bytes": 1564840,
"rx_drop_blocked": 0,
"rx_drop_dst_unsupported": 0,
"rx_drop_firewall": 0,
"rx_drop_ip_options": 0,
"rx_drop_ipv6": 0,
"rx_drop_kni": 0,
"rx_drop_l4port_unsupported": 0,
"rx_drop_malformed": 0,
"rx_drop_no_receiver": 0,
"rx_drop_no_route": 0,
"rx_drop_proto_unsupported": 0,
"rx_drop_rpf_check": 0,
"rx_drop_ttl_exceeded": 3,
"rx_drops": 3,
"rx_frag_error": 0,
"rx_frag_ok": 0,
"rx_frag_timeout": 0,
"rx_frags": 0,
"rx_pkts": 23609,
"tx_bytes": 957372,
"tx_drop_blocked": 0,
"tx_drop_firewall": 0,
"tx_drop_frag_needed": 0,
"tx_drop_no_arp": 0,
"tx_drops": 0,
"tx_frag_error": 0,
"tx_frag_ok": 0,
"tx_pkts": 14312
},
"ttl": 1,
"type": "lif",
"urpf-mode": "STRICT_MODE"
}
or
nsx-edge-1(path)> get current
{
"ifuid": 285,
"ifuuid": "9eff9e4e-9157-4107-a0dd-c79350dce6f7",
"lswitch": "d5af58f5-0616-46fd-af83-242d82983c65",
"peer": "140ca8de-61e0-4bba-b429-6a3791b0846a",
"stats": {
"rx_bytes": 9150,
"rx_drop_l2_loop": 0,
"rx_drop_malformed": 0,
"rx_drop_no_match": 0,
"rx_drops": 0,
"rx_pkts": 127,
"tx_bytes": 2807,
"tx_drop_no_mem": 0,
"tx_drops": 0,
"tx_pkts": 38
}
}
Mode
Path
Availability
Edge
Display data plane configurations, which include fastpath cores, hugepage reserved, NUMA, physical port bindings, etc.
Example
nsx-edge-1> get dataplane
Bfd_ring_size : 512
Corelist : 0
Ctrl_prio_on : True
Fc_max_mem_percore : 394
Fc_mega_cache_size : 262144
Fc_mega_hard_timeout_ms: 423
Fc_mega_soft_timeout_ms: 353
Fc_micro_cache_size: 262144
Firewall_flow_cache_on: 1
Firewall_max_purge_rate: 5
Firewall_max_sessions: 8388608
Firewall_purge_timeout_ms: 10
Firewall_timer_resolution_ms: 50
Flow_cache_mega : True
Flow_cache_micro : True
Hugepage_mem : 1974
Intr_mode_on : True
Ip_reass4_gc_period: 2
Ip_reass4_interfrag_ms: 1000
Ip_reass4_max_ms : 5000
Ip_reass4_maxq_len : 45
Ip_reass4_qhash_order: 8
Ip_reass4_qlist_order: 9
Lacp_ring_size : 512
Learning_ring_size : 512
Link_speed : 0
Mainloop_sleep_threshold: 10
Mainloop_wait_timeout_ms: 1
Mbuf_pool_size : 48128
N_mem_channel : 3
Numa_on : True
Pkt_queue_limit : 0
Pkt_queue_rx_burst_size: 128
Pkt_seg_pnic_limit : 24
Prio_rx_queue_per_core: 8
Rss : c0=0:2:1
Rx_queue_per_core : 8
Rx_ring_size : 512
Slowpath_ring_size : 512
Stt_frag_queue_expire_ms: 3000
Stt_mbuf_queued_limit: 16000
Stt_reass_gc_period_ms: 3000
Tx_ring_size : 512
Devices:
Device_id : 0x07b0
Name : fp-eth0
Numa_node : -1
Pci : 0000:0b:00.00
Vendor : 0x15ad
Device_id : 0x07b0
Name : fp-eth1
Numa_node : -1
Pci : 0000:13:00.00
Vendor : 0x15ad
Device_id : 0x07b0
Name : fp-eth2
Numa_node : -1
Pci : 0000:1b:00.00
Vendor : 0x15ad
Mode
Basic
Availability
Edge
Display the flow cache configurations.
Example
nsx-edge-1> get dataplane flow-cache config
Enabled : true
Mega_hard_timeout_ms: 4944
Mega_size : 262144
Mega_soft_timeout_ms: 4874
Micro_size : 262144
Mode
Basic
Availability
Edge
Display flow cache statistics for all fastpath cores.
Example
nsx-edge-1> get dataplane flow-cache stats
Micro
Core : 0
Active : 0/262144
Dont cache : 0
Hit rate : 0%
Hits : 0
Insertions : 0
Misses : 1602651
Skipped : 1018653
Bucket collisions : 0
Key collisions : 0
Mega
Core : 0
Active : 0/262144
Dont cache : 2693444
Hit rate : 0%
Hits : 0
Insertions : 0
Misses : 1602651
Skipped : 1018653
Bucket collisions : 0
Key collisions : 0
Mode
Basic
Availability
Edge
Display the flow cache statistics for the specified fastpath cores.
| Option | Description |
|---|---|
| <lcore-list-all> | Specify a list of lcore ids or "all" Allowed pattern: ^([0-9]+,)*([0-9]+)$|(all)$ |
Example
nsx-edge-1> get dataplane flow-cache stats 0
Micro
Core : 0
Active : 0/262144
Dont cache : 0
Hit rate : 0%
Hits : 0
Insertions : 0
Misses : 1602797
Skipped : 1018748
Bucket collisions : 0
Key collisions : 0
Mega
Core : 0
Active : 0/262144
Dont cache : 2693695
Hit rate : 0%
Hits : 0
Insertions : 0
Misses : 1602797
Skipped : 1018748
Bucket collisions : 0
Key collisions : 0
Mode
Basic
Availability
Edge
Get dataplane perf stats
| Option | Description |
|---|---|
| <interval> | Specify sample interval Allowed pattern: ^([0-9]+)$ |
Mode
Basic
Availability
Edge
Display data plane statistics.
Example
nsx-edge-1> get dataplane stats
CPU Usage
Core : 0
Kni : 0 pps
Rx : 0 pps
Slowpath : 0 pps
Tx : 0 pps
Usage : 0%
Mode
Basic
Availability
Edge
Collect Routing Dumptrace
Mode
Tier0_sr
Availability
Edge
Display a specific DHCP IP pool.
| Option | Description |
|---|---|
| <uuid> | Generic UUID string argument Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$ |
Example
nsx-edge-1> get dhcp ip-pool 31b79159-c160-40ba-a9d7-be37186ac658
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
ERROR_THRESHOLD: 100
ID: 31b79159-c160-40ba-a9d7-be37186ac658
OPTIONS:
GENERIC_OPTIONS:
CODE: 51
VALUES:
86400
CODE: 3
VALUES:
192.168.1.1
RANGE:
END:
IPV4: 192.168.1.200
START:
IPV4: 192.168.1.100
WARNING_THRESHOLD: 80
Mode
Basic
Availability
Edge
Display all DHCP IP pools.
Example
nsx-edge-1> get dhcp ip-pools
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
ERROR_THRESHOLD: 100
ID: 31b79159-c160-40ba-a9d7-be37186ac658
OPTIONS:
GENERIC_OPTIONS:
CODE: 51
VALUES:
86400
CODE: 3
VALUES:
192.168.1.1
RANGE:
END:
IPV4: 192.168.1.200
START:
IPV4: 192.168.1.100
WARNING_THRESHOLD: 80
Mode
Basic
Availability
Edge
Display a specific DHCP lease. You can specify a DHCP server's UUID, or a MAC address, or an IP address.
| Option | Description |
|---|---|
| <string> | Generic string argument Allowed pattern: ^([A-Za-z0-9_:.-]+)$ |
Example
nsx-edge-1> get dhcp lease efc4fc20-e00d-416d-819a-88eff8674602
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-11 23:48:07.136000 (timestamp: 1476229687136)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 86400
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-10 23:48:07.136000 (timestamp: 1476143287136)
SUBNET: 192.168.1.0
nsx-edge-1> get dhcp lease 00:0c:29:03:9c:b2
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-12 19:53:13.057000 (timestamp: 1476301993057)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 86400
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-11 19:53:13.057000 (timestamp: 1476215593057)
SUBNET: 192.168.1.0
nsx-edge-1> get dhcp lease 192.168.1.100
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-12 19:53:13.057000 (timestamp: 1476301993057)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 86400
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-11 19:53:13.057000 (timestamp: 1476215593057)
SUBNET: 192.168.1.0
Mode
Basic
Availability
Edge
Display a specific DHCP lease. You can specify a DHCP server's UUID, or a MAC address, or an IP address.
| Option | Description |
|---|---|
| <string> | Generic string argument Allowed pattern: ^([A-Za-z0-9_:.-]+)$ |
Example
nsx-edge-1> get dhcp lease efc4fc20-e00d-416d-819a-88eff8674602
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-11 23:48:07.136000 (timestamp: 1476229687136)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 0
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-10 23:48:07.136000 (timestamp: 1476143287136)
SUBNET: 192.168.1.0
nsx-edge-1> get dhcp lease 00:0c:29:03:9c:b2
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-12 19:53:13.057000 (timestamp: 1476301993057)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 86400
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-11 19:53:13.057000 (timestamp: 1476215593057)
SUBNET: 192.168.1.0
nsx-edge-1> get dhcp lease 192.168.1.100
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-12 19:53:13.057000 (timestamp: 1476301993057)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 86400
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-11 19:53:13.057000 (timestamp: 1476215593057)
SUBNET: 192.168.1.0
Mode
Basic
Availability
Edge
Display all non-released DHCP leases.
Example
nsx-edge-1> get dhcp leases
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-11 23:48:07.136000 (timestamp: 1476229687136)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 86400
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-10 23:48:07.136000 (timestamp: 1476143287136)
SUBNET: 192.168.1.0
Mode
Basic
Availability
Edge
Display all DHCP leases.
Example
nsx-edge-1> get dhcp leases
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
DHCP_SUBNET_MAC: efc4fc20-e00d-416d-819a-88eff8674602_192.168.1.100_00:0c:29:03:9c:b2
EXPIRE_TIME: 2016-10-11 23:48:07.136000 (timestamp: 1476229687136)
IP:
IPV4: 192.168.1.100
LEASE_TIME: 0
MAC:
MAC: 00:0c:29:03:9c:b2
START_TIME: 2016-10-10 23:48:07.136000 (timestamp: 1476143287136)
SUBNET: 192.168.1.0
Mode
Basic
Availability
Edge
Display a specific DHCP server. Optionally specify an argument to display only the status or the synchronization information.
| Option | Description |
|---|---|
| <uuid> | Generic UUID string argument Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$ |
Example
nsx-edge-1> get dhcp server efc4fc20-e00d-416d-819a-88eff8674602
EDGE_CLUSTER_ID: 46944f73-89d0-40b8-86f2-6fd651ba4fb9
EDGE_NODE_ID:
0e10a15f-ca0d-47a7-92ff-9b0aa8d18b4d
b084f07f-bd1f-4d91-bf48-775b896296d5
ID: efc4fc20-e00d-416d-819a-88eff8674602
OPTIONS:
GENERIC_OPTIONS:
CODE: 54
VALUES:
192.168.1.2
CODE: 1
VALUES:
255.255.255.0
SERVER_MAC:
MAC: 00:50:56:98:7d:d7
SERVER_PREFIX:
IPV4: 192.168.1.2
PREFIX_LENGTH: 24
nsx-edge-1> get dhcp server efc4fc20-e00d-416d-819a-88eff8674602 status
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
STATUS: READY
nsx-edge-1> get dhcp server efc4fc20-e00d-416d-819a-88eff8674602 sync
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
LAST_ERROR_TIME: N/A
LAST_SYNC_TIME: N/A
STATUS: OK
Mode
Basic
Availability
Edge
Display all DHCP servers. Optionally specify an argument to display only the status or the synchronization information.
If the edge node is the only member of the edge cluster, the STATUS property will be displayed as UNKNOWN when you call get dhcp servers status because HA (high availability) is not available.
If the edge node is the only member of the edge cluster, the STATUS property will be displayed as UNKNOWN when you call get dhcp servers status because HA (high availability) is not available.
Example
nsx-edge-1> get dhcp servers
EDGE_CLUSTER_ID: 46944f73-89d0-40b8-86f2-6fd651ba4fb9
EDGE_NODE_ID:
0e10a15f-ca0d-47a7-92ff-9b0aa8d18b4d
b084f07f-bd1f-4d91-bf48-775b896296d5
ID: efc4fc20-e00d-416d-819a-88eff8674602
OPTIONS:
GENERIC_OPTIONS:
CODE: 54
VALUES:
192.168.1.2
CODE: 1
VALUES:
255.255.255.0
SERVER_MAC:
MAC: 00:50:56:98:7d:d7
SERVER_PREFIX:
IPV4: 192.168.1.2
PREFIX_LENGTH: 24
nsx-edge-1> get dhcp servers status
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
STATUS: READY
nsx-edge-1> get dhcp servers sync
DHCP_ID: efc4fc20-e00d-416d-819a-88eff8674602
LAST_ERROR_TIME: N/A
LAST_SYNC_TIME: N/A
STATUS: OK
Mode
Basic
Availability
Edge
Display a specific DHCP static binding.
| Option | Description |
|---|---|
| <uuid> | Generic UUID string argument Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$ |
Example
nsx-edge-1> get dhcp static-binding 3773289c-32f6-4892-a94e-c74a47bf1e71
DHCP_ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
ID: 3773289c-32f6-4892-a94e-c74a47bf1e71
MAC:
MAC: 12:34:56:78:9a:bc
OPTIONS:
GENERIC_OPTIONS:
CODE: 3
VALUES:
192.168.150.1
CODE: 12
VALUES:
machine-1
CODE: 51
VALUES:
86400
PREFIX:
IPV4: 192.168.150.201
PREFIX_LENGTH: 24
Mode
Basic
Availability
Edge
Display all DHCP static bindings.
Example
nsx-edge-1> get dhcp static-bindings
DHCP_ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
ID: 3773289c-32f6-4892-a94e-c74a47bf1e71
MAC:
MAC: 12:34:56:78:9a:bc
OPTIONS:
GENERIC_OPTIONS:
CODE: 3
VALUES:
192.168.150.1
CODE: 12
VALUES:
machine-1
CODE: 51
VALUES:
86400
PREFIX:
IPV4: 192.168.150.201
PREFIX_LENGTH: 24
Mode
Basic
Availability
Edge
Display information about the specified domain object.
| Option | Description |
|---|---|
| <uuid> | Domain object identifier |
Example
nsx-controller-1> get domain-object 348e20a9-8b6e-4209-81df-779bff97781d
id: 348e20a9-8b6e-4209-81df-779bff97781d
type: RuleSection
content: com.vmware.nsx.ccp.domain.entity.RuleSection@1642d5b0[message=priority: 2305843009213693951
name: "Default Layer2 Section"
version: "0"
,id=348e20a9-8b6e-4209-81df-779bff97781d,resolver=com.vmware.nsx.falcon.FalconImpl@6306e14c]
Mode
Availability
Controller
Display domain objects of the specified type.
| Option | Description |
|---|---|
| <domain_object_type> | Domain object type Allowed values: RuleSection, Rule, Container, Vif, MacAddress, Hypervisor, DneRule, DneRuleSection, KeyPolicy |
Example
nsx-controller-1> get domain-objects RuleSection
id: 348e20a9-8b6e-4209-81df-779bff97781d, type: RuleSection
id: a9ccd570-9b6f-42e9-a372-162c4b00238e, type: RuleSection
id: 00003200-0000-0000-0000-000000000001, type: RuleSection
id: 00003200-0000-0000-0000-000000000002, type: RuleSection
Mode
Availability
Controller
Display the Edge cluster state history.
Example
nsx-edge-1> get edge-cluster history state
State : Disabled
Time : 2016-09-12 18:07:03.20
Event : Init
Reason : Init
State : Offline
Time : 2016-09-20 10:19:24.22
Event : Config Updated
Reason : Config
State : Discover
Time : 2016-09-20 10:19:24.22
Event : Config Updated
Reason : Config
State : StateSync
Time : 2016-09-20 10:19:25.19
Event : BFD State Updated
Reason : Updated
State : Inactive
Time : 2016-09-20 10:19:30.50
Event : State Sync Completed
Reason : Updated
State : Active
Time : 2016-09-20 10:19:30.50
Event : State Sync Completed
Reason : Updated
State : Inactive
Time : 2016-10-10 13:53:30.88
Event : Node State Changed
Reason : Tunnels Down
Mode
Basic
Availability
Edge
Display the Edge cluster status.
Example
nsx-edge-1> get edge-cluster status
High Availability State : Inactive
Since : 2016-10-10 13:53:30.88
Edge Node Id : f9933e11-96a5-48fa-9f64-9c3b789d530c
Edge Node Status : Down
Admin State : Up
Vtep State : Up
Configuration : applied
Health Check Config :
Interval : 1000 msec
Deadtime : 3000 msec
Max Hops : 255
Service Status :
Datapath Config Channel : Up
Datapath Status Channel : Up
Routing Status Channel : Up
Routing Status : Down
Peer Status :
Node Id : 14693d4d-de8b-417e-a53c-315702fc72c5
Node Status : Admin Down
Healthcheck Sessions :
Interface : eth0
Session : 192.168.110.111:192.168.110.112
Status : Admin Down
Interface : nsx-edge-vtep
Session : 192.168.150.201:192.168.150.202
Status : Unreachable
Mode
Basic
Availability
Edge
Display information about the specified file in the filestore.
| Option | Description |
|---|---|
| <filename> | Existing file argument |
Example
nsx> get file support-bundle-0.tgz
Directory of filestore:/
-rw- 24932275 Feb 05 2016 05:58:46 UTC support-bundle-0.tgz
Mode
Basic
Availability
Controller, Edge, Manager
Display the file thumbprint.
| Option | Description |
|---|---|
| <filename> | Existing file argument |
Example
nsx> get file support-bundle-0.tgz thumbprint
SHA1SUM: d0fc5c741bdc0be8eacce3e8f581b74c32bc4d62
SHA256SUM: 13cfaccbfc44193eaee3a729b6c4a810b276df6d8086fc82ed1720d23906473d
Mode
Basic
Availability
Controller, Edge, Manager
Display information about the files in the filestore.
Example
nsx> get files
Directory of filestore:/
-rw- 24950960 Feb 05 2016 05:59:23 UTC support-bundle-1.tgz
-rw- 24932275 Feb 05 2016 05:58:46 UTC support-bundle-0.tgz
Mode
Basic
Availability
Controller, Edge, Manager
Display the file system information.
Example
nsx-manager-1> get filesystem-stats
Filesystem Size Used Avail Use% Mounted on
udev 7.9G 4.0K 7.9G 1% /dev
tmpfs 1.6G 768K 1.6G 1% /run
/dev/sda2 19G 2.2G 16G 13% /
none 4.0K 0 4.0K 0% /sys/fs/cgroup
none 5.0M 0 5.0M 0% /run/lock
none 7.9G 4.0K 7.9G 1% /run/shm
none 100M 0 100M 0% /run/user
/dev/mapper/nsx-repository 19G 302M 18G 2% /repository
/dev/mapper/nsx-tmp 3.7G 8.0M 3.5G 1% /tmp
/dev/sda1 945M 6.0M 874M 1% /boot
/dev/mapper/nsx-config 19G 44M 18G 1% /config
/dev/mapper/nsx-config__bak 19G 44M 18G 1% /config_bak
/dev/mapper/nsx-image 19G 44M 18G 1% /image
/dev/sda3 19G 44M 18G 1% /os_bak
/dev/mapper/nsx-var+log 9.3G 623M 8.2G 7% /var/log
Mode
Basic
Availability
Controller, Edge, Manager
Display the firewall connections on the specified logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e connection
Connection count: 1
0x00001c0c08000007: 192.168.130.254:57336 -> 172.16.10.11:80 (80.80.80.11:80) in protocol tcp state ESTABLISHED:ESTABLISHED
Mode
Basic
Availability
Edge
Display the firewall connection count.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e connection count
Connection count: 1
Mode
Basic
Availability
Edge
Display the state of the firewall connections.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e connection state
Connection count: 1
192.168.130.254:57101 -> 172.16.10.11:80 (80.80.80.11:80) in protocol tcp state ESTABLISHED:ESTABLISHED
Mode
Basic
Availability
Edge
Display firewall interface statistics for the specified logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e interface stats
Failed IP option : 0
Failed NAT translation : 0
Failed SYN proxy : 0
Failed Spoofguard : 0
Failed bad offset : 0
Failed bad timestamp : 0
Failed checksum : 0
Failed congestion : 0
Failed expected state : 0
Failed fragment : 0
Failed memory allocation : 0
Failed normalization : 0
Failed short header : 0
Failed source limit : 0
Failed state insertion : 0
Failed state limit : 0
Firewall deletions : 13
Firewall insertions : 15
Firewall lookups : 0
Found match : 67
Input bytes allowed : 5741
Input bytes dropped : 0
Input packets allowed : 61
Input packets dropped : 0
Number of state collisions : 0
Number of states : 2
Output bytes allowed : 12628
Output bytes dropped : 0
Output packets allowed : 138
Output packets dropped : 0
Mode
Basic
Availability
Edge
Display firewall rules for the specified logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e ruleset rules
DNAT rule count: 1
Rule ID : 2053
Rule : in protocol any from any to ip 80.80.80.11 dnat ip 172.16.10.11
SNAT rule count: 1
Rule ID : 2052
Rule : out protocol any from ip 172.16.10.11 to any snat ip 80.80.80.11
Mode
Basic
Availability
Edge
Display firewall rule statistics for the specified logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e ruleset stats
DNAT rule count: 1
Rule ID : 2053
Input bytes : 1367
Output bytes : 2374
Input packets : 24
Output packets : 19
Evaluations : 8
Active connections : 1
SNAT rule count: 1
Rule ID : 2052
Input bytes : 4478
Output bytes : 6106
Input packets : 39
Output packets : 68
Evaluations : 7
Active connections : 0
Mode
Basic
Availability
Edge
Display the active/standby configuration for the firewall on the specified logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e sync config
HA mode : primary-active
Firewall enabled : true
Sync pending : false
Bulk sync pending : false Last status: ok
Local VTEP IP : 192.168.250.62
Peer VTEP IP : 192.168.250.63
Local SR : 56eead22-3bb9-4586-8de3-9412941f9116
Peer SR : 56eead22-3bb9-4586-8de3-9412941f9116
Mode
Basic
Availability
Edge
Display the firewall synchronization statistics.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e sync stats
bad-action : 0
bad-c-delete : 0
bad-c-update : 0
bad-delete : 0
bad-header : 0
bad-len : 0
bad-request : 0
bad-rule-id : 0
bad-stale-c-update : 0
bad-stale-update : 0
bad-state-c-update : 0
bad-state-insert : 0
bad-state-update : 0
bad-total : 0
bad-ttl : 0
bad-update : 0
bad-val : 0
bad-version : 0
failed-module-insert : 0
failed-no-mem : 0
failed-no-module : 0
failed-output : 0
input-ipv4 : 5
output-ipv4 : 138
send-bulk-update : 0
send-c-delete : 13
send-c-update : 135
send-update : 0
state-c-delete : 0
state-c-update : 0
state-delete : 0
state-insert : 0
state-request : 2
state-update : 0
Mode
Basic
Availability
Edge
Display the logical router interfaces which have firewall rules.
Example
nsx-edge-1> get firewall interfaces
Interface : e159f0db-d8e4-4973-9cbb-8cc30def2c3e
VRF ID : 22
Sync enabled : true
Mode
Basic
Availability
Edge
Display sync configuration for logical router interfaces with firewall rules.
Example
nsx-edge-1> get firewall interfaces sync
Total count: 1
Interface : e159f0db-d8e4-4973-9cbb-8cc30def2c3e
HA mode : primary-active
Firewall enabled : true
Sync pending : false
Bulk sync pending : false Last status: ok
Local VTEP IP : 192.168.250.62
Peer VTEP IP : 192.168.250.63
Local SR : 56eead22-3bb9-4586-8de3-9412941f9116
Peer Context : 56eead22-3bb9-4586-8de3-9412941f9116
Mode
Basic
Availability
Edge
Display forwarding information for the current interface. If the interface is a switch port, the MAC address table is displayed. If the interface is a router interface, the IP forwarding table is displayed.
Example
nsx-edge-1(path)> get forwarding
IP Neighbor Table:
IP UUID MAC State Last Update Time
IP Forwarding Table:
IP Prefix Type UUID Gateway IP Gateway MAC
0.0.0.0/0 route 2a7bf881-1f89-4833-833e-47673b79901a 169.0.0.2
80.80.80.11/32 route 3eb2d5aa-3d11-4de3-98df-3cdebf5094e0 100.64.1.3
100.64.1.0/32 route 01f737d3-a66a-5b14-9ff7-6fc64af6a613
100.64.1.0/31 route bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
100.64.1.2/32 route 01f737d3-a66a-5b14-9ff7-6fc64af6a613
100.64.1.2/31 route 3eb2d5aa-3d11-4de3-98df-3cdebf5094e0
169.0.0.0/28 route 2a7bf881-1f89-4833-833e-47673b79901a
169.0.0.1/32 route 01f737d3-a66a-5b14-9ff7-6fc64af6a613
172.16.10.0/24 route bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a 100.64.1.1
172.16.20.0/24 route bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a 100.64.1.1
172.16.30.0/24 route bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a 100.64.1.1
172.16.40.0/24 route 3eb2d5aa-3d11-4de3-98df-3cdebf5094e0 100.64.1.3
192.168.130.0/24 route 2a7bf881-1f89-4833-833e-47673b79901a 169.0.0.2
192.168.130.3/32 route 2a7bf881-1f89-4833-833e-47673b79901a 169.0.0.2
or
nsx-edge-1(path)> get forwarding
MAC Table:
MAC UUID Source
02:50:56:00:00:00 5b2068d0-8c28-4427-8be4-48f422f92309 controller
02:50:56:00:00:02 eb3bd495-9ce3-40b4-a955-c2ddc4893cfa controller
02:50:56:56:44:52 5b2068d0-8c28-4427-8be4-48f422f92309 controller
Replication Tunnels:
UUID Local VTEP Remote VTEP MTEP
704d9577-39d4-5b7c-b890-5e5e0bba8d0e 192.168.250.62 192.168.250.63 False
Mode
Path
Availability
Edge
Display the forwarding table for the logical router in the VRF context. Optionally specify a prefix to display only the entry that matches that network.
| Option | Description |
|---|---|
| <prefix> | Network Address argument |
Example
nsx-edge-1(tier1_sr)> get forwarding
Logical Router
UUID : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
vrf : 4
type : SERVICE_ROUTER_TIER1
IP Forwarding Table
IP Prefix Type UUID Gateway IP Gateway MAC
0.0.0.0/0 route 16cf5466-87f2-4810-a6d2-ff4cef71da8a 100.64.1.0 02:50:56:56:44:52
100.64.1.1/32 route 022286ee-5d20-5658-8929-0fd2caee6409
127.0.0.1/32 route 022286ee-5d20-5658-8929-0fd2caee6409
169.0.0.0/28 route 138853e0-76b1-4e15-af56-1213639afe53
169.0.0.2/32 route 022286ee-5d20-5658-8929-0fd2caee6409
172.16.110.0/24 route 138853e0-76b1-4e15-af56-1213639afe53 169.0.0.1 02:50:56:56:44:52
172.16.120.0/24 route 138853e0-76b1-4e15-af56-1213639afe53 169.0.0.1 02:50:56:56:44:52
172.16.130.0/24 route 138853e0-76b1-4e15-af56-1213639afe53 169.0.0.1 02:50:56:56:44:52
or
nsx-edge-1(tier1_sr)> get forwarding 172.16.110.0/24
Logical Router
UUID : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
vrf : 4
type : SERVICE_ROUTER_TIER1
IP Forwarding Table
IP Prefix Type UUID Gateway IP Gateway MAC
172.16.110.0/24 route 138853e0-76b1-4e15-af56-1213639afe53 169.0.0.1 02:50:56:56:44:52
Mode
VRF, Tier0_sr, Tier1_sr
Availability
Edge
Display the mandatory access control report for possible policy violations. Specify the
file argument to write the information to a file with the specified file name. The report is written to this file in a concise format. You can specify the all argument to have a verbose report, which includes exact log messages.| Option | Description |
|---|---|
| <filename> | Name of file to generate, for example report-bundle.tgz Allowed pattern: ^[^/ *;&|]+$ |
Example
nsx-edge-1> get hardening-policy mandatory-access-control report
ACTION OPERATION PROFILE
DENIED Capable /usr/sbin/tcpdump
DENIED Capable /sbin/dhclient
nsx-edge-1> get hardening-policy mandatory-access-control report file report.tar.gz
report.tar.gz created, use the following command to transfer the file:
copy file report.tar.gz url
After transferring report.tar.gz, extract it using: tar xzf report.tar.gz
nsx-edge-1> get hardening-policy mandatory-access-control report file report_all.tar.gz all
report_all.tar.gz created, use the following command to transfer the file:
copy file report_all.tar.gz url
After transferring report.tar.gz, extract it using: tar xzf report_all.tar.gz
Mode
Basic
Availability
Controller, Edge, Manager
Display the mandatory access control status.
Example
nsx-edge-1> get hardening-policy mandatory-access-control status
Mandatory Access Control is enabled.
Mode
Basic
Availability
Controller, Edge, Manager
Display the high availability state history for the logical router in the VRF context.
Example
nsx-edge-1(tier0_sr)> get high-availability history state
State : Down
Event : Init
Resources :
Time : 2016-02-02 18:41:22.80
State : Active
Event : Node Up
Resources : 0
Time : 2016-02-02 18:41:26.91
Mode
Tier0_sr, Tier1_sr
Availability
Edge
Display the high availability status for the logical router in the VRF context.
Example
nsx-edge-1(tier0_sr)> get high-availability status
Service Router
UUID : 4e425c9e-09c6-4021-bbc7-fab2895a2c09
state : Active
type : TIER0
mode : A/A
rank : 0
HA ports state
UUID : 733d7ed3-1daa-4c28-bc0a-77e3736fea14
op_state : Up
addresses : 169.0.0.2/28
Mode
Tier0_sr, Tier1_sr
Availability
Edge
Display IPFIX setting on the specified DVPort of the specified host switch
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
| <dvport-id> | DVPort identifier Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
Example
esx-1> get host-switch nsxvswitch dvport cdb36fdd-a3ec-494e-9b7b-60a8c6af5b70 ipfix setting
Host IPFIX setting
--------------------------------------------------------------------------
activeTimeout : 8
idleTimeout : 15
sampleRate : 1000
obsDomainID : 0
sourceIP : 0.0.0.0
internalFlowsOnly : 0
virtualObsID :
collectors : 192.168.7.3 5003
Mode
Basic
Availability
ESXi
Display the mcast filter mode for the specified host switch and dvPort
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
| <dvport-id> | DVPort identifier Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
Example
esx-1> get host-switch nsxvswitch dvport 73c6d671-32e0-4e74-95a0-bf604c0e0669 mcast-filter
Host Switch DVPort Mcast Filter Entry
---------------------------------------------------------------------------
Legacy Filter Entry
===========================================================================
33:33:ff:69:ae:cd
33:33:00:00:00:01
01:00:5e:00:00:01
IGMP Filter Entry
===========================================================================
224.1.1.2
MLD Filter Entry
===========================================================================
Mode
Basic
Availability
ESXi
Display the mcast filter stata of the specified entry
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
| <dvport-id> | DVPort identifier Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
| <entry-mode> | Mode of a mcast filter entry Allowed values: igmp, mld |
| <entry-group> | Group address of a mcast filter entry Allowed pattern: ^([A-Fa-f0-9.:]+)$ |
Example
esx-1> get host-switch nsxvswitch dvport 73c6d671-32e0-4e74-95a0-bf604c0e0669 mcast-filter igmp 224.1.1.2
Host Switch DVPort Mcast Filter Entry Status
---------------------------------------------------------------------------
version : 3
srcIPFilterMode : INCLUDE
updateTime : 35
srcIPs :
192.168.1.4
192.168.1.5
Mode
Basic
Availability
ESXi
Display IPFIX stats on the specified host switch
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
Example
esx-1> get host-switch nsxvswitch ipfix stats
Host IPFIX stats
--------------------------------------------------------------------------
flows : 0
currentFlows : 0
pktsSent : 10
pktsSenterrors : 0
sampleok : 0
ipv4ok : 0
ipv6ok : 0
sampleerrors : 0
unsupportedproto : 4
ipv4errors : 0
ipv6errors : 0
etherrors : 0
inputiferrors : 0
outputiferrors : 0
allocerrors : 0
ipv4headererrors : 0
ipv6headererrors : 0
ipv4unsupportedproto: 0
ipv6unsupportedproto: 0
ipv4missingfrags : 0
ipv6missingfrags : 0
Mode
Basic
Availability
ESXi
Display the mcast filter mode for the specified host switch.
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
Example
esx-1> get Host-switch nsxvswitch mcast-filter
Host Switch Mcast Filter
---------------------------------------------------------------------------
Mode : Snooping
Mode
Basic
Availability
ESXi
Display the stats of mirror on the specified host switch.
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
| <mirror-session-id> | Mirror session identifier UUID Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
Example
esx-1> get host-switch nsxvswitch mirror-session a779b62e-7711-47ad-8d54-
5cb166d061af
Mirror Session
=======================================================
UUID :a779b62e-7711-47ad-8d54-5cb166d061af
Direction :Both
Snap Length :0
Source :9484c882-76e6-4f9e-85c4-087968963769;34b19ace-8396-4dd2-
9b92-5867b1bf30ef;vmnic1(Encap)
Destination :79b8f233-4c22-49ce-b270-3802796de856
Mode
Basic
Availability
ESXi
Display the mirror settings on the specified host switch.
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
Example
esx-1> get host-switch nsxvswitch mirror-sessions
Mirror Session Summary
============================================================
Mirror UUID Direction Snap Length
a779b62e-7711-47ad-8d54-5cb166d061af Both 0
Mode
Basic
Availability
ESXi
Display IPFIX setting on the specified uplink of the specified host switch
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
| <uplink> | Uplink identifier Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
Example
esx-1> get host-switch nsxvswitch uplink vmnic1 ipfix setting
Host IPFIX setting
--------------------------------------------------------------------------
activeTimeout : 8
idleTimeout : 15
sampleRate : 1000
obsDomainID : 0
sourceIP : 0.0.0.0
internalFlowsOnly : 0
virtualObsID : Uplink-0x03000002
collectors : 192.168.7.3 5003
Mode
Basic
Availability
ESXi
Display VLAN table for the host switch.
Example
nsx-edge-1> get host-switch vlan-table
VLAN : 100
MAC : 02:50:56:00:00:03
Ingress Port
name : fp-eth0
ID : 0
Egress Port
port : 783a05cd-033d-4891-ad11-7c082641e069
ifuid : 274
VLAN : 250
MAC : 04:00:c0:a8:fa:a2
Ingress Port
name : fp-eth1
ID : 1
Egress Port
port : 7bd1dd3d-97eb-5312-9d0d-b26c148a4fac
ifuid : 296
Mode
Basic
Availability
Edge
Display information about all host switches.
Example
nsx-edge-1> get host-switches
Host Switch : 8d4c2128-e748-4878-8314-ad8414f7f943
Switch Name : vlanswitch
Transport Zone : 4e9a90b7-96de-4102-a9bf-1f3733eb3375
Physical Port : fp-eth0
Uplink Name : uplink1
Host Switch : d7ea327f-2569-4b1c-b7cf-8cd4c85ebb18
Switch Name : hostswitch
Transport Zone : 9bc2392d-b7ee-4cf9-9200-7d082f199aef
Physical Port : fp-eth1
Uplink Name : uplink1
Transport VLAN : 250
Default Gateway : 192.168.250.1
Subnet Mask : 255.255.255.0
Local VTEP Device : fp-eth1
Local VTEP IP : 192.168.250.162
Mode
Basic
Availability
Edge
Display the system hostname.
Example
nsx> get hostname
nsx
Mode
Basic
Availability
Controller, Edge, Manager
Display hugepage information, including total system memory, hugepage sizes supported and hugepage pools.
Example
nsx-edge-1> get hugepage
Total system memory
3949 MB
Hugepage sizes supported
2097152
Hugepage pools
Size Minimum Current Maximum Default
2097152 987 987 987 *
Mode
Basic
Availability
Edge
Display all the connected hypervisors.
Example
nsx-controller-1> get hypervisors
['3284f707-98f9-4e7c-b573-f7898dfa12ba']
Mode
Basic
Availability
Controller
Display information about the specified network interface.
| Option | Description |
|---|---|
| <interface-name> | Network interface argument |
Example
nsx> get interface eth0
Interface: eth0
Address: 192.168.110.108/24
MAC address: 00:50:56:8e:13:51
MTU: 1500
Default gateway: 192.168.110.1
Broadcast address: 192.168.110.255
Link status: up
Admin status: up
RX packets: 1634378
RX bytes: 333335650
RX errors: 0
RX dropped: 276
TX packets: 1441590
TX bytes: 286624283
TX errors: 0
TX dropped: 0
TX collisions: 0
Mode
Basic
Availability
Controller, Edge, Manager
Display interface information for the logical router in the VRF context.
Example
nsx-edge-1(vrf)> get context interfaces
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
interfaces
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
ifuid : 267
type : lif
peer : 234f7123-4b2c-426d-93d3-ab6512bf6dc6
mtu : 1542
admin : up
subnets : 172.16.110.1/24
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
interface : b8cb725a-4271-54b8-93e0-67d58c3bc574
ifuid : 276
type : blackhole
interface : be290c92-74ed-437c-bbf1-dd78673b6a5a
ifuid : 283
type : lif
peer : 407df400-4638-4fdf-89aa-0e30d377a9f4
mtu : 1542
admin : up
subnets : 172.16.120.1/24
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
interface : fc9ffbbd-51d8-57f9-94d2-50b317a22db5
ifuid : 275
type : cpu
interface : c66fc321-df74-4aaa-835e-95dc815fe7ae
ifuid : 286
type : lif
peer : 50821d70-954b-4cdc-abbd-2bfd2ecde598
mtu : 1542
admin : up
subnets : 172.16.130.1/24
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
interface : f6ef3b50-64a0-4948-ab9e-9135963d4b8b
ifuid : 277
type : lif
peer : a931638f-4fcd-4a70-91b8-ec45ada8952f
mtu : 1542
admin : up
subnets : 169.0.0.1/28
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
Mode
VRF, Tier0_sr, Tier1_sr
Availability
Edge
Display information about all network interfaces.
Example
nsx-edge> get interfaces
Interface: eth0
Address: 192.168.110.111/24
MAC address: 00:50:56:8e:e8:2e
MTU: 1500
Default gateway: 192.168.110.1
Broadcast address: 0.0.0.0
Link status: up
Admin status: up
RX packets: 66307
RX bytes: 12698263
RX errors: 0
RX dropped: 0
TX packets: 58340
TX bytes: 15041724
TX errors: 0
TX dropped: 0
TX collisions: 0
Interface: lo
Address: 127.0.0.1/8
MTU: 65536
Link status: up
Admin status: up
RX packets: 221628
RX bytes: 54868485
RX errors: 0
RX dropped: 0
TX packets: 221628
TX bytes: 54868485
TX errors: 0
TX dropped: 0
TX collisions: 0
Mode
Basic
Availability
Edge
Display information about all network interfaces.
Example
nsx> get interfaces
Interface: eth0
Address: 192.168.110.108/24
MAC address: 00:50:56:8e:13:51
MTU: 1500
Default gateway: 192.168.110.1
Broadcast address: 192.168.110.255
Link status: up
Admin status: up
RX packets: 1636181
RX bytes: 333661267
RX errors: 0
RX dropped: 276
TX packets: 1443225
TX bytes: 286925131
TX errors: 0
TX dropped: 0
TX collisions: 0
Interface: lo
Address: 127.0.0.1/8
MTU: 65536
Link status: up
Admin status: up
RX packets: 10410417
RX bytes: 2281216307
RX errors: 0
RX dropped: 0
TX packets: 10410417
TX bytes: 2281216307
TX errors: 0
TX dropped: 0
TX collisions: 0
Mode
Basic
Availability
Controller, Manager
Display the interface statistics for the logical router in the VRF context.
Example
dev(tier0_sr)> get interfaces stats
Logical Router
UUID : 00000005-0000-0000-0000-000000000000
vrf : 2
type : SERVICE_ROUTER_TIER0
Statistics
Interface Type RX PKTS TX PKTS RX BYTES TX BYTES RX Drops TX Drops
0000000e-0000-0000-0000-000000000000 cpu 0 0 0 0 0 0
00000009-0000-0000-0000-000000000000 lif 0 0 0 0 0 0
00000007-0000-0000-0000-000000000000 lif 0 0 0 0 0 0
Total 0 0 0 0 0 0
Mode
VRF, Tier0_sr, Tier1_sr
Availability
Edge
Display the contents of the specified log file.
| Option | Description |
|---|---|
| <filename> | Log file name |
Example
nsx-manager-1> get log-file manager.log
2016-10-24 05:11:50.292 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/connections?columns=name,user
Entity Body : <{Accept=[application/json]}> method: GET
2016-10-24 05:11:50.312 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/connections?columns=name,user
Response Body : [Lcom.vmware.nsx.management.messaging.rabbitmq.Connection;@59e806a2 method : GET
2016-10-24 05:11:50.312 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/users
Entity Body : <{Accept=[application/json]}> method: GET
2016-10-24 05:11:50.354 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/users
Response Body : [Lcom.vmware.nsx.management.messaging.rabbitmq.Account;@5307ed29 method : GET
2016-10-24 05:11:55.298 UTC INFO increment-barrier-timer RealizationStateBarrierServiceImpl - SYSTEM [nsx comp="nsx-manager" subcomp="manager"] Incremented realization state barrier number to 122598
2016-10-24 05:11:55.674 UTC INFO Event Processor for GatewaySender_AsyncEventQueue_txLogEventQueue TxLogAsyncEventListener - - [nsx comp="nsx-manager" subcomp="manager"] Gets 1 events to process.
2016-10-24 05:11:55.674 UTC INFO Event Processor for GatewaySender_AsyncEventQueue_txLogEventQueue GemFireTxLogDao - - [nsx comp="nsx-manager" subcomp="manager"] Start processing transaction ID: bc323257-86ca-4be5-92d4-d70edec29266, number of ops: 1.
2016-10-24 05:11:55.679 UTC INFO Event Processor for GatewaySender_AsyncEventQueue_txLogEventQueue GemFireTxLogDao - - [nsx comp="nsx-manager" subcomp="manager"] Transaction done. Processing time: 5 ms.
.
.
.
Mode
Basic
Availability
Controller, Edge, Manager
Display the last 10 lines of the specified log file and all new messages that are written to the log file.
| Option | Description |
|---|---|
| <filename> | Log file name |
Example
nsx-manager-1> get log-file manager.log follow
2016-10-24 05:11:50.292 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/connections?columns=name,user
Entity Body : <{Accept=[application/json]}> method: GET
2016-10-24 05:11:50.312 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/connections?columns=name,user
Response Body : [Lcom.vmware.nsx.management.messaging.rabbitmq.Connection;@59e806a2 method : GET
2016-10-24 05:11:50.312 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/users
Entity Body : <{Accept=[application/json]}> method: GET
2016-10-24 05:11:50.354 UTC INFO MaintenanceSyncTimer RestRequestImpl - - [nsx comp="nsx-manager" subcomp="manager"] URL : https://localhost:15671/api/users
Response Body : [Lcom.vmware.nsx.management.messaging.rabbitmq.Account;@5307ed29 method : GET
2016-10-24 05:11:55.298 UTC INFO increment-barrier-timer RealizationStateBarrierServiceImpl - SYSTEM [nsx comp="nsx-manager" subcomp="manager"] Incremented realization state barrier number to 122598
2016-10-24 05:11:55.674 UTC INFO Event Processor for GatewaySender_AsyncEventQueue_txLogEventQueue TxLogAsyncEventListener - - [nsx comp="nsx-manager" subcomp="manager"] Gets 1 events to process.
2016-10-24 05:11:55.674 UTC INFO Event Processor for GatewaySender_AsyncEventQueue_txLogEventQueue GemFireTxLogDao - - [nsx comp="nsx-manager" subcomp="manager"] Start processing transaction ID: bc323257-86ca-4be5-92d4-d70edec29266, number of ops: 1.
2016-10-24 05:11:55.679 UTC INFO Event Processor for GatewaySender_AsyncEventQueue_txLogEventQueue GemFireTxLogDao - - [nsx comp="nsx-manager" subcomp="manager"] Transaction done. Processing time: 5 ms.
.
.
.
Mode
Basic
Availability
Controller, Edge, Manager
Display logging server configuration.
Example
nsx> get logging-servers
192.168.110.60 proto udp level info facility syslog messageid SYSTEM,FABRIC
192.168.110.60 proto udp level info facility auth,user
Mode
Basic
Availability
Controller, Edge, Manager
Display information about the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Logical Router identifier |
Example
nsx-controller-1> get logical-router db6760b3-d9e2-44ef-b1c4-f56138665d71
LR-Id LR-Name Hosts[] Service-Controller Router-Type ClusterId UUID
0x5 SR-46740ffe-9bf1-406e-816d-e200a45f0707 192.168.110.111 192.168.110.108 SERVICE_ROUTER_TIER1 00002000-0000-0000-0000-000000000001 db6760b3-d9e2-44ef-b1c4-f56138665d71
192.168.110.112
Mode
Basic
Availability
Controller
Display information about the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
kvm-1> get logical-router 091a05dc-8080-41a2-a56f-baf6d32fb512
Logical Router
==================================================
UUID : 091a05dc-8080-41a2-a56f-baf6d32fb512
ID : 32769
Ports :
100.64.1.1/31 (02:50:56:00:00:03)
172.16.30.1/24 (02:50:56:56:44:52)
172.16.10.1/24 (02:50:56:56:44:52)
172.16.20.1/24 (02:50:56:56:44:52)
Mode
Basic
Availability
KVM
Display information about the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
esx-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
Logical Router
-------------------------------------------------------------------------------------
VDR UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
LIF number : 4
Route number : 7
State : ['Enabled']
Controller IP : 192.168.110.108
Control plane IP : 192.168.210.51
Control plane active : True
Next hop number : 1
Generation number : 0
Edge active : False
Mode
Basic
Availability
ESXi
Display information about the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09
Logical Router
UUID : 4e425c9e-09c6-4021-bbc7-fab2895a2c09
vrf : 3
type : SERVICE_ROUTER_TIER0
Mode
Basic
Availability
Edge
Display the ARP table and ARP statistics for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 arp stats
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
arp
interface : c66fc321-df74-4aaa-835e-95dc815fe7ae
IP : 172.16.130.13
MAC : 00:50:56:8e:3e:0b
state : perm
statistics
TX-Packets : 0
TX-Fails : 0
TX-Solicits : 0
TX-Solicit-Fails : 0
RX-Solicits : 0
RX-Unsolicits : 0
interface : f6ef3b50-64a0-4948-ab9e-9135963d4b8b
IP : 169.0.0.2
MAC : 02:50:56:00:00:05
state : reach
timeout : 325
statistics
TX-Packets : 1
TX-Fails : 0
TX-Solicits : 239
TX-Solicit-Fails : 0
RX-Solicits : 241
RX-Unsolicits : 0
interface : be290c92-74ed-437c-bbf1-dd78673b6a5a
IP : 172.16.120.11
MAC : 00:50:56:8e:15:e5
state : reach
timeout : 378
statistics
TX-Packets : 6
TX-Fails : 0
TX-Solicits : 261
TX-Solicit-Fails : 0
RX-Solicits : 233
RX-Unsolicits : 0
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
IP : 172.16.110.11
MAC : 00:50:56:8e:91:12
state : perm
statistics
TX-Packets : 0
TX-Fails : 0
TX-Solicits : 0
TX-Solicit-Fails : 0
RX-Solicits : 0
RX-Unsolicits : 0
Mode
Basic
Availability
Edge
Display the ARP table for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 arp-table
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
arp
interface : c66fc321-df74-4aaa-835e-95dc815fe7ae
IP : 172.16.130.13
MAC : 00:50:56:8e:3e:0b
state : perm
interface : f6ef3b50-64a0-4948-ab9e-9135963d4b8b
IP : 169.0.0.2
MAC : 02:50:56:00:00:05
state : reach
timeout : 7
interface : be290c92-74ed-437c-bbf1-dd78673b6a5a
IP : 172.16.120.11
MAC : 00:50:56:8e:15:e5
state : reach
timeout : 24
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
IP : 172.16.110.11
MAC : 00:50:56:8e:91:12
state : perm
Mode
Basic
Availability
Edge
Display parameters defined in global logical router BFD
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 bfd-config
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : SERVICE_ROUTER_TIER0
BFD configurations:
Enabled : true
Min RX Interval: 1000
Min TX Interval: 1000
Min RX TTL : 255
Multiplier : 3
Mode
Basic
Availability
Edge
Display BFD sessions in a logical router
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-r 9d9668b8-d850-49ce-a88d-49bcb0425748 bfd-session
Logical Router
UUID : 9d9668b8-d850-49ce-a88d-49bcb0425748
vrf : 1
type : PLR-SR
Port : a10753a7-40d9-4fcc-bff1-58746042ad05
BFD sessions:
Source : 13.13.13.12
Peer : 13.13.13.13
Enabled : True
State : Unreachable
Min RX Interval: 1001
Min TX Interval: 1002
RX TTL : 255
Multiplier : 3
User(count) : BGP(1)
Mode
Basic
Availability
Edge
Display all BGP learned routes.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router 6db331c1-4aea-48f0-85ec-bd9c3ac30eb0 bgp
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf MED AS Path
* 0.0.0.0/0 192.168.100.253 100 0 64521 !
* 10.10.10.0/24 192.168.100.253 100 0 64521 I
* 172.16.110.0/24 169.0.0.1 100 0 !
* 172.16.120.0/24 169.0.0.1 100 0 !
* 172.16.130.0/24 169.0.0.1 100 0 !
Mode
Basic
Availability
Edge
Display all BGP NLRI matching the community.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <bgp-community> | Bgp Community argument |
Example
31f97d287520> get logical-router 2cf9a361-635d-4ec8-889c-7c0286534bcd bgp community NO_EXPORT
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf Weight MED AS Path
* 0.0.0.0/0 192.168.10.3 100 0 0 101 !
* 20.0.0.0/16 192.168.10.3 100 0 1 101 !
* 25.25.25.0/24 192.168.10.3 100 0 0 101 I
* 26.26.26.0/24 192.168.10.3 100 0 0 101 I
* 27.27.27.0/24 192.168.10.3 100 0 0 101 I
* 30.0.0.0/16 192.168.10.3 100 0 1 101 !
* 172.17.0.0/16 192.168.10.3 100 0 1 101 !
* 192.168.10.0/24 192.168.10.3 100 0 1 101 !
Mode
Basic
Availability
Edge
Display all BGP neighbor information.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router 6db331c1-4aea-48f0-85ec-bd9c3ac30eb0 bgp neighbor
BGP neighbor: 192.168.100.253 Remote AS: 64521
BGP state: Established, up
Hold Time: 3s Keepalive Interval: 1s
Capabilities:
Route Refresh: advertised and received
Address Family: IPv4 Unicast:advertised and received
Graceful Restart: none
Restart Remaining Time: 0
Messages: 8688 received, 8686 sent
Minimum time between advertisements: 30s (default)
For Address Family IPv4 Unicast:advertised and received
Route Refresh: 0 received, 0 sent
Prefixes: 2 received, 3 sent, 3 advertised
1 Connections established, 1 dropped
Local host: 192.168.100.103, Local port: 52202
Remote host: 192.168.100.253, Remote port: 179
Mode
Basic
Availability
Edge
Display information about the specified BGP neighbor.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> get logical-router 6db331c1-4aea-48f0-85ec-bd9c3ac30eb0 bgp neighbor 192.168.100.253
BGP neighbor: 192.168.100.253 Remote AS: 64521
BGP state: Established, up
Hold Time: 3s Keepalive Interval: 1s
Capabilities:
Route Refresh: advertised and received
Address Family: IPv4 Unicast:advertised and received
Graceful Restart: none
Restart Remaining Time: 0
Messages: 8744 received, 8742 sent
Minimum time between advertisements: 30s (default)
For Address Family IPv4 Unicast:advertised and received
Route Refresh: 0 received, 0 sent
Prefixes: 2 received, 3 sent, 3 advertised
1 Connections established, 1 dropped
Local host: 192.168.100.103, Local port: 52202
Remote host: 192.168.100.253, Remote port: 179
Mode
Basic
Availability
Edge
Display routes advertised to the specified BGP neighbor.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> get logical-router 6db331c1-4aea-48f0-85ec-bd9c3ac30eb0 bgp neighbor 192.168.100.253 advertised-routes
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf MED AS Path
172.16.110.0/24 192.168.100.103 0 0 64520 !
172.16.120.0/24 192.168.100.103 0 0 64520 !
172.16.130.0/24 192.168.100.103 0 0 64520 !
Mode
Basic
Availability
Edge
Display routes learned from the specified BGP neighbor.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> get logical-router 6db331c1-4aea-48f0-85ec-bd9c3ac30eb0 bgp neighbor 192.168.100.253 routes
Status flags: * - best, I - internal
Origin flags: I - IGP, E - EGP, ! - incomplete
Network Next Hop LocPrf MED AS Path
* 0.0.0.0/0 192.168.100.253 100 0 64521 !
* 10.10.10.0/24 192.168.100.253 100 0 64521 I
Mode
Basic
Availability
Edge
Display summarized BGP neighbor information.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router 6db331c1-4aea-48f0-85ec-bd9c3ac30eb0 bgp neighbor summary
BGP summary information for VRF default
Router ID: 192.168.10.2 Local AS: 100
Neighbor AS State Up/DownTime #InMsgs #OutMsgs #InPfx #OutPfx
192.168.10.3 101 Establ 0d0h0m11s 17 13 5 0
192.168.10.6 4000 Active 0d0h0m0s 0 0 0 0
Mode
Basic
Availability
Edge
Display the forwarding table for the specified logical router. Optionally specify a prefix to display only the entry that matches that network.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <prefix> | Network Address argument |
Example
nsx-edge-1> get logical-router 5bcf13c7-3cfd-4122-b746-cad7f06b8acd forwarding
Logical Router
UUID : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
vrf : 4
type : SERVICE_ROUTER_TIER1
IP Forwarding Table
IP Prefix Type UUID Gateway IP Gateway MAC
0.0.0.0/0 route 16cf5466-87f2-4810-a6d2-ff4cef71da8a 100.64.1.0 02:50:56:56:44:52
100.64.1.1/32 route 022286ee-5d20-5658-8929-0fd2caee6409
127.0.0.1/32 route 022286ee-5d20-5658-8929-0fd2caee6409
169.0.0.0/28 route 138853e0-76b1-4e15-af56-1213639afe53
169.0.0.2/32 route 022286ee-5d20-5658-8929-0fd2caee6409
172.16.110.0/24 route 138853e0-76b1-4e15-af56-1213639afe53 169.0.0.1 02:50:56:56:44:52
172.16.120.0/24 route 138853e0-76b1-4e15-af56-1213639afe53 169.0.0.1 02:50:56:56:44:52
172.16.130.0/24 route 138853e0-76b1-4e15-af56-1213639afe53 169.0.0.1 02:50:56:56:44:52
or
nsx-edge-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 forwarding 172.16.110.0/24
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
IP Forwarding Table
IP Prefix Type UUID Gateway IP Gateway MAC
172.16.110.0/24 route 3c139373-f8f7-441e-aac4-146d9b5ff3a6
Mode
Basic
Availability
Edge
Display the high availability state history for the specified logical router. Only service routers have a high availability status. Use the
get logical-routers command to get a list of logical routers and their router types.| Option | Description |
|---|---|
| <uuid> | UUID argument |
Example
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 high-availability history state
State : Down
Event : Init
Resources :
Time : 2016-02-02 18:41:22.80
State : Active
Event : Node Up
Resources : 0
Time : 2016-02-02 18:41:26.91
Mode
Basic
Availability
Edge
Display the high availability status for the specified logical router. Only service routers have a high availability status. Use the
get logical-routers command to get a list of logical routers and their router types.| Option | Description |
|---|---|
| <uuid> | UUID argument |
Example
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 high-availability status
Service Router
UUID : 4e425c9e-09c6-4021-bbc7-fab2895a2c09
state : Active
type : TIER0
mode : A/A
rank : 0
HA ports state
UUID : 733d7ed3-1daa-4c28-bc0a-77e3736fea14
op_state : Up
addresses : 169.0.0.2/28
Mode
Basic
Availability
Edge
Display information about a specific interface on the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Logical Router identifier |
| <interface-name> | Logical Router interface name |
Example
nsx-controller-1> get logical-router db6760b3-d9e2-44ef-b1c4-f56138665d71 interface 8b06827f-6325-4afd-b56d-6260ebf0a1a0
UUID: 8b06827f-6325-4afd-b56d-6260ebf0a1a0
Interface-Name: bp-sr0-port
Logical-Router-Id: 0x5
Id: 15240
Type: VXSTT
AdminStateUp: true
UrpfMode: PORT_CHECK
Subnets:
169.0.0.2/28
Mac: 02:50:56:00:00:06
Mtu: 0
Multicast-IP: 0.0.0.1
Flags: 0x204
DHCP-Server-IP:
Mode
Basic
Availability
Controller
Display interface information for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
esx-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 interfaces
Logical Router Interfaces
---------------------------------------------------------------------------
LIF UUID : c66fc321-df74-4aaa-835e-95dc815fe7ae
Mode : ['Routing']
Overlay VNI : 27530
IP : 172.16.130.1
IP mask : 255.255.255.0
Mac : 02:50:56:56:44:52
Connected DVS : nsxvswitch
Control plane enable : True
Replication Mode : 0.0.0.1
State : ['Enabled']
Flags : 0x2288
DHCP relay : Not enable
LIF UUID : be290c92-74ed-437c-bbf1-dd78673b6a5a
Mode : ['Routing']
Overlay VNI : 25480
IP : 172.16.120.1
IP mask : 255.255.255.0
Mac : 02:50:56:56:44:52
Connected DVS : nsxvswitch
Control plane enable : True
Replication Mode : 0.0.0.1
State : ['Enabled']
Flags : 0x2288
DHCP relay : Not enable
LIF UUID : f6ef3b50-64a0-4948-ab9e-9135963d4b8b
Mode : ['Routing-Backplane']
Overlay VNI : 37768
IP : 169.0.0.1
IP mask : 255.255.255.240
Mac : 02:50:56:56:44:52
Connected DVS : nsxvswitch
Control plane enable : True
Replication Mode : 0.0.0.1
State : ['Enabled']
Flags : 0x12308
DHCP relay : Not enable
LIF UUID : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
Mode : ['Routing']
Overlay VNI : 11145
IP : 172.16.110.1
IP mask : 255.255.255.0
Mac : 02:50:56:56:44:52
Connected DVS : nsxvswitch
Control plane enable : True
Replication Mode : 0.0.0.1
State : ['Enabled']
Flags : 0x2388
DHCP relay : Not enable
Mode
Basic
Availability
ESXi
Display all interfaces on the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Logical Router identifier |
Example
nsx-controller-1> get logical-router db6760b3-d9e2-44ef-b1c4-f56138665d71 interfaces
Interface Type Id IP[] Urpf-Mode Admin-State-Up UUID
sr-0-loopback-port UNSET 0 127.0.0.1/8 NONE true 00003300-0000-0000-0000-000000000005
bp-sr0-port VXSTT 15240 169.0.0.2/28 PORT_CHECK true 8b06827f-6325-4afd-b56d-6260ebf0a1a0
97458be5-bf5e-44f8-a6b0-9fc32be347fc VXSTT 41864 100.64.1.1/31 PORT_CHECK true 97458be5-bf5e-44f8-a6b0-9fc32be347fc
Mode
Basic
Availability
Controller
Display interface information for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 interfaces
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
interfaces
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
ifuid : 267
type : lif
peer : 234f7123-4b2c-426d-93d3-ab6512bf6dc6
mtu : 1542
admin : up
subnets : 172.16.110.1/24
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
interface : b8cb725a-4271-54b8-93e0-67d58c3bc574
ifuid : 276
type : blackhole
interface : be290c92-74ed-437c-bbf1-dd78673b6a5a
ifuid : 283
type : lif
peer : 407df400-4638-4fdf-89aa-0e30d377a9f4
mtu : 1542
admin : up
subnets : 172.16.120.1/24
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
interface : fc9ffbbd-51d8-57f9-94d2-50b317a22db5
ifuid : 275
type : cpu
interface : c66fc321-df74-4aaa-835e-95dc815fe7ae
ifuid : 286
type : lif
peer : 50821d70-954b-4cdc-abbd-2bfd2ecde598
mtu : 1542
admin : up
subnets : 172.16.130.1/24
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
interface : f6ef3b50-64a0-4948-ab9e-9135963d4b8b
ifuid : 277
type : lif
peer : a931638f-4fcd-4a70-91b8-ec45ada8952f
mtu : 1542
admin : up
subnets : 169.0.0.1/28
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
Mode
Basic
Availability
Edge
Display the interface statistics for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
dev> get logical-router 00000005-0000-0000-0000-000000000000 interfaces stats
Logical Router
UUID : 00000005-0000-0000-0000-000000000000
vrf : 2
type : SERVICE_ROUTER_TIER0
Statistics
Interface Type RX PKTS TX PKTS RX BYTES TX BYTES RX Drops TX Drops
0000000e-0000-0000-0000-000000000000 cpu 0 0 0 0 0 0
00000009-0000-0000-0000-000000000000 lif 0 0 0 0 0 0
00000007-0000-0000-0000-000000000000 lif 0 0 0 0 0 0
Total 0 0 0 0 0 0
Mode
Basic
Availability
Edge
Display neighbor information (ARP cache) for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
esx-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 neighbors
Logical Routers Neighbors
--------------------------------------------------------------------------------------------------------------
Flags Legend: [S: Static], [V: Valid], [P: Proxy], [I: Interface]
[N: Nascent], [L: Local], [D: Deleted], [K: linKlif]
Network Mac Flags Expiry SrcPort Refcnt Lif UUID
==============================================================================================================
172.16.130.1 02:50:56:56:44:52 VI permanent 0 1 c66fc321-df74-4aaa-835e-95dc815fe7ae
172.16.120.1 02:50:56:56:44:52 VI permanent 0 1 be290c92-74ed-437c-bbf1-dd78673b6a5a
169.0.0.1 02:50:56:56:44:52 VI permanent 0 1 f6ef3b50-64a0-4948-ab9e-9135963d4b8b
169.0.0.2 02:50:56:00:00:05 V 498 83886128 2 f6ef3b50-64a0-4948-ab9e-9135963d4b8b
172.16.110.1 02:50:56:56:44:52 VI permanent 0 1 3c139373-f8f7-441e-aac4-146d9b5ff3a6
172.16.110.11 00:50:56:8e:91:12 VL 488 83886132 18 3c139373-f8f7-441e-aac4-146d9b5ff3a6
Mode
Basic
Availability
ESXi
Display neighbor information (ARP cache) for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
kvm-1> get logical-router 1904e13f-757a-4f44-9f85-cb84678a1a16 neighbors
Logical Router Forwarding Table
============================================================
Prefix MAC State Timeout
192.168.1.1/24 02:50:56:56:44:52 Up 10
Mode
Basic
Availability
KVM
Display interface information for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
kvm-1> get logical-router 091a05dc-8080-41a2-a56f-baf6d32fb512 ports
Logical Router Ports
============================================================
Port UUID : e1ce6498-b3ca-4000-a0f4-0734415044cf
IP/Mask : 100.64.1.1/31
MAC Address : 02:50:56:00:00:03
VNI : 58248
Flag : 1
============================================================
Port UUID : d7c184c8-bf63-47c8-bf48-01836d0380e5
IP/Mask : 172.16.30.1/24
MAC Address : 02:50:56:56:44:52
VNI : 31624
Flag : 0
============================================================
Port UUID : 07607708-9bc7-46fc-8d14-fc016b9297da
IP/Mask : 172.16.10.1/24
MAC Address : 02:50:56:56:44:52
VNI : 54152
Flag : 0
============================================================
Port UUID : b2d3d312-962e-4a79-864c-09304195b88a
IP/Mask : 172.16.20.1/24
MAC Address : 02:50:56:56:44:52
VNI : 52104
Flag : 0
============================================================
Mode
Basic
Availability
KVM
Display the routing table for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Logical Router identifier |
Example
nsx-controller-1> get logical-router db6760b3-d9e2-44ef-b1c4-f56138665d71 route
LR-Id Destination Next-Hop LR-Port-Id Blackhole Route-Type Admin-Distance Admin-State-Up Route-UUID
0x5 172.16.110.0/24 169.0.0.1 8b06827f-6325-4afd-b56d-6260ebf0a1a0 false NSX_CONNECTED 0 true 00000018-ac10-6e00-0000-000000000005
0x5 100.64.1.0/31 0.0.0.0 97458be5-bf5e-44f8-a6b0-9fc32be347fc false CONNECTED 0 true 0000001f-6440-0100-0000-000000000005
0x5 0.0.0.0/0 100.64.1.0 97458be5-bf5e-44f8-a6b0-9fc32be347fc false NSX_STATIC 3 true 00000000-0000-0000-0000-000000000005
0x5 172.16.120.0/24 169.0.0.1 8b06827f-6325-4afd-b56d-6260ebf0a1a0 false NSX_CONNECTED 0 true 00000018-ac10-7800-0000-000000000005
0x5 172.16.130.0/24 169.0.0.1 8b06827f-6325-4afd-b56d-6260ebf0a1a0 false NSX_CONNECTED 0 true 00000018-ac10-8200-0000-000000000005
0x5 169.0.0.0/28 0.0.0.0 8b06827f-6325-4afd-b56d-6260ebf0a1a0 false CONNECTED 0 true 0000001c-a900-0000-0000-000000000005
Mode
Basic
Availability
Controller
Display a specific IPv4 route on the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Logical Router identifier |
| <prefix> | Network Address argument |
Example
nsx-controller-1> get logical-router db6760b3-d9e2-44ef-b1c4-f56138665d71 route 172.16.120.0/24
LR-Id Destination Next-Hop LR-Port-Id Blackhole Route-Type Admin-Distance Admin-State-Up Route-UUID
0x5 172.16.120.0/24 169.0.0.1 8b06827f-6325-4afd-b56d-6260ebf0a1a0 false NSX_CONNECTED 0 true 00000018-ac10-7800-0000-000000000005
Mode
Basic
Availability
Controller
Display the routing table for the specified logical router.
You must specify a tier 0 service router in this command.
Use the
get logical-routers command to get a
list of logical routers and their router types.
Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
Total number of routes: 7
b 11.11.11.0/24 [20/0] via 192.168.130.254
rl 100.64.1.0/31 [0/0] via 169.0.0.1
c 169.0.0.0/28 [0/0] via 169.0.0.2
ns 172.16.110.0/24 [3/3] via 169.0.0.1
ns 172.16.120.0/24 [3/3] via 169.0.0.1
ns 172.16.130.0/24 [3/3] via 169.0.0.1
c 192.168.130.0/24 [0/0] via 192.168.130.3
or
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route 172.16.110.0/24
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
ns 172.16.110.0/24 [3/3] via 169.0.0.1
Mode
Basic
Availability
Edge
Display BGP-learned routes from the routing table.
You must specify a tier 0 service router in this command.
Use the
get logical-routers command to get a
list of logical routers and their router types.
Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route bgp
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
b 11.11.11.0/24 [20/0] via 192.168.130.254
b 12.12.12.0/24 [20/0] via 192.168.130.254
or
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route bgp 12.12.12.1
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
b 12.12.12.0/24 [20/0] via 192.168.130.254
Mode
Basic
Availability
Edge
Display connected routes from the routing table for the specified
logical router.
You must specify a tier 0 service router in this command.
Use the
get logical-routers command to get a
list of logical routers and their router types.
Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route connected
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
c 169.0.0.0/28 [0/0] via 169.0.0.2
c 192.168.130.0/24 [0/0] via 192.168.130.3
or
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route connected 192.168.130.22
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
c 192.168.130.0/24 [0/0] via 192.168.130.3
Mode
Basic
Availability
Edge
Display NAT routes from the routing table for the specified logical router. You must specify a tier 0 service router in this command. Use the
get logical-routers command to get a list of logical routers and their router types. Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1> get logical-router 44c70e10-3a76-4477-a461-bf3097da2d54 route nat
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
t0n 11.11.1.0/24 [2/0] via 0.0.0.0
t1n 11.11.2.0/24 [3/0] via 169.254.0.1
nsx-edge-1> get logical-router 44c70e10-3a76-4477-a461-bf3097da2d54 route nat 11.11.2.0/24
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
t1n 11.11.2.0/24 [3/0] via 169.254.0.1
Mode
Basic
Availability
Edge
Display static routes from the routing table.
You must specify a tier 0 service router in this command.
Use the
get logical-routers command to get a
list of logical routers and their router types.
Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route static
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
rl 100.64.1.0/31 [0/0] via 169.0.0.1
ns 172.16.110.0/24 [3/3] via 169.0.0.1
ns 172.16.120.0/24 [3/3] via 169.0.0.1
ns 172.16.130.0/24 [3/3] via 169.0.0.1
or
nsx-edge-1> get logical-router 4e425c9e-09c6-4021-bbc7-fab2895a2c09 route static 172.16.110.11
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
ns 172.16.110.0/24 [3/3] via 169.0.0.1
Mode
Basic
Availability
Edge
Display routes for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
kvm-1> get logical-router 091a05dc-8080-41a2-a56f-baf6d32fb512 routes
Logical Router Forwarding Table
================================================================================
Prefix Gateway Interface
100.64.1.0/8 0.0.0.0 e1ce6498-b3ca-4000-a0f4-0734415044cf
172.16.30.0/16 0.0.0.0 d7c184c8-bf63-47c8-bf48-01836d0380e5
172.16.10.0/16 0.0.0.0 07607708-9bc7-46fc-8d14-fc016b9297da
172.16.20.0/16 0.0.0.0 b2d3d312-962e-4a79-864c-09304195b88a
0.0.0.0/8 100.64.1.0 e1ce6498-b3ca-4000-a0f4-0734415044cf
Mode
Basic
Availability
KVM
Display routes for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
esx-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 routes
Logical Routers Routes
-----------------------------------------------------------------------------------------------------------------------------
Flags Legend: [U: Up], [G: Gateway], [C: Connected], [I: Interface]
[H: Host], [R: Reject], [B: Blackhole], [F: Soft Flush], [E: ECMP]
Destination Mask Gateway Flags Ref Origin Uptime Lif UUID
=============================================================================================================================
0.0.0.0 0.0.0.0 169.0.0.2 UG 17 auto 246938 f6ef3b50-64a0-4948-ab9e-9135963d4b8b
100.64.1.0 255.255.255.254 169.0.0.2 UG 1 auto 246938 f6ef3b50-64a0-4948-ab9e-9135963d4b8b
100.64.1.1 255.255.255.255 169.0.0.2 UGH 1 auto 246938 f6ef3b50-64a0-4948-ab9e-9135963d4b8b
169.0.0.0 255.255.255.240 0.0.0.0 UCI 1 manual 246938 f6ef3b50-64a0-4948-ab9e-9135963d4b8b
172.16.110.0 255.255.255.0 0.0.0.0 UCI 17 manual 246938 3c139373-f8f7-441e-aac4-146d9b5ff3a6
172.16.120.0 255.255.255.0 0.0.0.0 UCI 1 manual 246938 be290c92-74ed-437c-bbf1-dd78673b6a5a
172.16.130.0 255.255.255.0 0.0.0.0 UCI 1 manual 246938 c66fc321-df74-4aaa-835e-95dc815fe7ae
Mode
Basic
Availability
ESXi
Display statistics for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 stats
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
Statistics
Dropped No Memory : 0
Dropped No Route : 0
Mode
Basic
Availability
Edge
Display statistics for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Logical Router identifier |
Example
nsx-controller-1> get logical-router db6760b3-d9e2-44ef-b1c4-f56138665d71 stats
host.reports.received 2
host.reports.dropped 0
edge.routes.received 0
edge.routes.dropped 0
bridge.reports.received 0
bridge.reports.dropped 0
bridge.macs.received 0
bridge.macs.dropped 0
route.queries.received 0
interface.queries.received 0
mac.queries.received 0
clear.routes.received 0
clear.macs.received 0
errdecode.messages.dropped 0
memfull.messages.dropped 0
errserver.messages.dropped 0
notifications.error 0
Mode
Basic
Availability
Controller
Display statistics over time for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Logical Router identifier |
Example
nsx-controller-1> get logical-router db6760b3-d9e2-44ef-b1c4-f56138665d71 stats-sample
01:30:00 01:40:00 01:50:00 02:00:00 02:10:00 02:20:00
host.reports.received 0 0 0 0 0 0
host.reports.dropped 0 0 0 0 0 0
edge.routes.received 0 0 0 0 0 0
edge.routes.dropped 0 0 0 0 0 0
bridge.reports.received 0 0 0 0 0 0
bridge.reports.dropped 0 0 0 0 0 0
bridge.macs.received 0 0 0 0 0 0
bridge.macs.dropped 0 0 0 0 0 0
route.queries.received 0 0 0 0 0 0
interface.queries.received 0 0 0 0 0 0
mac.queries.received 0 0 0 0 0 0
clear.routes.received 0 0 0 0 0 0
clear.macs.received 0 0 0 0 0 0
errdecode.messages.dropped 0 0 0 0 0 0
memfull.messages.dropped 0 0 0 0 0 0
errserver.messages.dropped 0 0 0 0 0 0
notifications.error 0 0 0 0 0 0
Mode
Basic
Availability
Controller
Display the ARP table for all logical router interfaces.
Example
nsx-edge-1> get logical-router arp-table
interface : 8d655fb8-fc5e-5c08-90f5-15de973a9c77
IP : 192.168.250.61
MAC : 00:50:56:62:58:be
state : reach
timeout : 287
interface : 4b3be9e1-1363-4a85-ac13-8f7ad5b1e842
IP : 192.168.130.1
MAC : 68:ef:bd:4e:98:7f
state : reach
timeout : 309
interface : ef76622f-52ea-425f-b7c9-6264bf11b667
IP : 169.0.0.2
MAC : 02:50:56:00:00:02
state : reach
timeout : 425
interface : c66fc321-df74-4aaa-835e-95dc815fe7ae
IP : 172.16.130.13
MAC : 00:50:56:8e:3e:0b
state : perm
interface : f6ef3b50-64a0-4948-ab9e-9135963d4b8b
IP : 169.0.0.2
MAC : 02:50:56:00:00:05
state : reach
timeout : 397
.
.
.
Mode
Basic
Availability
Edge
Display interface information for the specified logical router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router interface 3c139373-f8f7-441e-aac4-146d9b5ff3a6
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
ifuid : 267
vrf : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
peer : 234f7123-4b2c-426d-93d3-ab6512bf6dc6
mtu : 1542
admin : up
subnets : 172.16.110.1/24
MAC : 02:50:56:56:44:52
urpf-mode : PORT_CHECK
Mode
Basic
Availability
Edge
Display the ARP table for the specified logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router interface 3c139373-f8f7-441e-aac4-146d9b5ff3a6 arp-table
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
IP : 172.16.110.12
MAC : 00:0c:29:4d:09:19
state : perm
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
IP : 172.16.110.11
MAC : 00:50:56:8e:91:12
state : perm
Mode
Basic
Availability
Edge
Display statistics for the specified logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-router interface 3c139373-f8f7-441e-aac4-146d9b5ff3a6 stats
interface : 3c139373-f8f7-441e-aac4-146d9b5ff3a6
ifuid : 267
vrf : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
peer : 234f7123-4b2c-426d-93d3-ab6512bf6dc6
mtu : 1542
admin : up
subnets : 172.16.110.1/24
MAC : 02:50:56:56:44:52
statistics
RX-Packets : 16
RX-Bytes : 1080
RX-Drops : 6
Blocked : 0
DST-Unsupported: 0
Firewall : 0
IP-Options : 0
Malformed : 0
No-Receiver : 0
No-Route : 0
RPF-Check : 0
TX-Packets : 119849
TX-Bytes : 11744586
TX-Drops : 1
Blocked : 0
Firewall : 0
Frag-Needed : 0
No-ARP : 1
IP Ressemble
Fragments-OK: 0
Fragemnts-Error: 0
Fragments-Timeout: 0
IP Fragment
Fragments-OK: 0
Fragments-Error: 0
Mode
Basic
Availability
Edge
Display information for all logical router interfaces.
Example
nsx-edge-1> get logical-router interfaces
interface : 9fd3c667-32db-5921-aaad-7a88c80b5e9f
ifuid : 257
vrf : 736a80e3-23f6-5a2d-81d6-bbefb2786666
interface : f322c6ca-4298-568b-81c7-a006ba6e6c88
ifuid : 256
vrf : 736a80e3-23f6-5a2d-81d6-bbefb2786666
interface : 8d655fb8-fc5e-5c08-90f5-15de973a9c77
ifuid : 258
vrf : 736a80e3-23f6-5a2d-81d6-bbefb2786666
peer : 7172ce2b-1dd7-5deb-b425-4f99e4067ba2
mtu : 1600
admin : up
subnets : 192.168.250.60/24
MAC : 02:50:56:00:00:00
urpf-mode : NONE
interface : fd7da1d6-aa10-5008-8290-b6cd7f295dec
ifuid : 271
vrf : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
interface : 022286ee-5d20-5658-8929-0fd2caee6409
ifuid : 270
vrf : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
interface : 16cf5466-87f2-4810-a6d2-ff4cef71da8a
ifuid : 263
vrf : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
peer : 2d5a5475-7d0b-46a3-8757-cf32c706d749
mtu : 1542
admin : up
subnets : 100.64.1.1/31
MAC : 02:50:56:00:00:04
urpf-mode : PORT_CHECK
.
.
.
Mode
Basic
Availability
Edge
Display statistics for all logical router interfaces.
Example
nsx-edge-1> get logical-router interfaces stats
interface : 8d655fb8-fc5e-5c08-90f5-15de973a9c77
ifuid : 258
vrf : 736a80e3-23f6-5a2d-81d6-bbefb2786666
peer : 7172ce2b-1dd7-5deb-b425-4f99e4067ba2
mtu : 1600
admin : up
subnets : 192.168.250.60/24
MAC : 02:50:56:00:00:00
statistics
RX-Packets : 100677
RX-Bytes : 13589155
RX-Drops : 60
Blocked : 0
DST-Unsupported: 0
Firewall : 0
IP-Options : 0
Malformed : 0
No-Receiver : 2
No-Route : 0
RPF-Check : 0
TX-Packets : 121953
TX-Bytes : 17221883
TX-Drops : 1
Blocked : 0
Firewall : 0
Frag-Needed : 0
No-ARP : 1
IP Ressemble
Fragments-OK: 0
Fragemnts-Error: 0
Fragments-Timeout: 0
IP Fragment
Fragments-OK: 0
Fragments-Error: 0
interface : 16cf5466-87f2-4810-a6d2-ff4cef71da8a
ifuid : 263
vrf : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
peer : 2d5a5475-7d0b-46a3-8757-cf32c706d749
mtu : 1542
admin : up
subnets : 100.64.1.1/31
MAC : 02:50:56:00:00:04
statistics
RX-Packets : 13195
RX-Bytes : 1290982
RX-Drops : 0
Blocked : 0
DST-Unsupported: 0
Firewall : 0
IP-Options : 0
Malformed : 0
No-Receiver : 0
No-Route : 0
RPF-Check : 0
TX-Packets : 11588
TX-Bytes : 1132768
TX-Drops : 0
Blocked : 0
Firewall : 0
Frag-Needed : 0
No-ARP : 0
IP Ressemble
Fragments-OK: 0
Fragemnts-Error: 0
Fragments-Timeout: 0
IP Fragment
Fragments-OK: 0
Fragments-Error: 0
.
.
.
Mode
Basic
Availability
Edge
Display information about all logical routers.
Example
nsx-edge-1> get logical-routers
Logical Router
UUID : 736a80e3-23f6-5a2d-81d6-bbefb2786666
vrf : 2
type : TUNNEL
Logical Router
UUID : 4e425c9e-09c6-4021-bbc7-fab2895a2c09
vrf : 3
type : SERVICE_ROUTER_TIER0
Logical Router
UUID : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
vrf : 4
type : SERVICE_ROUTER_TIER1
Logical Router
UUID : 7bcc1d9a-cff6-4331-b135-1e0513f3eb63
vrf : 5
type : DISTRIBUTED_ROUTER
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
Mode
Basic
Availability
Edge
Display information about all logical routers.
Example
nsx-controller-1> get logical-routers
LR-Id LR-Name Hosts[] Service-Controller Router-Type ClusterId UUID
0x5 SR-46740ffe-9bf1-406e-816d-e200a45f0707 192.168.110.111 192.168.110.108 SERVICE_ROUTER_TIER1 00002000-0000-0000-0000-000000000001 db6760b3-d9e2-44ef-b1c4-f56138665d71
192.168.110.112
0x2 DR-ef64d966-56f0-4f3f-bb02-16d07de74b5c 192.168.110.111 192.168.110.108 DISTRIBUTED_ROUTER N/A ef64d966-56f0-4f3f-bb02-16d07de74b5c
192.168.110.112
0x1 DR-46740ffe-9bf1-406e-816d-e200a45f0707 192.168.110.111 192.168.110.108 DISTRIBUTED_ROUTER N/A 46740ffe-9bf1-406e-816d-e200a45f0707
192.168.210.52
192.168.110.112
192.168.210.51
0x3 SR-ef64d966-56f0-4f3f-bb02-16d07de74b5c 192.168.110.111 192.168.110.108 SERVICE_ROUTER_TIER0 00002000-0000-0000-0000-000000000002 19772688-b220-4a34-94a3-8a094dcdd979
0x4 SR-ef64d966-56f0-4f3f-bb02-16d07de74b5c 192.168.110.112 192.168.110.108 SERVICE_ROUTER_TIER0 00002000-0000-0000-0000-000000000002 2d1667ba-ed4a-49d0-8a1d-cd8a77c324bc
Mode
Basic
Availability
Controller
Display information about logical routers on this hypervisor host.
Example
esx-1> get logical-routers
Logical Routers Summary
------------------------------------------------------------
VDR UUID LIF num Route num
d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8 4 7
Mode
Basic
Availability
ESXi
Display information about logical routers on this hypervisor host.
Example
kvm-1> get logical-routers
Logical Routers Summary
======================================================================
Router UUID ID Port Count
091a05dc-8080-41a2-a56f-baf6d32fb512 32769 4
c8e5b716-fbb2-44e9-8c69-e61db332c418 40961 3
Mode
Basic
Availability
KVM
Display statistics for all logical routers.
Example
nsx-edge-1> get logical-routers stats
Logical Router
UUID : 736a80e3-23f6-5a2d-81d6-bbefb2786666
vrf : 2
type : TUNNEL
Statistics
Dropped No Memory : 0
Dropped No Route : 0
Logical Router
UUID : 4e425c9e-09c6-4021-bbc7-fab2895a2c09
vrf : 3
type : SERVICE_ROUTER_TIER0
Statistics
Dropped No Memory : 0
Dropped No Route : 0
Logical Router
UUID : 5bcf13c7-3cfd-4122-b746-cad7f06b8acd
vrf : 4
type : SERVICE_ROUTER_TIER1
Statistics
Dropped No Memory : 0
Dropped No Route : 0
Logical Router
UUID : 7bcc1d9a-cff6-4331-b135-1e0513f3eb63
vrf : 5
type : DISTRIBUTED_ROUTER
Statistics
Dropped No Memory : 0
Dropped No Route : 0
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
Statistics
Dropped No Memory : 0
Dropped No Route : 0
Mode
Basic
Availability
Edge
Display statistics for all logical routers.
Example
nsx-controller-1> get logical-routers stats
messages.query 0
messages.update 0
messages.flush 0
messages.notification 0
Mode
Basic
Availability
Controller
Display statistics over time for all logical routers.
Example
nsx-controller-1> get logical-routers stats-sample
02:22:50 02:23:00 02:23:10 02:23:20 02:23:30 02:23:40 02:23:50 02:24:00 02:24:10 02:24:20
messages.query 0 0 0 0 0 0 0 0 0 0
messages.update 0 0 0 0 0 0 0 0 0 0
messages.flush 0 0 0 0 0 0 0 0 0 0
messages.notification 0 0 0 0 0 0 0 0 0 0
Mode
Basic
Availability
Controller
Display a specific logical service binding.
| Option | Description |
|---|---|
| <uuid> | Generic UUID string argument Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$ |
Example
nsx-edge-1> get logical-service binding 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
DHCP_ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
LOG_SWITCH_PORT_ID: 60905155-4378-4902-8528-7231a2f6d736
SERVICE_TYPE: DHCP
Mode
Basic
Availability
Edge
Display all logical service bindings.
Example
nsx-edge-1> get logical-service bindings
DHCP_ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
LOG_SWITCH_PORT_ID: 60905155-4378-4902-8528-7231a2f6d736
SERVICE_TYPE: DHCP
Mode
Basic
Availability
Edge
Display information for the specified logical service port. Optionally specify an argument to display the statistics.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-service port b836eacf-3d1c-5fc9-ab18-19dc0015a57e
lservice-port: b836eacf-3d1c-5fc9-ab18-19dc0015a57e
ifuid : 262
service-type: dhcp
IP : 192.168.110.50
MAC : 00:50:56:98:7d:d7
attach-port : 60905155-4378-4902-8528-7231a2f6d736
nsx-edge-1> get logical-service port b836eacf-3d1c-5fc9-ab18-19dc0015a57e stats
lservice-port: b836eacf-3d1c-5fc9-ab18-19dc0015a57e
ifuid : 262
service-type: dhcp
Statistics
RX-Packets : 16
RX-Bytes : 1080
RX-Drops : 0
Slowpath : 0
Kni : 0
Malformed : 0
No-DHCP-Server: 0
No-Match : 0
TX-Packets : 10
TX-Bytes : 420
TX-Drops : 0
No-Memory : 0
No-Linked-Port: 0
Mode
Basic
Availability
Edge
Display information for all logical service ports. Optionally specify an argument to display the statistics.
Example
nsx-edge-1> get logical-service ports
lservice-port: b836eacf-3d1c-5fc9-ab18-19dc0015a57e
ifuid : 262
service-type: dhcp
IP : 192.168.110.50
MAC : 00:50:56:98:7d:d7
attach-port : 60905155-4378-4902-8528-7231a2f6d736
nsx-edge-1> get logical-service ports stats
lservice-port: b836eacf-3d1c-5fc9-ab18-19dc0015a57e
ifuid : 262
service-type: dhcp
Statistics
RX-Packets : 16
RX-Bytes : 1080
RX-Drops : 0
Slowpath : 0
Kni : 0
Malformed : 0
No-DHCP-Server: 0
No-Match : 0
TX-Packets : 10
TX-Bytes : 420
TX-Drops : 0
No-Memory : 0
No-Linked-Port: 0
Mode
Basic
Availability
Edge
Display the state of a specific logical service.
| Option | Description |
|---|---|
| <uuid> | Generic UUID string argument Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$ |
Example
nsx-edge-1> get logical-service state 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
NODE_ID: 3284f707-98f9-4e7c-b573-f7898dfa12ba
NODE_RANK: 0
PEER_MGMT_IP:
IPV4: 192.168.110.101
STATE: ACTIVE
Mode
Basic
Availability
Edge
Display the state of all logical services.
Example
nsx-edge-1> get logical-service states
ID: 8bc04d52-b1f9-4258-8d13-b8fdbf031a0d
NODE_ID: 3284f707-98f9-4e7c-b573-f7898dfa12ba
NODE_RANK: 0
PEER_MGMT_IP:
IPV4: 192.168.110.101
STATE: ACTIVE
Mode
Basic
Availability
Edge
Display information about the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
kvm-1> get logical-switch 0a8cb2ab-d15b-4b46-a6ee-0a1cd29be34d
Logical Switch
=======================================================
UUID : 0a8cb2ab-d15b-4b46-a6ee-0a1cd29be34d
VNI/VLAN : 31624
Is VLAN backed : True
Replication mode: mtep
Controller IP : 192.168.110.51
Link status : Up
VIF count : 1
MAC entry count : 0
TEP entry count : 4
ARP entry count : 0
Mode
Basic
Availability
KVM
Display information about the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
esx-1> get logical-switch bf543c67-3ffe-44dd-a1d3-57e7cd2e0aff
Logical Switch
-----------------------------------------------------------------
Host Kernel Entry
==================================================
DVS name : nsxvswitch
VNI : 11145
Multicast IP : 0.0.0.1
Multicast proxy enable : True
ARP proxy enable : True
CP connection up : True
Controller IP : 192.168.110.108
MAC entry count : 2
ARP entry count : 0
VIF entry count : 2
MTEP entry count : 0
LCP Entry
=================================================================
Logical switch UUID : bf543c67-3ffe-44dd-a1d3-57e7cd2e0aff
VNI : 11145
Replication mode : unicast mtep
Transport binding : None
Vlan ID : None
Admin state up : True
Mode
Basic
Availability
ESXi
Display the ARP table for the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
esx-1> get logical-switch bf543c67-3ffe-44dd-a1d3-57e7cd2e0aff arp-table
Logical Switch ARP Table
--------------------------------------------------
Host Kernel Entry
==================================================
IP MAC Flags
LCP Remote Entry
==================================================
IP MAC
LCP Local Entry
==================================================
IP MAC
172.16.110.11 00:50:56:8e:91:12
172.16.110.12 00:0c:29:4d:09:19
Mode
Basic
Availability
ESXi
Display the ARP table for the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
kvm-1> get logical-switch 29576 arp-table
Logical Switch ARP Table
==================================================
IP MAC
10.144.13.29 00:01:02:03:42:11
Mode
Basic
Availability
KVM
Display the MAC table for the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
kvm-1> get logical-switch 29576 mac-table
Logical Switch MAC Table
============================================================
MAC VTEP Label
00:01:02:00:00:03 124928
00:01:02:00:00:04 124928
Mode
Basic
Availability
KVM
Display the MAC table for the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
esx-1> get logical-switch bf543c67-3ffe-44dd-a1d3-57e7cd2e0aff mac-table
Logical Switch MAC Table
---------------------------------------------------------------------------
Host Kernel Entry
===========================================================================
Inner MAC Outer MAC Outer IP Flags
02:50:56:56:44:52 02:50:56:00:00:00 192.168.250.60 0xd
00:50:56:8e:3e:0b 00:50:56:62:58:be 192.168.250.61 0xf
LCP Remote Entry
===========================================================================
Inner MAC Outer MAC Outer IP
LCP Local Entry
===========================================================================
Inner MAC Outer MAC Outer IP
00:50:56:8e:91:12 00:50:56:69:ba:80 192.168.250.62
00:0c:29:4d:09:19 00:50:56:69:ba:80 192.168.250.62
Mode
Basic
Availability
ESXi
Display ports on the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
kvm-1> get logical-switch 0a8cb2ab-d15b-4b46-a6ee-0a1cd29be34d ports
Logical Switch Ports
============================================================
Port UUID : 59d3da36-d5f8-43d0-bca0-ae98c593861c
Status : up
VIF UUID : 57601300-2e82-48c4-8c27-1e961ac70e81
Snoop Mode : dhcp
============================================================
Mode
Basic
Availability
KVM
Display the VTEP table for the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
kvm-1> get logical-switch 0a8cb2ab-d15b-4b46-a6ee-0a1cd29be34d vtep
Logical Switch VTEP Table
==============================
Label VTEP IP
114689 192.168.140.154
2049 192.168.140.153
102401 192.168.150.151
79873 192.168.150.152
Mode
Basic
Availability
KVM
Display the VTEP table for the specified logical switch.
| Option | Description |
|---|---|
| <logical-switch-id> | Logical switch identifier UUID, VNI or vlan:VLAN-ID |
Example
esx-1> get logical-switch bf543c67-3ffe-44dd-a1d3-57e7cd2e0aff vtep-table
Logical Switch VTEP Table
-----------------------------------------------------------------------------------------------
Host Kernel Entry
===============================================================================================
Label VTEP IP Segment ID Is MTEP VTEP MAC BFD count
114689 192.168.250.60 192.168.250.0 False 02:50:56:00:00:00 1
40961 192.168.250.61 192.168.250.0 False 00:50:56:62:58:be 1
LCP Remote Entry
===============================================================================================
Label VTEP IP Segment ID VTEP MAC DEVICE NAME
114689 192.168.250.60 192.168.250.0 02:50:56:00:00:00 None
40961 192.168.250.61 192.168.250.0 00:50:56:62:58:be None
LCP Local Entry
===============================================================================================
Label VTEP IP Segment ID VTEP MAC DEVICE NAME
36865 192.168.250.62 192.168.250.0 00:50:56:69:ba:80 None
Mode
Basic
Availability
ESXi
Display information about the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c
Logical Switch
UUID : 857212c6-3d87-4a4a-9700-0c9d23f74f1c
VNI : 5000
ENCAP : STT
Replication : mtep
routing-domain: 00000007-0000-0000-0000-000000000000
Mode
Basic
Availability
Edge
Display the mac address table for the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c mac-address-table
Logical Switch
UUID : 857212c6-3d87-4a4a-9700-0c9d23f74f1c
VNI : 5000
ENCAP : STT
Replication : mtep
routing-domain: 00000007-0000-0000-0000-000000000000
MAC-Table:
MAC : 00:50:56:8e:9a:a5
Tunnel : d87cd7e0-eb91-5dd5-bae4-ceb0a2760bfa
IFUID : 295
LOCAL : 192.168.250.162
REMOTE : 192.168.250.160
ENCAP : STT
MAC : 02:50:56:56:44:52
Port : bbe56ae2-0bc1-46c0-b334-a241e2a56193
IFUID : 280
MAC : 00:50:56:8e:1b:21
Tunnel : 6598ab27-95c6-50ef-85b3-89b7811ab672
IFUID : 296
LOCAL : 192.168.250.162
REMOTE : 192.168.250.161
ENCAP : STT
MAC : 04:00:c0:a8:fa:a2
Port : bbe56ae2-0bc1-46c0-b334-a241e2a56193
IFUID : 280
Mode
Basic
Availability
Edge
Display port information for the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c ports
LogSwitchPort-ID LogSwitch-ID Child-UUID Child-EntityType TransportNode-IP
335bbfdc-d6d6-4d87-8fb1-b98614fff1d8 857212c6-3d87-4a4a-9700-0c9d23f74f1c c78a1655-228c-493b-88cf-6b77dafe908d VIF 192.168.210.51
593d2540-bb7b-4abe-ad78-8727ebd5c1d2 857212c6-3d87-4a4a-9700-0c9d23f74f1c null LOG_SWITCH 192.168.110.111
192.168.210.52
192.168.110.112
192.168.210.51
0e7e79e2-f2a7-493d-9bf0-c5589af833cd 857212c6-3d87-4a4a-9700-0c9d23f74f1c b4f6124a-9c4c-404b-a753-d795ac00f9f1 VIF 192.168.210.52
Mode
Basic
Availability
Controller
Display port information for the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c ports
Logical Switch
UUID : 857212c6-3d87-4a4a-9700-0c9d23f74f1c
VNI : 5000
ENCAP : STT
Replication : mtep
routing-domain: 00000007-0000-0000-0000-000000000000
Ports
Port : bbe56ae2-0bc1-46c0-b334-a241e2a56193
IFUID : 280
Peer : 70b21c84-cf3b-4fc3-a442-a941ba86ef48
Mode
Basic
Availability
Edge
Display port statistics for the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch 973b00a2-3be8-4e01-9824-3c6b7e2bf690 ports stats
Logical Switch
UUID : 973b00a2-3be8-4e01-9824-3c6b7e2bf690
VLAN : 100
device : fp-eth0
IFUID : 0
Ports
Port : 783a05cd-033d-4891-ad11-7c082641e069
RX-Packets : 8690
RX-Bytes : 587073
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 10188
TX-Bytes : 687181
TX-Drops : 0
No-Memory : 0
Mode
Basic
Availability
Edge
Display the tunnel information for the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c tunnel-ports
Logical Switch
UUID : 857212c6-3d87-4a4a-9700-0c9d23f74f1c
VNI : 5000
ENCAP : STT
Replication : mtep
routing-domain: 00000007-0000-0000-0000-000000000000
Tunnels
Tunnel : d87cd7e0-eb91-5dd5-bae4-ceb0a2760bfa
IFUID : 295
LOCAL : 192.168.250.162
REMOTE : 192.168.250.160
ENCAP : STT
Tunnel : 6598ab27-95c6-50ef-85b3-89b7811ab672
IFUID : 296
LOCAL : 192.168.250.162
REMOTE : 192.168.250.161
ENCAP : STT
Mode
Basic
Availability
Edge
Display the tunnel endpoint table for the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c vtep-table
Logical Switch
UUID : 857212c6-3d87-4a4a-9700-0c9d23f74f1c
VNI : 5000
ENCAP : STT
Replication : mtep
routing-domain: 00000007-0000-0000-0000-000000000000
Replication Tunnels
Tunnel : d87cd7e0-eb91-5dd5-bae4-ceb0a2760bfa
IFUID : 295
LOCAL : 192.168.250.162
REMOTE : 192.168.250.160
ENCAP : STT
MTEP : False
Tunnel : 6598ab27-95c6-50ef-85b3-89b7811ab672
IFUID : 296
LOCAL : 192.168.250.162
REMOTE : 192.168.250.161
ENCAP : STT
MTEP : False
Mode
Basic
Availability
Edge
Display information about the specified logical switch. Use the
get logical-switches command to get a list of all logical switches. You can use the VNI or UUID to specify the logical switch.| Option | Description |
|---|---|
| <vni-or-uuid> | VNI or UUID argument Allowed pattern: ^[0-9]+$|^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c
VNI UUID
5000 857212c6-3d87-4a4a-9700-0c9d23f74f1c
or
nsx-controller-1> get logical-switch 5000
VNI UUID
5000 857212c6-3d87-4a4a-9700-0c9d23f74f1c
Mode
Basic
Availability
Controller
Display the ARP table for the specified logical switch.
| Option | Description |
|---|---|
| <vni-or-uuid> | VNI or UUID argument Allowed pattern: ^[0-9]+$|^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c arp-table
VNI IP MAC TransportNodeId
5000 172.16.130.12 00:50:56:8e:1b:21 857212c6-3d87-5d5d-9700-0c9d23f74f1d
Mode
Basic
Availability
Controller
Display the MAC address table for the specified logical switch.
| Option | Description |
|---|---|
| <vni-or-uuid> | VNI or UUID argument Allowed pattern: ^[0-9]+$|^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c mac-table
VNI MAC VTEP-IP TransportNodeId
5000 00:50:56:8e:1b:21 192.168.250.161 957612c6-4321-4a4a-9700-0c9d23f74f1c
5000 00:50:56:8e:9a:a5 192.168.250.160 857212c6-3d87-5d5d-9700-0c9d23f74f1d
Mode
Basic
Availability
Controller
Display statistics information about the specified logical switch.
| Option | Description |
|---|---|
| <vni-or-uuid> | VNI or UUID argument Allowed pattern: ^[0-9]+$|^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c stats
update.member 4
update.vtep 4
update.mac 2
update.mac.invalidate 0
update.arp 7
update.arp.duplicate 0
query.mac 2
query.mac.miss 0
query.arp 3
query.arp.miss 1
Mode
Basic
Availability
Controller
Display statistics information about the specified logical switch over time.
| Option | Description |
|---|---|
| <vni-or-uuid> | VNI or UUID argument Allowed pattern: ^[0-9]+$|^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c stats-sample
00:10:00 00:20:00 00:30:00 00:40:00 00:50:00
update.member 0 0 0 0 0
update.vtep 0 0 0 0 0
update.mac 0 0 0 0 0
update.mac.invalidate 0 0 0 0 0
update.arp 0 0 0 0 0
update.arp.duplicate 0 0 0 0 0
query.mac 0 0 0 0 0
query.mac.miss 0 0 0 0 0
query.arp 0 0 0 0 0
query.arp.miss 0 0 0 0 0
Mode
Basic
Availability
Controller
Display transport nodes which joined a given logical switch.
| Option | Description |
|---|---|
| <vni-or-uuid> | VNI or UUID argument Allowed pattern: ^[0-9]+$|^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c transport-node-table
TransportNodeId
857212c6-3d87-4a4a-9700-0c9d23f74f1c
857212c6-3d87-3d3d-9700-0c9d23f74f1d
857212c6-3d87-5c5c-9700-0c9d23f74f1f
Mode
Basic
Availability
Controller
Display all virtual tunnel end points related to the specified logical switch.
| Option | Description |
|---|---|
| <vni-or-uuid> | VNI or UUID argument Allowed pattern: ^[0-9]+$|^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch 857212c6-3d87-4a4a-9700-0c9d23f74f1c vtep
VNI IP LABEL Segment MAC TransportNodeId
5000 192.168.250.163 0x18801 192.168.250.0 04:00:c0:a8:fa:a3 857212c6-3d87-4a4a-9700-0c9d23f74f1c
5000 192.168.250.162 0xC801 192.168.250.0 04:00:c0:a8:fa:a2 857212c6-3d87-4a4a-9700-0c9d23f74f1d
5000 192.168.250.161 0x3001 192.168.250.0 00:50:56:62:af:a4 857212c6-3d87-4a4a-9700-0c9d23f74f1e
5000 192.168.250.160 0xF001 192.168.250.0 00:50:56:67:4b:95 857212c6-3d87-4a4a-9700-0c9d23f74f1f
Mode
Basic
Availability
Controller
Display port information for the specified logical switch.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch port bbe56ae2-0bc1-46c0-b334-a241e2a56193
Port : bbe56ae2-0bc1-46c0-b334-a241e2a56193
IFUID : 280
Logical Switch: 857212c6-3d87-4a4a-9700-0c9d23f74f1c
Peer : 70b21c84-cf3b-4fc3-a442-a941ba86ef48
Mode
Basic
Availability
Edge
Display statistics for the specified logical switch port.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get logical-switch port 783a05cd-033d-4891-ad11-7c082641e069 stats
Port : 783a05cd-033d-4891-ad11-7c082641e069
RX-Packets : 4474
RX-Bytes : 302966
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 5527
TX-Bytes : 371568
TX-Drops : 0
No-Memory : 0
Mode
Basic
Availability
Edge
Display ports for all logical switches.
Example
nsx-edge-1> get logical-switch ports
Port : 18c26214-ab90-45ab-a2e0-78de070f9eb6
IFUID : 279
Peer : 8c4f10d5-9c4e-40a2-b239-e2eae7d39a33
Port : 271d49b0-f052-4c0c-a79f-44636229e471
IFUID : 264
Peer : a62432b5-68e7-4f95-a3f8-1b63ee4b102a
Port : 7bd1dd3d-97eb-5312-9d0d-b26c148a4fac
IFUID : 261
Peer : c2a03cab-3bad-56f3-b5ae-442ad6599bcf
Port : bbe56ae2-0bc1-46c0-b334-a241e2a56193
IFUID : 280
Peer : 70b21c84-cf3b-4fc3-a442-a941ba86ef48
Port : 58845bb9-19fc-4ec2-826f-bcbe871f99b5
IFUID : 282
Peer : e4be0c73-57bc-4b4f-b10c-f3f858ff8ccc
Port : 783a05cd-033d-4891-ad11-7c082641e069
IFUID : 276
Peer : aaec58d9-5dca-49c7-b39e-cdd8cd75901d
Port : 4ca7839f-2308-43f0-a799-f82d3911c134
IFUID : 287
Peer : 3fe772aa-8594-47cf-8a3e-20a26081ba15
Port : fe9c5ba9-3641-497f-ab95-046ffbc9356f
IFUID : 275
Peer : c7bbfc17-fbb9-4a39-a04b-0df93d788b57
Port : 1ff51f67-9ffb-446a-ae08-0a4a74adbf29
IFUID : 274
Peer : d37160fc-6e17-4c5c-8af1-54064c480798
Port : 286d2aad-ad4e-4ad6-b6c6-5256f38e9265
IFUID : 286
Peer : 6da71663-ce1a-4c2a-8557-ecfd85f031f5
Port : 93e656e1-0625-4ec2-b34c-98f2774bc8d3
IFUID : 281
Peer : 6c03a210-75b7-4a0d-8d66-cedf3c3f0750
Mode
Basic
Availability
Edge
Display port statistics for all logical switches.
Example
nsx-edge-1> get logical-switch ports stats
Port : 18c26214-ab90-45ab-a2e0-78de070f9eb6
RX-Packets : 11123
RX-Bytes : 1088318
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 11141
TX-Bytes : 1089386
TX-Drops : 0
No-Memory : 0
Port : 271d49b0-f052-4c0c-a79f-44636229e471
RX-Packets : 11141
RX-Bytes : 1089386
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 11123
TX-Bytes : 1088318
TX-Drops : 0
No-Memory : 0
Port : 7bd1dd3d-97eb-5312-9d0d-b26c148a4fac
RX-Packets : 285577
RX-Bytes : 11994234
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 0
TX-Bytes : 0
TX-Drops : 0
No-Memory : 0
.
.
.
Mode
Basic
Availability
Edge
Display a specific logical switch's local or remote MAC, ARP, or VTEP information.
| Option | Description |
|---|---|
| <vni> | vni Allowed pattern: ^[0-9]+$ |
Example
ESXi-1> get logical-switch local mac-cache 48008
VM MAC VTEP IP VTEP MAC
00:0c:29:67:4e:5c 192.168.90.55 00:50:56:6d:74:bf
ESXi-1> get logical-switch remote arp-cache 48008
VM IP VM MAC
192.168.86.47 00:50:56:6d:35:2e
ESXi-1> get logical-switch local vtep-cache 48008
VTEP IP Label Segment ID VTEP MAC
192.168.90.55 96257 192.168.0.0 00:50:56:6d:74:bf
Mode
Basic
Availability
Edge, ESXi, KVM
Display information about the specified logical switch port.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get logical-switch-port 593d2540-bb7b-4abe-ad78-8727ebd5c1d2
LogSwitchPort-ID LogSwitch-ID Child-UUID Child-EntityType TransportNode-IP
593d2540-bb7b-4abe-ad78-8727ebd5c1d2 857212c6-3d87-4a4a-9700-0c9d23f74f1c null LOG_SWITCH 192.168.110.111
192.168.210.52
192.168.110.112
192.168.210.51
Mode
Basic
Availability
Controller
Display the status for logical switch ports on this hypervisor host.
Example
esx-host-1> get logical-switch-port status
Logical Port UUID Status
04c011f3-451f-4738-9efa-beecc66c0ed9 up
3f368baa-222d-4d32-b6b6-1113364faf63 up
Mode
Basic
Availability
ESXi
Display all logical switches on this host.
Example
kvm-1> get logical-switches
Logical Switches Summary
============================================================
Switch UUID VNI/VLAN Port Count
16fa7892-df1b-4ffe-af87-3923efc8bdbe vni:64392 0
aacc41f2-7b32-4e0e-8679-6baff5bcbb64 vni:58248 0
da091cea-505c-4528-9b09-3f63efb8000d vni:54152 0
0a8cb2ab-d15b-4b46-a6ee-0a1cd29be34d vni:31624 1
d114f967-73aa-4dfc-8d59-a16de584b380 vni:52104 0
8b652ea8-86fe-4b03-9245-997fd2d7dfee vni:48008 0
Mode
Basic
Availability
KVM
Display information about all logical switches.
Example
nsx-edge-1> get logical-switches
Logical Switch
UUID : ea8c4460-6d15-49c5-a82e-6812a26b4200
VNI : 5001
ENCAP : STT
Replication : mtep
Logical Switch
UUID : 7943ca31-9c8a-402e-adeb-a83f5cf2455d
VNI : 7048
ENCAP : STT
Replication : mtep
Logical Switch
UUID : 1714bc89-a627-48b0-8699-9889db1f60fc
VNI : 11145
ENCAP : STT
Replication : mtep
Logical Switch
UUID : 973b00a2-3be8-4e01-9824-3c6b7e2bf690
VLAN : 100
device : fp-eth0
IFUID : 0
Logical Switch
UUID : 718f154a-c1d4-47b6-b692-11c615f91229
VNI : 11144
ENCAP : STT
Replication : mtep
Logical Switch
UUID : 857212c6-3d87-4a4a-9700-0c9d23f74f1c
VNI : 5000
ENCAP : STT
Replication : mtep
routing-domain: 00000007-0000-0000-0000-000000000000
Logical Switch
UUID : 1667b36f-dcee-5984-b401-fdc7c2f6564c
VLAN : 250
device : fp-eth1
IFUID : 1
Logical Switch
UUID : 01b59e17-d8f4-43ec-8727-7bcd3d0cc85c
VNI : 5002
ENCAP : STT
Replication : mtep
Mode
Basic
Availability
Edge
Display information about all logical switches.
Example
nsx-controller-1> get logical-switches
VNI UUID
15240 c31126b8-be8d-49a5-a7ab-d7c13f6013eb
5000 857212c6-3d87-4a4a-9700-0c9d23f74f1c
7048 7943ca31-9c8a-402e-adeb-a83f5cf2455d
19336 041d0ce3-4a26-415c-af4b-8324fb0a54fd
11144 718f154a-c1d4-47b6-b692-11c615f91229
41864 9985fd0a-c361-4a82-94cb-de004ce82834
Mode
Basic
Availability
Controller
Display all logical switches on this host.
Example
esx-1> get logical-switches
Logical Switches Summary
------------------------------------------------------------
Overlay Kernel Entry
============================================================
VNI DVS name VIF num
11145 nsxvswitch 2
37768 nsxvswitch 1
25480 nsxvswitch 1
27530 nsxvswitch 2
Overlay LCP Entry
============================================================
VNI Logical Switch UUID
25480 da4bd041-d19c-4a63-896e-98f50bf8b140
27530 4649f23c-6c5e-4681-a9d9-e7038074c7d0
37768 3b9fa53b-11d1-4685-9985-26fe9a05ea18
11145 bf543c67-3ffe-44dd-a1d3-57e7cd2e0aff
VLAN Backed Entry
============================================================
Logical Switch UUID VLAN ID
Mode
Basic
Availability
ESXi
Display a summary of all logical switch statistics.
Example
nsx-controller-1> get logical-switches stats
messages.query 25
messages.update 98
messages.flush 0
messages.notification 0
Mode
Basic
Availability
Controller
Display a summary of all logical switch statistics over time.
Example
nsx-controller-1> get logical-switches stats-sample
00:58:10 00:58:20 00:58:30 00:58:40 00:58:50 00:59:00 00:59:10 00:59:20 00:59:30 00:59:40
messages.query 25 25 25 25 25 25 25 25 25 25
messages.update 98 98 98 98 98 98 98 98 98 98
messages.flush 0 0 0 0 0 0 0 0 0 0
messages.notification 0 0 0 0 0 0 0 0 0 0
Mode
Basic
Availability
Controller
Get maintenance mode status.
Example
nsx-edge-1> get maintenance-mode
Maintenance Mode: disabled
Mode
Basic
Availability
Edge
Display the status of the management cluster.
Example
nsx-manager-1> get management-cluster status
Number of nodes in management cluster: 1
- 192.168.110.105
Management cluster status: STABLE
Number of nodes in control cluster: 2
- 192.168.110.109
- 192.168.110.108
Control cluster status: STABLE
Mode
Basic
Availability
Manager
Show the current list of configured managers.
Example
nsx-controller1> get managers
- 10.1.1.101 Connected
- 10.1.1.102 Connected
- 10.1.1.103 Connected
Mode
Basic
Availability
Controller, Edge, ESXi, KVM
Display a specific metadata proxy server.
| Option | Description |
|---|---|
| <uuid> | Generic UUID string argument Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$ |
Example
nsx-edge-1> get mdproxy server d5845582-8cb5-4f6a-9d9d-d2641cd2fe55
EDGE_CLUSTER_ID: 5db40b38-05e2-4e00-ac90-74c6ff191911
EDGE_NODE_ID:
3284f707-98f9-4e7c-b573-f7898dfa12ba
ID: d5845582-8cb5-4f6a-9d9d-d2641cd2fe55
SECRET: abc123
SERVER_URL: https://nova-server.example.com
Mode
Basic
Availability
Edge
Display all metadata proxy servers.
Example
nsx-edge-1> get mdproxy servers
EDGE_CLUSTER_ID: 5db40b38-05e2-4e00-ac90-74c6ff191911
EDGE_NODE_ID:
3284f707-98f9-4e7c-b573-f7898dfa12ba
ID: d5845582-8cb5-4f6a-9d9d-d2641cd2fe55
SECRET: abc123
SERVER_URL: https://nova-server.example.com
Mode
Basic
Availability
Edge
Display the system memory information.
Example
nsx-manager-1> get memory-stats
MemTotal: 16430284 kB
MemFree: 10472728 kB
MemAvailable: 12800580 kB
Buffers: 363356 kB
Cached: 1820988 kB
SwapCached: 0 kB
Active: 4880696 kB
Inactive: 513728 kB
Active(anon): 3212444 kB
Inactive(anon): 368 kB
Active(file): 1668252 kB
Inactive(file): 513360 kB
Unevictable: 2348 kB
Mlocked: 2348 kB
SwapTotal: 3997692 kB
SwapFree: 3997692 kB
Dirty: 244 kB
Writeback: 0 kB
AnonPages: 3212392 kB
Mapped: 52056 kB
Shmem: 780 kB
Slab: 420328 kB
SReclaimable: 399656 kB
SUnreclaim: 20672 kB
KernelStack: 10512 kB
PageTables: 11940 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 12212832 kB
Committed_AS: 10288852 kB
VmallocTotal: 34359738367 kB
VmallocUsed: 185388 kB
VmallocChunk: 34359440748 kB
HardwareCorrupted: 0 kB
AnonHugePages: 2764800 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 2048 kB
DirectMap4k: 16320 kB
DirectMap2M: 16760832 kB
Mode
Basic
Availability
Controller, Edge, Manager
Display information about the specified mirror session.
| Option | Description |
|---|---|
| <mirror-session-id> | Mirror session identifier UUID |
Example
kvm-1> get mirror-session 5a55a0e1-ec3e-40bd-9a49-1117119efe9a
Mirror Session
=======================================================
UUID : 5a55a0e1-ec3e-40bd-9a49-1117119efe9a
Direction : Both
Snap Length : 0
Source : eth1(NonEncap);81286c82-67f4-40ab-84ab-1e705241134b
Destination : df4ed013-6c9e-4bc8-a656-060431a9613a
Mode
Basic
Availability
KVM
Display all mirror sessions on this host.
Example
kvm-1> get mirror-sessions
Mirror Session Summary
============================================================
Mirror UUID Direction Snap Length
5a55a0e1-ec3e-40bd-9a49-1117119efe9a Both 0
Mode
Basic
Availability
KVM
Get all name servers in the DNS configuration.
Example
nsx> get name-servers
192.168.110.10
192.168.110.11
Mode
Basic
Availability
Controller, Edge, Manager
Display the system network statistics.
Example
nsx-manager-1> get network-stats
Ip:
37960281 total packets received
0 forwarded
0 incoming packets discarded
37772713 incoming packets delivered
37964008 requests sent out
Icmp:
88 ICMP messages received
0 ICMP messages failed
ICMP input historgram:
destination unreachable: 88
84 ICMP messages sent
0 ICMP messages failed
ICMP output historgram:
destination unreachable: 84
IcmpMsg:
InType3: 88
OutType3: 84
Tcp:
139102 active connections openings
207427 passive connection openings
91 failed connection attempts
83346 connection resets attempts
72 connections established
34395451 segments received
34602181 segments sent out
229 segments retransmitted
0 bad segments received
69405 resets sent
Udp:
3377167 packets received
6 packets to unknown port received
0 packet receive errors
3377193 packets sent
RcvbufErrors: 0
SndbufErrors: 0
UdpLite:
InDatagrams: 0
NoPorts: 0
InErrors: 0
OutDatagrams: 0
RcvbufErrors: 0
SndbufErrors: 0
Mode
Basic
Availability
Controller, Edge, Manager
Show the UUID for the node.
Example
nsx> get node-uuid
uuid: 692eef9a-026e-4e24-8494-251990b2b4e3
Mode
Basic
Availability
Edge, ESXi, KVM
Display the status of the NTP system. The delay, offset and dispersion values are in seconds.
Example
nsx-manager-1> get ntp-server associations
remote local st poll reach delay offset disp
=======================================================================
=juniperberry.ca 10.160.97.161 16 1024 0 0.00000 0.000000 3.99217
=tbag.heanet.ie 10.160.97.161 16 1024 0 0.00000 0.000000 3.99217
=static-96-244-9 10.160.97.161 16 1024 0 0.00000 0.000000 3.99217
=leeloo.scurvyne 10.160.97.161 16 1024 0 0.00000 0.000000 3.99217
=bray.walcz.net 10.160.97.161 16 1024 0 0.00000 0.000000 3.99217
Mode
Basic
Availability
Controller, Edge, Manager
Display all NTP servers.
Example
nsx-manager-1> get ntp-servers
0.ubuntu.pool.ntp.org
1.ubuntu.pool.ntp.org
2.ubuntu.pool.ntp.org
3.ubuntu.pool.ntp.org
ntp.ubuntu.com
Mode
Basic
Availability
Controller, Edge, Manager
Display the parent of the current interface.
Example
nsx-edge-1(path)> get parent
{
"arp_refresh_timeout": 600,
"number_arp_entries": 0,
"type": "SERVICE_ROUTER_TIER0",
"uuid": "f2a25dd6-4ceb-4bf5-8ad5-3e80d2970d60",
"vrf": 6
}
or
nsx-edge-1(path)> get parent
{
"encap": "STT",
"repl": "mtep",
"uuid": "d5af58f5-0616-46fd-af83-242d82983c65",
"vni": 39816
}
Mode
Path
Availability
Edge
Display the path. The arrow indicates which interface is selected. Other commands, such as
get current, will display information about the selected interface.Example
nsx-edge-1(path)> get path
->interface : de650f56-276d-46ef-959e-960752acfe19
interface : 140ca8de-61e0-4bba-b429-6a3791b0846a
port : 9eff9e4e-9157-4107-a0dd-c79350dce6f7
port : 53bab4b1-f0df-451b-af80-0a9d5e580186
interface : 2a7bf881-1f89-4833-833e-47673b79901a
interface : bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
port : 5b2068d0-8c28-4427-8be4-48f422f92309
port : eb3bd495-9ce3-40b4-a955-c2ddc4893cfa
interface : 1fec3ffa-213d-4d2b-ae1b-e12857434846
interface : 13592f56-be3c-4d3d-88de-7d5825dd51bb
port : c588fc5d-dd62-45b2-bc16-3dae466c16c7
port : 2120ef07-05e3-477f-8d96-e2be390784db
interface : 3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278
interface : dd10beb2-3673-43a5-b180-ecc46e830ee0
port : fdc429ef-d778-421b-bf84-e1063a7bf5ab
Mode
Path
Availability
Edge
Display the specified physical port.
| Option | Description |
|---|---|
| <physical-port-name> | Datapath String argument |
Example
nsx-edge-1> get physical-port fp-eth1
Physical Port
DRIVER : rte_vmxnet3_pmd
ID : 1
LINK : up
MAC : 00:50:56:a9:a2:e6
MTU : 1600
NAME : fp-eth1
OFFLOAD_CAPABILITIES : TX_VLAN_INSERT TX_UDP_CKSUM TX_TCP_CKSUM TX_TCP_TSO RX_VLAN_STRIP RX_UDP_CKSUM RX_TCP_CKSUM
PCI : 0000:13:00:00
POLLING_STATUS : active
RX_QUEUE : 1
SOCKET : -1
SPEED : 10000
TX_QUEUE : 1
Mode
Basic
Availability
Edge
Display statistics for the specified physical port.
| Option | Description |
|---|---|
| <physical-port-name> | Datapath String argument |
Example
nsx-edge-1> get physical-port fp-eth1 stats
Physical Port Stats
NAME : fp-eth1
RX_BYTES : 744689
RX_DROP_NO_MATCH : 0
RX_ERRORS : 0
RX_MISSES : 0
RX_NOMBUFS : 0
RX_PACKETS : 8984
TX_BYTES : 7140
TX_DROPS : 0
TX_ERRORS : 0
TX_PACKETS : 170
Mode
Basic
Availability
Edge
Display verbose statistics for the specified physical port.
| Option | Description |
|---|---|
| <physical-port-name> | Datapath String argument |
Example
nsx-edge-1> get physical-port fp-eth1 stats verbose
Physical Port Stats
NAME : fp-eth1
RX_BYTES : 749793
RX_DROP_NO_MATCH : 0
RX_ERRORS : 0
RX_MISSES : 0
RX_NOMBUFS : 0
RX_PACKETS : 9037
TX_BYTES : 7140
TX_DROPS : 0
TX_ERRORS : 0
TX_PACKETS : 170
QUEUES :
id rx_bytes rx_errors rx_packets tx_bytes tx_drops tx_packets
0 749793 0 9037 7140 0 170
1 0 0 0 0 0 0
2 0 0 0 0 0 0
3 0 0 0 0 0 0
4 0 0 0 0 0 0
5 0 0 0 0 0 0
6 0 0 0 0 0 0
7 0 0 0 0 0 0
8 0 0 0 0 0 0
9 0 0 0 0 0 0
10 0 0 0 0 0 0
11 0 0 0 0 0 0
12 0 0 0 0 0 0
13 0 0 0 0 0 0
14 0 0 0 0 0 0
15 0 0 0 0 0 0
Mode
Basic
Availability
Edge
Display all physical ports.
Example
nsx-edge-1> get physical-ports
Physical Port
DRIVER : rte_vmxnet3_pmd
ID : 0
LINK : up
MAC : 00:50:56:a9:51:09
MTU : 1500
NAME : fp-eth0
OFFLOAD_CAPABILITIES : TX_VLAN_INSERT TX_UDP_CKSUM TX_TCP_CKSUM TX_TCP_TSO RX_VLAN_STRIP RX_UDP_CKSUM RX_TCP_CKSUM
PCI : 0000:0b:00:00
POLLING_STATUS : inactive
RX_QUEUE : 1
SOCKET : -1
SPEED : 10000
TX_QUEUE : 1
Physical Port
DRIVER : rte_vmxnet3_pmd
ID : 1
LINK : up
MAC : 00:50:56:a9:a2:e6
MTU : 1600
NAME : fp-eth1
OFFLOAD_CAPABILITIES : TX_VLAN_INSERT TX_UDP_CKSUM TX_TCP_CKSUM TX_TCP_TSO RX_VLAN_STRIP RX_UDP_CKSUM RX_TCP_CKSUM
PCI : 0000:13:00:00
POLLING_STATUS : active
RX_QUEUE : 1
SOCKET : -1
SPEED : 10000
TX_QUEUE : 1
Physical Port
DRIVER : rte_vmxnet3_pmd
ID : 2
LINK : up
MAC : 00:50:56:a9:5b:33
MTU : 1500
NAME : fp-eth2
OFFLOAD_CAPABILITIES : TX_VLAN_INSERT TX_UDP_CKSUM TX_TCP_CKSUM TX_TCP_TSO RX_VLAN_STRIP RX_UDP_CKSUM RX_TCP_CKSUM
PCI : 0000:1b:00:00
POLLING_STATUS : inactive
RX_QUEUE : 1
SOCKET : -1
SPEED : 10000
TX_QUEUE : 1
Mode
Basic
Availability
Edge
Display a snapshot of the system processes.
Example
nsx> get processes
top - 01:12:28 up 3 days, 1:51, 1 user, load average: 0.06, 0.05, 0.07
Tasks: 133 total, 1 running, 132 sleeping, 0 stopped, 0 zombie
%Cpu(s): 4.2 us, 0.9 sy, 0.0 ni, 94.7 id, 0.2 wa, 0.0 hi, 0.0 si, 0.0 st
KiB Mem: 16430712 total, 2604180 used, 13826532 free, 324432 buffers
KiB Swap: 3997692 total, 0 used, 3997692 free. 460404 cached Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1 root 20 0 33216 2564 1460 S 0.0 0.0 2:51.13 init
2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd
3 root 20 0 0 0 0 S 0.0 0.0 0:02.21 ksoftirqd/0
4 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kworker/0:0
5 root 0 -20 0 0 0 S 0.0 0.0 0:00.00 kworker/0:0H
7 root 20 0 0 0 0 S 0.0 0.0 1:23.74 rcu_preempt
8 root 20 0 0 0 0 S 0.0 0.0 0:39.39 rcuop/0
.
.
.
Mode
Basic
Availability
Controller, Edge, Manager
Display information about processes that are running. The display is updated every few seconds.
Example
nsx-manager-1> get processes monitor
top - 00:24:51 up 15 days, 6 min, 1 user, load average: 0.18, 0.16, 0.15
Tasks: 142 total, 2 running, 140 sleeping, 0 stopped, 0 zombie
%Cpu(s): 6.2 us, 1.3 sy, 0.0 ni, 92.3 id, 0.2 wa, 0.0 hi, 0.0 si, 0.0 st
KiB Mem: 16430284 total, 5863860 used, 10566424 free, 363284 buffers
KiB Swap: 3997692 total, 0 used, 3997692 free. 1732000 cached Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
1530 uproton 20 0 8867728 1.862g 23868 S 18.6 11.9 3041:54 java
2245 rabbitmq 20 0 1200504 110528 4568 S 4.6 0.7 484:17.48 beam.smp
1009 elastic+ 20 0 4611496 403996 15712 S 1.0 2.5 178:33.40 java
1261 ulocator 20 0 6738196 259908 14720 S 1.0 1.6 211:26.86 java
.
.
.
Mode
Basic
Availability
Controller, Edge, Manager
Display the publication for the specified object.
| Option | Description |
|---|---|
| <uuid> | Object identifier Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get publication 00000000-0000-0000-0000-000000000001
<<>>
direction = RD_BOTH
span = 8c466583-4186-4caa-abf5-8a3ff9523722,8642a216-ec51-45af-a4b2-57685d094f7e
log = false
flow = false
priority = 2305843009213693951
action = RA_PASS
type = RT_LAYER2
id = 1
publication = 3
Mode
Basic
Availability
Controller
Dump publications to a file.
| Option | Description |
|---|---|
| <filename> | Filename argument Allowed pattern: ^[^/ *;&|]+$ |
Example
nsx-controller-1> get publication dump pubs000
/var/vmware/nsx/file-store/pubs000
Mode
Basic
Availability
Controller
Display publications for the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get publications with transport-node 8c466583-4186-4caa-abf5-8a3ff9523722
id: 8266f308-e9d0-47bb-bd7f-d5b10d7661f5
id: 329e4c03-01cf-434b-829b-9718ae1f4c83
id: 00000000-0000-0000-0000-000000000001
id: 00000000-0000-0000-0000-000000000002
Mode
Basic
Availability
Controller
Display the routing table. Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1(tier0_sr)> get route
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
Total number of routes: 7
b 11.11.11.0/24 [20/0] via 192.168.130.254
rl 100.64.1.0/31 [0/0] via 169.0.0.1
c 169.0.0.0/28 [0/0] via 169.0.0.2
ns 172.16.110.0/24 [3/3] via 169.0.0.1
ns 172.16.120.0/24 [3/3] via 169.0.0.1
ns 172.16.130.0/24 [3/3] via 169.0.0.1
c 192.168.130.0/24 [0/0] via 192.168.130.3
or
nsx-edge-1(tier0_sr)> get route 172.16.110.0/24
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
ns 172.16.110.0/24 [3/3] via 169.0.0.1
Mode
Tier0_sr
Availability
Edge
Display BGP-learned routes from the routing table. Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1(tier0_sr)> get route bgp
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
b 11.11.11.0/24 [20/0] via 192.168.130.254
b 12.12.12.0/24 [20/0] via 192.168.130.254
or
nsx-edge-1(tier0_sr)> get route bgp 12.12.12.1
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
b 12.12.12.0/24 [20/0] via 192.168.130.254
Mode
Tier0_sr
Availability
Edge
Display connected routes from the routing table. Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1(tier0_sr)> get route connected
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
c 169.0.0.0/28 [0/0] via 169.0.0.2
c 192.168.130.0/24 [0/0] via 192.168.130.3
or
nsx-edge-1(tier0_sr)> get route connected 192.168.130.22
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
c 192.168.130.0/24 [0/0] via 192.168.130.3
Mode
Tier0_sr
Availability
Edge
Display NAT routes from the routing table. Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1(tier0_sr)> get route nat
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
t0n 11.11.1.0/24 [2/0] via 0.0.0.0
t1n 11.11.2.0/24 [3/0] via 169.254.0.1
nsx-edge-1(tier0_sr)> get route nat 11.11.2.0/24
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
t1n 11.11.2.0/24 [3/0] via 169.254.0.1
Mode
Tier0_sr
Availability
Edge
Display the specified IPv4 route.
| Option | Description |
|---|---|
| <prefix> | CIDR notation argument |
Example
nsx> get route prefix 192.168.110.0/24
192.168.110.0/24 interface eth0
Mode
Basic
Availability
Controller, Edge, Manager
Display static routes from the routing table. Optionally specify a prefix or IP address to display only the route used for that network.
| Option | Description |
|---|---|
| <prefix> | Prefix or IP address with optional prefix length |
Example
nsx-edge-1(tier0_sr)> get route static
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
rl 100.64.1.0/31 [0/0] via 169.0.0.1
ns 172.16.110.0/24 [3/3] via 169.0.0.1
ns 172.16.120.0/24 [3/3] via 169.0.0.1
ns 172.16.130.0/24 [3/3] via 169.0.0.1
or
nsx-edge-1(tier0_sr)> get route static 172.16.110.11
Flags: c - connected, s - static, b - BGP, ns - nsx_static
nc - nsx_connected, rl - router_link, t0n: Tier0-NAT, t1n: Tier1-NAT
ns 172.16.110.0/24 [3/3] via 169.0.0.1
Mode
Tier0_sr
Availability
Edge
Display all configured IPv4 routes.
Example
nsx> get routes
0.0.0.0/0 gateway 192.168.110.1 interface eth0
192.168.110.0/24 interface eth0
Mode
Basic
Availability
Controller, Edge, Manager
Display information about the specified routing domain.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get routing-domain b333ac1f-189e-438a-bb06-3907bcd9fa70
Routing Domain
UUID : b333ac1f-189e-438a-bb06-3907bcd9fa70
Replication Tunnels
Tunnel : 68df048c-9d83-529c-acf3-ca192a1aa4a0
IFUID : 284
LOCAL : 100.100.100.3
REMOTE : 100.100.100.8
ENCAP : GENEVE
MTEP : False
Tunnel : 89f185e9-e5cf-5710-a724-3f6c31329d8b
IFUID : 283
LOCAL : 100.100.100.3
REMOTE : 100.100.100.7
ENCAP : GENEVE
MTEP : False
Mode
Basic
Availability
Edge, KVM
Display information about all routing domains.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get routing-domain 857212c6-3d87-4a4a-9700-0c9d23f74f1c vtep
Routing-Domain-ID IP LABEL Segment MAC TransportNodeId
857212c6-3d87-4a4a-9700-0c9d23f74f1c 192.168.250.163 0x18801 192.168.250.0 04:00:c0:a8:fa:a3 857212c6-3d87-4a4a-9700-0c9d23f74f1c
99999999-3d87-4a4a-9700-0c9d23f74f1c 192.168.250.162 0xC801 192.168.250.0 04:00:c0:a8:fa:a2 857212c6-3d87-4a4a-9700-0c9d23f74f1d
Mode
Basic
Availability
Controller
Display information about all routing domains.
Example
nsx-edge-1> get routing-domains
Desired State:
Routing Domain
b333ac1f-189e-438a-bb06-3907bcd9fa70
Realized State:
Routing Domain
UUID : b333ac1f-189e-438a-bb06-3907bcd9fa70
Replication Tunnels
Tunnel : 68df048c-9d83-529c-acf3-ca192a1aa4a0
IFUID : 284
LOCAL : 100.100.100.3
REMOTE : 100.100.100.8
ENCAP : GENEVE
MTEP : False
Tunnel : 89f185e9-e5cf-5710-a724-3f6c31329d8b
IFUID : 283
LOCAL : 100.100.100.3
REMOTE : 100.100.100.7
ENCAP : GENEVE
MTEP : False
Mode
Basic
Availability
Edge, KVM
Display information about all routing domains.
Example
nsx-controller-1> get routing-domains
Desired State:
Routing-Domain
c31126b8-be8d-49a5-a7ab-d7c13f6013eb
857212c6-3d87-4a4a-9700-0c9d23f74f1c
Mode
Basic
Availability
Controller
Get all domain names in the DNS search list.
Example
nsx> get search-domains
eng.example.com
corp.example.com
example.com
Mode
Basic
Availability
Controller, Edge, Manager
Display information about the specified service.
| Option | Description |
|---|---|
| <service-name> | Node service argument |
Example
nsx> get service snmp
Service name: snmp
Service state: running
Start on boot: True
Mode
Basic
Availability
Controller, Edge, Manager
Display the log level of the specified service.
| Option | Description |
|---|---|
| <service> | Edge service argument Allowed values: local-controller, dataplane, edge-mgmt, dhcp |
Example
nsx-edge-1> get service edge-mgmt logging-level
Log level: INFO
Mode
Basic
Availability
Edge
Display the log level for the cluster-mgmt service.
Example
nsx-controller-1> get service cluster-mgmt logging-level
Logging level: debug
Mode
Basic
Availability
Controller
Display global logging configuration.
Example
nsx-controller-1> get service controller logging-config
Name: LogLevel: debug
Name: BarrierSplitter LogLevel: debug
Name: BgpConfigSplitter LogLevel: debug
Name: BgpNeighborSplitter LogLevel: debug
Name: BridgeClusterSplitter LogLevel: debug
Name: CommunityListSplitter LogLevel: debug
Name: ContainerSplitter LogLevel: debug
Name: DependencyGraphSpanUpdaterImpl:DepGraph LogLevel: debug
Name: DependencyGraphSpanUpdaterImpl:SrcGraph LogLevel: debug
Name: DhcpIpPoolSplitter LogLevel: debug
Name: DhcpRelaySplitter LogLevel: debug
Name: DhcpStaticBindingSplitter LogLevel: debug
Name: DigraphSpanComputerImpl LogLevel: debug
Name: DneRuleSectionSplitter LogLevel: debug
Name: DneRuleSplitter LogLevel: debug
Name: FilterSpanSplitter LogLevel: debug
Name: GlobalRoutingSplitter LogLevel: debug
.
.
.
Mode
Basic
Availability
Controller
Display the logging configuration for components that have the specified log level.
| Option | Description |
|---|---|
| <level> | The controller service logging level Allowed values: off, fatal, error, warn, info, debug, trace |
Example
nsx-controller-1> get service controller logging-config logging-level error
Name: BgpConfigSplitter LogLevel: error
Name: DhcpIpPoolSplitter LogLevel: error
Mode
Basic
Availability
Controller
Display the logging configuration for the specified component.
| Option | Description |
|---|---|
| <string> | String argument Allowed pattern: ^.*$ |
Example
nsx-controller-1> get service controller logging-config name BgpConfigSplitter
Name: BgpConfigSplitter LogLevel: debug
Mode
Basic
Availability
Controller
Display the logging configuration for components that match the specified pattern. The pattern can be a regular expression.
| Option | Description |
|---|---|
| <string> | String argument Allowed pattern: ^.*$ |
Example
nsx-controller-1> get service controller logging-config pattern Dhcp
Name: DhcpIpPoolSplitter LogLevel: debug
Name: DhcpRelaySplitter LogLevel: debug
Name: DhcpStaticBindingSplitter LogLevel: debug
Name: LogicalDhcpServerSplitter LogLevel: debug
Name: com.vmware.nsx.canary.span.DhcpIpPoolSpanner LogLevel: debug
Name: com.vmware.nsx.canary.span.DhcpStaticBindingSpanner LogLevel: debug
Name: com.vmware.nsx.canary.span.LogicalDhcpServerSpanner LogLevel: debug
Mode
Basic
Availability
Controller
Display the log level for the controller service.
Example
nsx-controller-1> get service controller logging-level
Logging level: debug
Mode
Basic
Availability
Controller
Display the state of the local controller service.
Example
nsx-edge-1> get service local-controller state
Uptime : 3556847.000 seconds (since 2016-09-12 18:07:03.20)
Full Sync State : Completed at {'num': 1, 'time': '2016-09-20 10:19:24.22'}
Controller Session : Up
IPC Channel State
Datapath Config : Up since 2016-09-12 18:07:06.37
Datapath State : Up since 2016-09-12 18:07:05.49
Edge MPA Client : Up since 2016-09-12 18:07:03.84
NetCPA : Up since 2016-09-12 18:07:03.97
Routing Service : Up since 2016-09-12 18:07:03.37
BFD Config : None
BFD State : None
Mode
Basic
Availability
Edge
Display the entire routing configuration.
Example
nsx-edge-1> get service router config
ROUTING CONFIGURATION:
======================
{
"redist": {
"bgp_enabled": true
},
"redistri_rules": [
{
"rule": [
{
"to_proto": 1,
"seq_id": 0,
"flags": 103,
"name": {
"string": "rule3"
},
"description": {
"string": "Rule3"
}
}
]
}
],
"static_route": [
{
"prefix": {
"ipv4": "1.1.1.0",
"prefix_length": 25
},
"nexthops": [
{
"route_type": 3,
"ip": {
"ipv4": "169.254.0.1"
},
"if_index": 6,
"admin_distance": 3
}
]
},
{
"prefix": {
"ipv4": "11.11.1.0",
"prefix_length": 24
},
"nexthops": [
{
"route_type": 4,
"if_index": 1,
"admin_distance": 2
}
]
},
{
"prefix": {
"ipv4": "111.111.0.0",
"prefix_length": 16
},
"nexthops": [
{
"route_type": 3,
"ip": {
"ipv4": "169.254.0.1"
},
"if_index": 6,
"admin_distance": 3
}
]
},
{
"prefix": {
"ipv4": "11.11.2.0",
"prefix_length": 24
},
"nexthops": [
{
"route_type": 5,
"ip": {
"ipv4": "169.254.0.1"
},
"if_index": 6,
"admin_distance": 3
}
]
},
{
"prefix": {
"ipv4": "100.64.1.0",
"prefix_length": 31
},
"nexthops": [
{
"route_type": 7,
"ip": {
"ipv4": "169.254.0.1"
},
"if_index": 6,
"admin_distance": 0
}
]
},
{
"prefix": {
"ipv4": "1.1.3.0",
"prefix_length": 24
},
"nexthops": [
{
"route_type": 6,
"ip": {
"ipv4": "169.254.0.1"
},
"if_index": 6,
"admin_distance": 0
}
]
},
{
"prefix": {
"ipv4": "1.1.2.0",
"prefix_length": 24
},
"nexthops": [
{
"route_type": 3,
"ip": {
"ipv4": "169.254.0.1"
},
"if_index": 6,
"admin_distance": 3
}
]
}
],
"bgp_config": {
"enabled": true,
"local_as": 422,
"graceful_restart": false,
"neighbor": [
{
"enable": true,
"remote_as": 420,
"description": {
"string": "BGP_config created through automation"
},
"hold_down_timer": 4,
"address_family": [
{
"route_map_out": {
"route_map_seq": [
{
"action": 1,
"route_map_set": {},
"id": 1,
"match": {
"prefix_list": [
{
"prefix": [
{
"action": 1,
"index": 109,
"network": {
"ipv4": "1.1.1.0",
"prefix_length": 25
},
"seq_id": 1
}
],
"name": "1.1.1.0/25"
}
]
}
},
{
"action": 1,
"route_map_set": {
"metric": 1000
},
"id": 2,
"match": {
"prefix_list": [
{
"prefix": [
{
"index": 106,
"network": {
"ipv4": "1.1.0.0",
"prefix_length": 16
},
"seq_id": 1,
"less_or_equal_bits": 24,
"action": 1,
"greater_or_equal_bits": 16
}
],
"name": "1.1.0.0/16"
}
]
}
}
],
"name": {
"string": "1.1.0.0"
}
},
"enabled": true,
"type": "IPv4_UNICAST"
}
],
"keep_alive_timer": 1,
"src_ip_address": {
"ipv4": "40.40.40.1"
},
"ip_address": {
"ipv4": "40.40.40.10"
},
"enable_bfd": false,
"name": {
"string": "auto-bgp-config-1"
}
},
{
"enable": true,
"remote_as": 420,
"description": {
"string": "BGP_config created through automation"
},
"hold_down_timer": 3,
"address_family": [
{
"enabled": true,
"type": "IPv4_UNICAST",
"route_map_in": {
"route_map_seq": [
{
"action": 1,
"route_map_set": {
"weight": 200
},
"id": 1,
"match": {
"prefix_list": [
{
"prefix": [
{
"index": 103,
"network": {
"ipv4": "2.1.0.0",
"prefix_length": 16
},
"seq_id": 1,
"less_or_equal_bits": 28,
"action": 1,
"greater_or_equal_bits": 16
}
],
"name": "2.1.0.0"
}
]
}
}
],
"name": {
"string": "2.1.0.0"
}
}
}
],
"keep_alive_timer": 1,
"src_ip_address": {
"ipv4": "90.90.90.2"
},
"ip_address": {
"ipv4": "90.90.90.10"
},
"enable_bfd": false,
"name": {
"string": "auto-bgp-config-4"
}
}
],
"ecmp": true
},
"routing_global": {
"router_id": {
"ipv4": "40.40.40.1"
},
"op_state_up": true,
"role": 2,
"forwarding_up_timer": 0
}
}
Mode
Basic
Availability
Edge
Display the redistribution configuration.
Example
nsx-edge-1> get service router config redist
REDISTRIBUTION CONFIGURATION:
=============================
redist:
{
"bgp_enabled": true
}
redistri_rules:
[
{
"rule": [
{
"to_proto": 1,
"seq_id": 0,
"flags": 103,
"name": {
"string": "rule3"
},
"description": {
"string": "Rule3"
}
}
]
}
]
Mode
Basic
Availability
Edge
Display the route map configuration.
Example
nsx-edge-1> get service router config route-maps
ROUTE MAP CONFIGURATION:
============================
route_map_out:
{
"name": {
"string": "1.1.0.0"
},
"route_map_seq": [
{
"action": 1,
"id": 1,
"match": {
"prefix_list": [
{
"name": "1.1.1.0/25",
"prefix": [
{
"action": 1,
"index": 109,
"network": {
"ipv4": "1.1.1.0",
"prefix_length": 25
},
"seq_id": 1
}
]
}
]
},
"route_map_set": {}
},
{
"action": 1,
"id": 2,
"match": {
"prefix_list": [
{
"name": "1.1.0.0/16",
"prefix": [
{
"action": 1,
"greater_or_equal_bits": 16,
"index": 106,
"less_or_equal_bits": 24,
"network": {
"ipv4": "1.1.0.0",
"prefix_length": 16
},
"seq_id": 1
}
]
}
]
},
"route_map_set": {
"metric": 1000
}
}
]
}
route_map_in:
{
"name": {
"string": "2.1.0.0"
},
"route_map_seq": [
{
"action": 1,
"id": 1,
"match": {
"prefix_list": [
{
"name": "2.1.0.0",
"prefix": [
{
"action": 1,
"greater_or_equal_bits": 16,
"index": 103,
"less_or_equal_bits": 28,
"network": {
"ipv4": "2.1.0.0",
"prefix_length": 16
},
"seq_id": 1
}
]
}
]
},
"route_map_set": {
"weight": 200
}
}
]
}
Mode
Basic
Availability
Edge
Display information about all services.
Example
nsx-manager-1> get services
Service name: http
Service state: running
Session timeout: 1800
Connection timeout: 30000
Service name: manager
Service state: running
Logging level: info
Service name: mgmt-plane-bus
Service state: running
Service name: node-mgmt
Service state: running
Service name: nsx-message-bus
Service state: running
Service name: ntp
Service state: running
Service name: install-upgrade
Service state: stopped
Enabled: False
Enabled on: 10.10.10.10
Service name: snmp
Service state: running
Start on boot: True
Service name: ssh
Service state: running
Start on boot: True
Service name: syslog
Service state: running
Mode
Basic
Availability
Controller, Edge, Manager
Display active network connections.
Example
nsx-manager-1> get sockets
Proto Remote Port Local Port In Out
tcp --listen-- 127.0.0.1 7440 0 0
tcp --listen-- 127.0.0.1 9200 0 0
tcp --listen-- 127.0.0.1 7441 0 0
tcp --listen-- --any-- 4369 0 0
tcp --listen-- 192.168.110.42 65012 0 0
tcp --listen-- 127.0.0.1 9300 0 0
tcp --listen-- 127.0.0.1 53 0 0
tcp --listen-- --any-- 22 0 0
tcp --listen-- --any-- 15671 0 0
tcp --listen-- --any-- 7000 0 0
tcp --listen-- --any-- 443 0 0
tcp --listen-- 127.0.0.1 2812 0 0
tcp --listen-- 192.168.110.42 7070 0 0
tcp --listen-- 192.168.110.42 7071 0 0
tcp --listen-- 127.0.0.1 32000 0 0
tcp --listen-- --any-- 8001 0 0
tcp --listen-- 127.0.0.1 32001 0 0
.
.
.
Mode
Basic
Availability
Controller, Edge, Manager
Display the statistics for all interfaces in the path.
Example
nsx-edge-1(path)> get stats
UUID RX PKTS TX PKTS RX BYTES TX BYTES RX Drops TX Drops
de650f56-276d-46ef-959e-960752acfe19 23796 14321 1576814 957858 3 0
140ca8de-61e0-4bba-b429-6a3791b0846a 38 127 2807 9150 15 0
9eff9e4e-9157-4107-a0dd-c79350dce6f7 127 38 9150 2807 0 0
53bab4b1-f0df-451b-af80-0a9d5e580186 38 127 2807 9150 0 0
2a7bf881-1f89-4833-833e-47673b79901a 127 38 9150 2807 8 0
bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a 29 14 1890 980 0 0
->5b2068d0-8c28-4427-8be4-48f422f92309 14 29 980 1890 0 0
eb3bd495-9ce3-40b4-a955-c2ddc4893cfa 29 14 1890 980 0 0
1fec3ffa-213d-4d2b-ae1b-e12857434846 14 29 980 1890 0 0
13592f56-be3c-4d3d-88de-7d5825dd51bb 17 22 1422 1316 0 0
c588fc5d-dd62-45b2-bc16-3dae466c16c7 22 17 1316 1422 0 0
2120ef07-05e3-477f-8d96-e2be390784db 3 23 126 1394 0 0
3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278 23 3 1394 126 2 0
dd10beb2-3673-43a5-b180-ecc46e830ee0 0 7 0 686 0 0
fdc429ef-d778-421b-bf84-e1063a7bf5ab 7 0 686 0 0 0
Mode
Path
Availability
Edge
Display statistics for the logical router in the VRF context.
Example
nsx-edge-1(vrf)> get stats
Logical Router
UUID : d4c86bd9-cb52-4f38-b6b9-3bf521fa27f8
vrf : 6
type : DISTRIBUTED_ROUTER
Statistics
Dropped No Memory : 0
Dropped No Route : 0
Mode
VRF, Tier0_sr, Tier1_sr
Availability
Edge
Display the contents of the tech support bundle. Specify the
file argument to save the bundle to a file with the specified file name in the file store. This support bundle does not contain core or audit log files. To include those files, specify the optional all argument. Core files contain system information and all information stored in memory at the time of the dump (this may include confidential, sensitive or personal information such as passwords and encryption keys, if they are being processed in memory at that time). If you choose to send the support bundle to VMware, it will be processed in accordance with VMware’s standard processes and policies, to provide you with support, fix problems and improve the product and services.
| Option | Description |
|---|---|
| <filename> | Name of file to generate, for example support-bundle.tgz Allowed pattern: ^[^/ *;&|]+$ |
Example
nsx-manager-1> get support-bundle
--------------------------------------------------------------------------------
/usr/sbin/arp -n
--------------------------------------------------------------------------------
Address HWtype HWaddress Flags Mask Iface
192.168.110.201 ether 00:50:56:a9:8a:8c C eth0
192.168.110.101 ether 00:50:56:a9:45:29 C eth0
192.168.110.1 ether 68:ef:bd:4e:98:7f C eth0
192.168.110.10 ether 00:50:56:a6:e0:14 C eth0
--------------------------------------------------------------------------------
/bin/df -lT -x securityfs
--------------------------------------------------------------------------------
Filesystem Type 1K-blocks Used Available Use% Mounted on
udev devtmpfs 8206240 4 8206236 1% /dev
tmpfs tmpfs 1643032 772 1642260 1% /run
/dev/sda2 ext4 19554584 2229116 16309100 13% /
none tmpfs 4 0 4 0% /sys/fs/cgroup
none tmpfs 5120 0 5120 0% /run/lock
none tmpfs 8215140 4 8215136 1% /run/shm
none tmpfs 102400 0 102400 0% /run/user
/dev/mapper/nsx-repository ext4 19551512 308428 18226868 2% /repository
.
.
.
nsx-manager-1> get support-bundle file support-bundle.tgz
support-bundle.tgz created, use the following command to transfer the file:
copy file support-bundle.tgz url
After transferring support-bundle.tgz, extract it using: tar xzf support-bundle.tgz
nsx-manager-1> get support-bundle file support-bundle-all.tgz all
support-bundle-all.tgz created, use the following command to transfer the file:
copy file support-bundle-all.tgz url
After transferring support-bundle-all.tgz, extract it using: tar xzf support-bundle-all.tgz
Mode
Basic
Availability
Controller, Edge, Manager
Display the topology of the system.
Example
nsx-edge-1> get topology
Machine (3949MB)
Socket L#0 + Core L#0 + PU L#0 (P#0)
Socket L#1 + Core L#1 + PU L#1 (P#1)
HostBridge L#0
PCI 8086:7111
PCI 15ad:0405
GPU L#0 "card0"
GPU L#1 "controlD64"
PCI 1000:0030
Block L#2 "sda"
PCIBridge
PCI 15ad:07b0
Net L#3 "eth0"
PCIBridge
PCI 15ad:07b0
PCIBridge
PCI 15ad:07b0
PCIBridge
PCI 15ad:07b0
Mode
Basic
Availability
Edge
Display the ARP table for the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get transport-node bfd72df1-ed5f-405f-a9d1-585e550bc677 arp-table
VNI IP MAC TransportNode-ID
17288 172.16.110.11 00:50:56:8e:91:12 bfd72df1-ed5f-405f-a9d1-585e550bc677
Mode
Basic
Availability
Controller
Display the MAC address table for the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get transport-node bfd72df1-ed5f-405f-a9d1-585e550bc677 mac-table
VNI MAC VTEP-IP TransportNode-ID
17288 00:50:56:8e:91:12 192.168.210.100 bfd72df1-ed5f-405f-a9d1-585e550bc677
Mode
Basic
Availability
Controller
Display routing domains joined by the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get transport-node bfd72df1-ed5f-405f-a9d1-585e550bc677 routing-domain
Routing-Domain-ID
133fa69c-756e-4d7e-8ac2-1317b9e02e31
133fa69c-756e-4d7e-8ac2-1317b9e02e32
Mode
Basic
Availability
Controller
Display the routing vtep table for the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get transport-node bfd72df1-ed5f-405f-a9d1-585e550bc677 routing-vtep
Routing-Domain-ID IP LABEL Segment MAC TransportNode-ID
133fa69c-756e-4d7e-8ac2-1317b9e02e31 92.168.210.100 0x15801 192.168.210.0 00:50:56:67:af:f4 bfd72df1-ed5f-405f-a9d1-585e550bc677
133fa69c-756e-4d7e-8ac2-1317b9e02e32 192.168.210.100 0x15801 192.168.210.0 00:50:56:67:af:f4 bfd72df1-ed5f-405f-a9d1-585e550bc677
Mode
Basic
Availability
Controller
Display status information for the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get transport-node bfd72df1-ed5f-405f-a9d1-585e550bc677 status
TransportNode-ID Controller TransportNode-IP SSL-Enabled Connection-State Config-State TransportNode-Version Failure-Reason
bfd72df1-ed5f-405f-a9d1-585e550bc677 127.0.0.1 192.168.210.51 true OPENED OPENED 1.1.0.0.0.0
Mode
Basic
Availability
Controller
Display VIF information for the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get transport-node bfd72df1-ed5f-405f-a9d1-585e550bc677 vifs
VIF LogSwitchPort-ID TransportNode-ID TransportNode-IP
133fa69c-756e-4d7e-8ac2-1317b9e02e31 9a71e870-f386-47c6-ae7f-f5e0895dba8b bfd72df1-ed5f-405f-a9d1-585e550bc677 192.168.210.51
Mode
Basic
Availability
Controller
Display all tunnel end points for the specified transport node.
| Option | Description |
|---|---|
| <uuid> | UUID argument Allowed pattern: ^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$ |
Example
nsx-controller-1> get transport-node bfd72df1-ed5f-405f-a9d1-585e550bc677 vtep
VNI IP LABEL Segment MAC TransportNode-ID
39816 192.168.210.100 0x15801 192.168.210.0 00:50:56:67:af:f4 bfd72df1-ed5f-405f-a9d1-585e550bc677
17288 192.168.210.100 0x15801 192.168.210.0 00:50:56:67:af:f4 bfd72df1-ed5f-405f-a9d1-585e550bc677
Mode
Basic
Availability
Controller
Display status information for all transport nodes.
Example
nsx-controller-1> get transport-nodes status
TransportNode-ID Controller TransportNode-IP SSL-Enabled Connection-State Config-State TransportNode-Version Failure-Reason
bfd72df1-ed5f-405f-a9d1-585e550bc677 127.0.0.1 192.168.210.51 true OPENED OPENED 1.1.0.0.0.0
e12ce1d1-b3d9-4602-ba81-91e1fa6a60e4 127.0.0.1 192.168.210.51 true OPENED CLOSED 1.1.0.0.0.0
Mode
Basic
Availability
Controller
Display information about the specified tunnel port.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get tunnel-port d87cd7e0-eb91-5dd5-bae4-ceb0a2760bfa
Tunnel : d87cd7e0-eb91-5dd5-bae4-ceb0a2760bfa
IFUID : 295
LOCAL : 192.168.250.162
REMOTE : 192.168.250.160
ENCAP : STT
Mode
Basic
Availability
Edge
Display statistics for the specified tunnel port.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge-1> get tunnel-port 6598ab27-95c6-50ef-85b3-89b7811ab672 stats
Tunnel : 6598ab27-95c6-50ef-85b3-89b7811ab672
RX-Packets : 0
RX-Bytes : 0
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 3498
TX-Bytes : 433752
TX-Drops : 0
No-Memory : 0
No-Route : 0
Mode
Basic
Availability
Edge
Display information about all tunnel ports.
Example
nsx-edge-1> get tunnel-ports
Tunnel : d87cd7e0-eb91-5dd5-bae4-ceb0a2760bfa
IFUID : 295
LOCAL : 192.168.250.162
REMOTE : 192.168.250.160
ENCAP : STT
Tunnel : 6598ab27-95c6-50ef-85b3-89b7811ab672
IFUID : 296
LOCAL : 192.168.250.162
REMOTE : 192.168.250.161
ENCAP : STT
Mode
Basic
Availability
Edge
None
Example
nsx-edge-1> get tunnel-ports stats
Tunnel : d87cd7e0-eb91-5dd5-bae4-ceb0a2760bfa
RX-Packets : 0
RX-Bytes : 0
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 3325
TX-Bytes : 412300
TX-Drops : 0
No-Memory : 0
No-Route : 0
Tunnel : 6598ab27-95c6-50ef-85b3-89b7811ab672
RX-Packets : 0
RX-Bytes : 0
RX-Drops : 0
Malformed : 0
No-Match : 0
L2-Loop : 0
TX-Packets : 3331
TX-Bytes : 413044
TX-Drops : 0
No-Memory : 0
No-Route : 0
Mode
Basic
Availability
Edge
Display the contents of the specified playbook for the specified upgrade bundle.
| Option | Description |
|---|---|
| <bundle-name> | Name of NSX upgrade bundle in filestore |
| <playbook-file> | Name of Playbook file to use |
Example
nsx-edge-1> get upgrade-bundle VMware-NSX-edge-1.1.0.0.0.4557585 playbook playbook
steps:
- name: 11-preinstall-enter_maintenance_mode
- name: install_os
- name: reboot
- name: 41-postboot-exit_maintenance_mode
- name: finish_upgrade
Mode
Basic
Availability
Controller, Edge, Manager
Display all playbooks in the filestore.
Example
nsx-edge-1> get upgrade-bundle playbooks
playbook
VMware-NSX-edge-1.1.0.0.0.4557585-playbook
Mode
Basic
Availability
Controller, Edge, Manager
Display the system uptime information.
Example
nsx-manager-1> get uptime
16:34:39 up 15 days, 16:16, 1 user, load average: 0.55, 0.25, 0.26
Mode
Basic
Availability
Controller, Edge, Manager
Display the version of the NSX appliance.
Example
nsx> get version
VMware NSX Software, Version 1.0.0.0.0.3255655
Technical Support: http://www.vmware.com/support.html
Copyright © 2015-2016 VMware, Inc. All rights reserved. This
product is protected by copyright and intellectual property
laws in the United States and other countries as well as by
international treaties. VMware products are covered by one
or more patents listed at http://www.vmware.com/go/patents.
VMware is a registered trademark or trademark of VMware, Inc.
in the United States and other jurisdictions. All other marks
and names mentioned herein may be trademarks of their respective
companies.
Mode
Basic
Availability
Controller, Edge, Manager
Display information about the sepcified VIF. You can find VIF IDs with the
get transport-node <uuid> vif command or the get logical-switch <uuid> ports command (see Child-UUID where Child-EntityType is VIF).| Option | Description |
|---|---|
| <vif> | VIF ID |
Example
nsx-controller-1> get vif c78a1655-228c-493b-88cf-6b77dafe908d
VIF LogSwitchPort-ID TransportNode-ID TransportNode-IP
c78a1655-228c-493b-88cf-6b77dafe908d 335bbfdc-d6d6-4d87-8fb1-b98614fff1d8 de9dca49-fc90-43ae-aa65-3b0148da4eee 192.168.210.51
Mode
Basic
Availability
Controller, ESXi
Display all vSwitch runtime options on this host.
Example
esx-1> get vswitch runtime
IGMPQueries: 2
IGMPQueryInterval: 125
IGMPRouterIP: 0.0.0.0
IGMPV3MaxSrcIPNum: 10
IGMPVersion: 3
MLDRouterIP: FE80::FFFF:FFFF:FFFF:FFFF
MLDV2MaxSrcIPNum: 10
MLDVersion: 2
MaxRARPsPerInterval: 128
RARPAdvertisementDuration: 60
TeamPolicyUpDelay: 100
Mode
Basic
Availability
ESXi
Display information about all tunnel endpoints.
Example
nsx-edge-1> get vteps
Remote VTEP IP : 192.168.250.161
Remote VTEP Label : 12289
Local VTEP IP : 192.168.250.162
Local VTEP Label : 51201
Remote VTEP IP : 192.168.250.160
Remote VTEP Label : 61441
Mode
Basic
Availability
Edge
Display help information. See the example below.
Example
nsx-manager-1> help
NSX CLI help is available via a variety of different ways:
1. From the command prompt, enter: help
This full help message is shown.
2. Tab completion
Tab completion is always available to either complete a valid
command word or complete a valid argument. If completion cannot
be performed, a message is shown to indicate the reason.
For example: ge<tab>
3. Pressing ?
At any time, pressing ? shows possible options for the command
entered. If no options are available, a helpful message is
shown to indicate the reason.
For example: get ?
Mode
Availability
Controller, Edge, ESXi, KVM, Manager
Initialize the cluster on the first controller.
Example
nsx-controller-1> initialize control-cluster
Control cluster initialization successful.
Mode
Basic
Availability
Controller
Join a new controller to the cluster. Run the
join control-cluster command on a controller that already belongs to the cluster. Run the get control-cluster certificate thumbprint command on the new controller to get the thumbprint.| Option | Description |
|---|---|
| <ip-address[:port]> | IP address of an NSX Controller and optional port |
| <thumbprint> | The thumbprint of the controller |
Example
nsx-controller-1> join control-cluster 192.168.110.110 thumbprint 4afe87618879065e20dec4e880be3ec91302e1cb55461c18e3a6b1a2b2ba4373
Node 192.168.110.110 has successfully joined the control cluster.
Please run 'activate control-cluster' command on the new node.
Mode
Basic
Availability
Controller
Join this node to the management plane.
| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | Hostname or IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
Example
nsx-edge> join management-plane 192.168.110.105 username admin thumbprint 7f1374c339b592da504b352857a0bdc4e77b9b998a9971f9335633210f667c97
Password for API user:
Node successfully registered as Fabric Node: 692eef9a-026e-4e24-8494-251990b2b4e3
Mode
Basic
Availability
Edge
Join this hypervisor host with the management plane. You can
specify any NSX Manager in the management cluster in this command.
Use the API username and password for the specified NSX Manager. If you do not provide a password on the command line, you will be prompted to enter one.
Get the NSX Manager thumbprint by running the
get certificate api thumbprint command on the
specified NSX Manager.
| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | Hostname or IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
Example
host-1> join management-plane 192.168.110.105 username admin thumbprint 898b75618e3e56615d53f987a720ff22b6381f4b85bec1eb973214ff7361f8b8
Password for API user:
Node successfully joined
Mode
Basic
Availability
ESXi, KVM
Join this controller with the management plane. You can specify any NSX Manager in the management cluster in this command.
Use the API username and password for the specified NSX Manager. If you do not provide a password on the command line, you will be prompted to enter one.
Get the NSX Manager thumbprint by running the get certificate api thumbprint command on the specified NSX Manager.
| Option | Description |
|---|---|
| <ip-address[:port]> | IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
Example
nsx-controller-1> join management-plane 192.168.110.105 username admin thumbprint fef089bbfbd2e10da6ee08c7ff4a95da1368587abfd2c6db59c8db540bc43e58
Password for API user:
Node successfully registered and controller restarted
Mode
Basic
Availability
Controller
Join this keymanager with the management plane. You can specify any NSX Manager in the management cluster in this command.
Use the API username and password for the specified NSX Manager. If you do not provide a password on the command line, you will be prompted to enter one.
Get the NSX Manager thumbprint by running the get certificate api thumbprint command on the specified NSX Manager.
Specify the network interface name used for hypervisors to request keys.
| Option | Description |
|---|---|
| <ip-address[:port]> | IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
| <interface-name> | Network interface argument |
Example
nsx-keymanager-1> join management-plane 192.168.110.105 username admin thumbprint fef089bbfbd2e10da6ee08c7ff4a95da1368587abfd2c6db59c8db540bc43e58 interface-name eth0
Password for API user:
KeyManager node successfully registered and service restarted
Mode
Basic
Availability
This command lists all available commands.
Mode
Availability
Controller, Edge, ESXi, KVM, Manager
Get DNS lookup information.
Note that when run on an NSX Manager, the responding server is reported as 127.0.0.1 instead of the configured name server.
| Option | Description |
|---|---|
| <hostname> | System hostname argument |
Example
nslookup from an NSX Manager:
nsx-manager-1> nslookup nsx-manager-2
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: nsx-manager-2.corp.local
Address: 192.168.110.202
nslookup from an NSX Controller:
nsx-controller-1> nslookup nsx-manager-2
Server: 192.168.110.10
Address: 192.168.110.10#53
Name: nsx-manager-2.corp.local
Address: 192.168.110.202
Mode
Basic
Availability
Controller, Edge, Manager
Enter path context mode. This mode allows you to get information about each interface that is in the path between the specified logical router port and the specified IP address.
You can get a list of logical router interfaces with the get logical-router interfaces command.
Once you are in the path context, use the path commands to navigate and get information, for example, get path, get current, up and down.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> path de650f56-276d-46ef-959e-960752acfe19 172.16.10.11
nsx-edge-1(path)>
Mode
Basic
Availability
Edge
Ping a host or IP address. Use Control-C to stop the command. Optionally use the
repeat argument to specify how many packets to transmit.| Option | Description |
|---|---|
| <hostname-or-ip-address> | A hostname or IP address |
| <number> | Number argument Allowed pattern: ^[0-9]+$ |
Example
nsx-manager-1> ping 10.192.43.71
PING 10.192.43.71 (10.192.43.71) 56(84) bytes of data.
64 bytes from 10.192.43.71: icmp_seq=1 ttl=58 time=1.66 ms
64 bytes from 10.192.43.71: icmp_seq=2 ttl=58 time=0.961 ms
64 bytes from 10.192.43.71: icmp_seq=3 ttl=58 time=0.962 ms
64 bytes from 10.192.43.71: icmp_seq=4 ttl=58 time=0.883 ms
64 bytes from 10.192.43.71: icmp_seq=5 ttl=58 time=1.15 ms
^C
--- 10.192.43.71 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4003ms
rtt min/avg/max/mdev = 0.883/1.125/1.665/0.285 ms
Mode
Basic
Availability
Controller, Manager
Ping an IP address. Use Control-C to stop the ping command.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
Example
nsx-edge-1> ping 192.168.110.1
PING 192.168.110.1 (192.168.110.1): 56 data bytes
64 bytes from 192.168.110.1: icmp_seq=0 ttl=64 time=0.610 ms
64 bytes from 192.168.110.1: icmp_seq=1 ttl=64 time=0.645 ms
64 bytes from 192.168.110.1: icmp_seq=2 ttl=64 time=0.889 ms
^C
--- 192.168.110.1 ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.610/0.715/0.889/0.124 ms
Mode
Basic
Availability
Edge
Ping an IP address. Use Control-C to stop the ping command.
The
repeat argument specifies how many ping
packets to transmit.
The size argument specifies the size of the ping
packet. The dfbit argument specifies whether to
set the "don't fragment" bit in the ping packet. If enabled, the
packet will not be fragmented.
The source argument specifies which IP
address to ping from. This may be required in some circumstances
for ping to work as expected. For example, if there is overlap
in IP addresses used in the tier 0 and tier 1 router transit
subnets, pings from the tier 0 VRF will not reach virtual
machines on networks routed by the tier 1 router.
If you use the source argument to specify a unique
IP used by that VRF (in this case, the
tier 0 uplink IP) the pings will reach the virtual machines.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
| <number> | Number argument Allowed pattern: ^[0-9]+$ |
| <enable> | Enable argument Allowed values: ENABLE |
Example
nsx-edge-1(tier0_sr)> ping 172.16.110.11 source 192.168.130.3 repeat 3
PING 172.16.110.11 (172.16.110.11) from 192.168.130.3: 56 data bytes
64 bytes from 172.16.110.11: icmp_seq=0 ttl=62 time=4.300 ms
64 bytes from 172.16.110.11: icmp_seq=1 ttl=62 time=1.879 ms
64 bytes from 172.16.110.11: icmp_seq=2 ttl=62 time=1.406 ms
--- 172.16.110.11 ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 1.406/2.528/4.300/1.268 ms
Mode
Basic, VRF, Tier0_sr, Tier1_sr
Availability
Edge
Ping an IP address. Use Control-C to stop the ping command.
The
repeat argument specifies how many ping
packets to transmit. The vrf argument
specifies which VRF to send the pings from. You can get a list of
available VRFs with the get logical-routers command.
The size argument specifies the size of the ping
packet. The dfbit argument specifies whether to
set the "don't fragment" bit in the ping packet. If enabled, the
packet will not be fragmented.
The source argument specifies which IP
address to ping from. This may be required in some circumstances
for ping to work as expected. For example, if there is overlap
in IP addresses used in the tier 0 and tier 1 router transit
subnets, pings from the tier 0 VRF will not reach virtual
machines on networks routed by the tier 1 router.
If you use the source argument to specify a unique
IP used by that VRF (in this case, the
tier 0 uplink IP) the pings will reach the virtual machines.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
| <number> | Number argument Allowed pattern: ^[0-9]+$ |
| <enable> | Enable argument Allowed values: ENABLE |
| <vrf-id> | VRF ID argument Allowed pattern: ^[0-9]+$ |
Example
nsx-edge-1> ping 172.16.110.11 vrf 3 source 192.168.130.3 repeat 3
PING 172.16.110.11 (172.16.110.11) from 192.168.130.3: 56 data bytes
64 bytes from 172.16.110.11: icmp_seq=0 ttl=62 time=6.203 ms
64 bytes from 172.16.110.11: icmp_seq=1 ttl=62 time=3.908 ms
64 bytes from 172.16.110.11: icmp_seq=2 ttl=62 time=4.633 ms
--- 172.16.110.11 ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 3.908/4.915/6.203/0.958 ms
Mode
Basic
Availability
Edge
Reboot the system. If you specify the
force argument, the system will reboot immediately without prompting for confirmation.Example
nsx> reboot
Are you sure you want to reboot (yes/no): yes
Broadcast message from root@nsx
(unknown) at 1:21 ...
The system is going down for reboot NOW!
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Reset the corelist-related boot time option to factory default.
Example
nsx-edge-1> reset dataplane corelist
0000:0b:00.0 already bound to driver vfio-pci, skipping
0000:1b:00.0 already bound to driver vfio-pci, skipping
0000:13:00.0 already bound to driver vfio-pci, skipping
INFO: Config was written to: /config/vmware/edge/config.json
Generating grub configuration file ...
Found linux image: /vmlinuz-3.14.17-nn4-server
Found initrd image: //initrd.img-3.14.17-nn4-server
File descriptor 4 (/tmp/ffix5oWn5 (deleted)) leaked on lvs invocation. Parent PID 30810: /bin/sh
done
INFO: Updated grub. Please reboot to take effect.
Mode
Basic
Availability
Edge
Reset the hugepage-related boot time option to factory default.
Example
nsx-edge-1> reset dataplane hugepage
0000:0b:00.0 already bound to driver vfio-pci, skipping
0000:1b:00.0 already bound to driver vfio-pci, skipping
0000:13:00.0 already bound to driver vfio-pci, skipping
INFO: Config was written to: /config/vmware/edge/config.json
Generating grub configuration file ...
Found linux image: /vmlinuz-3.14.17-nn4-server
Found initrd image: //initrd.img-3.14.17-nn4-server
File descriptor 4 (/tmp/ffinvYglp (deleted)) leaked on lvs invocation. Parent PID 32203: /bin/sh
done
INFO: Updated grub. Please reboot to take effect.
Mode
Basic
Availability
Edge
Recover management plane account on the host. You can specify any NSX Manager in the management cluster in this command.
Use the API username and password for the specified NSX Manager. If you do not provide a password on the command line, you will be prompted to enter one.
Get the NSX Manager thumbprint by running the get certificate api thumbprint command on the specified NSX Manager.
| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | Hostname or IP address of an NSX Manager and optional port |
| <username> | Manager API username |
| <thumbprint> | Manager API thumbprint |
| <password> | Manager API password |
Example
host-1> reset management-plane 192.168.110.105 username admin thumbprint 898b75618e3e56615d53f987a720ff22b6381f4b85bec1eb973214ff7361f8b8
Password for API user:
Node successfully joined
Mode
Basic
Availability
ESXi, KVM
Restart the specified service.
| Option | Description |
|---|---|
| <service-name> | Node restartable service argument |
Example
nsx> restart service snmp
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Restore a backup of NSX Manager cluster data.
If you do not provide a passphrase on the command line, you will be prompted to enter one. If you cannot remember the passphrase used to create the backup, you will not be able to restore the backup.
Important: This restore request is one part of the restore process. You must complete all backup and restore tasks in the correct order. See the NSX-T Administration Guide for information and instructions about performing backups and restores.
| Option | Description |
|---|---|
| <filename> | Existing file argument |
| <passphrase> | Backup passphrase |
Example
nsx-manager-1> restore cluster file backup-cluster-20160314.zip
Passphrase:
nsx-manager-1>
Mode
Basic
Availability
Manager
Restore a backup of NSX Manager node data.
If you do not provide a passphrase on the command line, you will be prompted to enter one. If you cannot remember the passphrase used to create the backup, you will not be able to restore the backup.
Important: This restore request is one part of the restore process. You must complete all backup and restore tasks in the correct order. See the NSX-T Administration Guide for information and instructions about performing backups and restores.
| Option | Description |
|---|---|
| <filename> | Existing file argument |
| <passphrase> | Backup passphrase |
Example
nsx-manager-1> restore node file backup-node-192.168.110.201-20160314.zip
Passphrase:
nsx-manager-1>
Mode
Basic
Availability
Manager
Resume an upgrade after running the command
start upgrade-bundle <bundle-name> playbook <playbook-file> and the system was rebooted.| Option | Description |
|---|---|
| <bundle-name> | Name of NSX upgrade bundle in filestore |
Example
nsx-edge-1> resume upgrade-bundle VMware-NSX-edge-1.1.0.0.0.4557585 playbook
Resuming paused playbook /var/vmware/nsx/file-store/playbook.yml
Validating playbook /var/vmware/nsx/file-store/playbook.yml
Running "41-postboot-exit_maintenance_mode" (step 4 of 5)
Running "finish_upgrade" (step 5 of 5)
Playbook finished successfully
{
"info": "",
"body": null,
"state": 1,
"state_text": "CMD_SUCCESS"
}
Mode
Basic
Availability
Controller, Edge, Manager
Roll back an upgrade with the specified upgrade bundle.
| Option | Description |
|---|---|
| <bundle-name> | Name of NSX upgrade bundle in filestore |
Example
nsx-edge-1> rollback upgrade-bundle VMware-NSX-edge-1.1.0.0.0.4572570
info :
task_id : c3def471-3957-4fb0-984a-f41e33159ce3
state : 1
state_text : CMD_SUCCESS
nsx-edge-1>
Broadcast message from root@nsx-edge-1
(unknown) at 0:35 ...
The system is going down for reboot NOW!
Mode
Basic
Availability
Controller, Edge, Manager
Perform a rollback of the upgrade coordinator.
Example
nsx-manager-1> rollback upgrade-coordinator
Status: success
Mode
Basic
Availability
Manager
Sets the amount of time, in seconds, that an account will remain locked
out of the API after exceeding the maximum number of failed
authentication attempts.
| Option | Description |
|---|---|
| <lockout-period> | Lockout period in seconds |
Example
nsx> set auth-policy api lockout-period 900
nsx>
Mode
Basic
Availability
Manager
In order to trigger an account lockout, all authentication
failures must occur in this time window. If the reset
period exprires, the failed login count is reset to zero.
| Option | Description |
|---|---|
| <lockout-reset-period> | Lockout reset period in seconds |
Example
nsx> set auth-policy api lockout-period 300
nsx>
Mode
Basic
Availability
Manager
Set the number of failed API authentication attempts that are
allowed before the account is locked. If set to 0, account
lockout is disabled.
| Option | Description |
|---|---|
| <auth-failures> | Number of authentication failures to trigger lockout |
Example
nsx> set auth-policy api max-auth-failures 5
nsx>
Mode
Basic
Availability
Manager
Sets the amount of time, in seconds, that an account will remain locked
out of the CLI after exceeding the maximum number of failed
authentication attempts.
| Option | Description |
|---|---|
| <lockout-period> | Lockout period in seconds |
Example
nsx> set auth-policy cli lockout-period 900
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set the number of failed CLI authentication attempts that are
allowed before the account is locked. If set to 0, account
lockout is disabled.
| Option | Description |
|---|---|
| <auth-failures> | Number of authentication failures to trigger lockout |
Example
nsx> set auth-policy cli max-auth-failures 5
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set the minimum number of characters that passwords must have. The
smallest value that can be set is 8.
| Option | Description |
|---|---|
| <password-length> | Password length argument |
Example
nsx> set auth-policy minimum-password-length 12
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set the security banner or message of the day.
Example
nsx> set banner
Enter TEXT message. End with 'Ctrl-D'
Authorized access only
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Start a packet capture. You must have already configured the packet capture with the
set capture session <session-number> interface <port-uuid-name> direction <direction> command in basic mode, or with the set capture session <session-number> direction <direction> command in path mode. Use the get capture sessions command in basic mode to see all configured capture sessions.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
Example
nsx-edge-1(path)> set capture session 1
01:39:58.374489 20:00:00:00:00:f1 > 33:33:00:00:00:16, ethertype IPv6 (0x86dd), length 90: fe80::2200:ff:fe00:f1 > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
<base64>MzMAAAAWIAAAAADxht1gAAAAACQAAf6AAAAAAAAAIgAA//4AAPH/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAE4nAAAAAQQAAAD/AgAAAAAAAAAAAAH/AADx<base64>
01:39:58.374506 20:00:00:00:00:f1 > 33:33:00:00:00:02, ethertype IPv6 (0x86dd), length 70: fe80::2200:ff:fe00:f1 > ff02::2: ICMP6, router solicitation, length 16
<base64>MzMAAAACIAAAAADxht1gAAAAABA6//6AAAAAAAAAIgAA//4AAPH/AgAAAAAAAAAAAAAAAAAChQA5TAAAAAABASAAAAAA8Q==<base64>
.
.
.
Mode
Basic, Path
Availability
Edge, KVM
Start a packet capture. You must have already configured the
packet capture with the
set capture session
<session-number> interface <port-uuid-name>
direction <direction> command.
If you don't specify a file, the output displays on the terminal.
Type Control-C to end the packet capture.
You can filter the capture using tcpdump expressions. The expression must be the last argument of the command.
Use the get capture sessions command
to see all configured capture sessions.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
| <filename> | Capture file name Allowed pattern: ^[^/ *;&|]+$ |
| <packet-count> | Packet count value greater than or equal to 1 |
| <expression> | Packet capture expression |
Example
nsx-edge-1> set capture session 1 count 1 expression host 192.168.130.254 and port 22
02:59:09.825531 00:50:56:8e:29:c7 > 02:50:56:00:00:01, ethertype 802.1Q (0x8100), length 78: vlan 130, p 0, ethertype IPv4, 192.168.130.254.36792 > 192.168.130.3.22: Flags [S], seq 2401912755, win 29200, options [mss 1460,sackOK,TS val 60617296 ecr 0,nop,wscale 6], length 0
nsx-edge-1>
or
nsx-edge-1> set capture session 1 file capturefile count 5 expression port 22
Capture 5 packets to file initiated,
enter Ctrl-C to terminate before all packets captured
5 packets captured
5 packets received by filter
0 packets dropped by kernel
110 packets dropped by interface
Mode
Basic
Availability
Edge, KVM
Configure a packet capture using the current
interface in the path. You can change the current interface and
run this command again to configure multiple interfaces on the
same packet capture session.
Start the packet capture with the set capture session
<session-number> command in either basic or path
mode, or with the set capture session
<session-number> [file <filename> [count
<packet-count> [expression <expression>
command in basic mode.
Use the get capture sesssions command in basic mode
to see all configured capture sessions.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
| <direction> | Direction argument is one of {rx|tx|both} Allowed values: tx, rx, both |
Example
nsx-edge-1(path)> set capture session 1 direction both
nsx-edge-1(path)>
Mode
Path
Availability
Edge
Configure a packet capture using the specified interface. You can
run this command multiple times to configure multiple interfaces
on the same packet capture session.
To run the packet capture using this configuration, use the
set capture session <session-number>
[file <filename>] [count <packet-count>]
[expression <expression>] command.
If you need to capture packets from only one interface, you
can configure and run the packet capture with a single command:
start capture interface <interface-name>
[file <filename>] [count <packet-count>]
[expression <expression>].
Use the get capture sessions command
to see all configured capture sessions.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
| <interface-name> | Network interface argument |
| <direction> | Direction argument is one of {in|out|both} Allowed values: in, out, both |
Example
kvm-1> set capture session 1 interface b592a7c8-4e21-493e-b0fc-0b1d152c949c direction both
kvm-1> get capture session 1
Packet Capture Session
ID : 1
PORTS : ['b592a7c8-4e21-493e-b0fc-0b1d152c949c']
Mode
Basic
Availability
KVM
Configure a packet capture using the specified interface. You can
run this command multiple times to configure multiple interfaces
on the same packet capture session.
To run the packet capture using this configuration, use the
set capture session <session-number>
[file <filename>] [count <packet-count>]
[expression <expression>] command.
If you need to capture packets from only one interface, you
can configure and run the packet capture with a single command:
start capture interface <interface-name>
[file <filename>] [count <packet-count>]
[expression <expression>].
Use the get capture sessions command
to see all configured capture sessions.
| Option | Description |
|---|---|
| <session-number> | Session ID argument in numbers Allowed values: 1, 2, 3 |
| <port-uuid-name> | Datapath String argument |
| <direction> | Direction argument is one of {rx|tx|both} Allowed values: tx, rx, both |
Example
nsx-edge-1> set capture session 1 interface fp-eth0 direction both
nsx-edge-1> set capture session 1 interface fp-eth1 direction both
nsx-edge-1> get capture session 1
Packet Capture Session
ID : 1
PORTS : ['fp-eth0', 'fp-eth1']
Mode
Basic
Availability
Edge
Set inactivity timeout in seconds. To disable the timeout, specify 0.
| Option | Description |
|---|---|
| <timeout> | Number of seconds before timeout or 0 to disable timeout |
Example
nsx> set cli-timeout 0
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Enable/Disable security for the controller cluster. Security is enabled by default.
| Option | Description |
|---|---|
| <on|off> | Control cluster security setting Allowed values: on, off |
Example
nsx-controller-1> set control-cluster security off
Control cluster security disabled
Mode
Basic
Availability
Controller
Initialize the shared secret security mode on the controller. All controllers that use this security mode must use the same shared secret.
| Option | Description |
|---|---|
| <secret> | Controller cluster shared secret |
Example
nsx-controller-1> set control-cluster security-model shared-secret
Secret:
Security secret successfully set on the node.
Mode
Basic
Availability
Controller
Enable or disable flow cache.
| Option | Description |
|---|---|
| <enabled> | One of {enabled|disabled} Allowed values: enabled, disabled |
Example
nsx-edge-1> set dataplane flow-cache enabled
Please restart datapathd service for change to take effect.
Mode
Basic
Availability
Edge
Turn on BGP debugging.
Example
nsx-edge-1(tier0_sr)> set debug bgp
nsx-edge-1(tier0_sr)>
Mode
Tier0_sr
Availability
Edge
Turn on IPS tracing
Example
nsx-edge-1(tier0_sr)> set debug routing ipstrace
nsx-edge-1(tier0_sr)>
Mode
Tier0_sr
Availability
Edge
Set the peer configuration for active/standby
configuration. This configuration happens automatically
when firewall rules are added to an active/standby
logical router via the NSX Manager web interface or API.
This command should be used for advanced configuration or troubleshooting only.
If you manually configure the active/standby peer on an edge node, you must also configure its peer.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <ip-address> | Network IP address argument |
| <uuid> | UUID argument |
Example
nsx-edge> set firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e local-ip 192.168.250.62 sync-peer e159f0db-d8e4-4973-9cbb-8cc30def2c3e sync-peer-ip 192.168.250.63
nsx-edge>
Mode
Basic
Availability
Edge
Set the firewall synchronization mode for active/standby
configuration. This configuration happens automatically
when firewall rules are added to an active/standby
logical router via the NSX Manager web interface or API.
This command should be used for advanced configuration or troubleshooting only.
If you manually configure the active/standby sync, you must correctly configure both edge nodes in the active/standby configuration. One node must be configured as primary and one as secondary. One node must be configured as active, and one as passive.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
| <sync-rank> | One of {primary|secondary} Allowed values: primary, secondary |
| <sync-mode> | One of {active|passive} Allowed values: active, passive |
Example
nsx-edge> set firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e sync-rank primary sync-mode active
nsx-edge>
Mode
Basic
Availability
Edge
Enable mandatory access control on the node.
Example
nsx-edge-1> set hardening-policy mandatory-access-control enabled
Mandatory Access Control is enabled.
Mode
Basic
Availability
Controller, Edge, Manager
Set the mcast filter mode for the specified host switch.
| Option | Description |
|---|---|
| <host-switch-name> | Host switch name Allowed pattern: ^([A-Za-z0-9_:-]+)$ |
| <mcast-filter-mode> | Mode of mcast filter Allowed values: legacy, snooping |
Example
esx-1> set host-switch nsxvswitch mcast-filter snooping
esx-1>
Mode
Basic
Availability
ESXi
Set the system hostname. Changing the hostname changes the command line prompt.
| Option | Description |
|---|---|
| <hostname> | System hostname argument |
Example
nsx> set hostname nsx-3
nsx-3>
Mode
Basic
Availability
Controller, Edge, Manager
Set the hugepage reserve size for the data plane using system default.
Example
nsx-edge-1> set hugepage-reserve auto
[sudo] password for admin:
0000:0b:00.0 already bound to driver vfio-pci, skipping
0000:1b:00.0 already bound to driver vfio-pci, skipping
0000:13:00.0 already bound to driver vfio-pci, skipping
INFO: Config was written to: /config/vmware/edge/config.json
Generating grub configuration file ...
Found linux image: /vmlinuz-3.14.17-nn4-server
Found initrd image: //initrd.img-3.14.17-nn4-server
File descriptor 4 (/tmp/ffisOHe0b (deleted)) leaked on lvs invocation. Parent PID 5321: /bin/sh
done
INFO: Updated grub. Please reboot to take effect.
Mode
Basic
Availability
Edge
Set the hugepage reserve size for the data plane.
| Option | Description |
|---|---|
| <hugepage-size> | Hugepage size in MB or GB Allowed pattern: ^[0-9]+([M|G]B)?$ |
Example
nsx-edge-1> set hugepage-reserve size 1003MB
0000:0b:00.0 already bound to driver vfio-pci, skipping
0000:1b:00.0 already bound to driver vfio-pci, skipping
0000:13:00.0 already bound to driver vfio-pci, skipping
INFO: Config was written to: /config/vmware/edge/config.json
Generating grub configuration file ...
Found linux image: /vmlinuz-3.14.17-nn4-server
Found initrd image: //initrd.img-3.14.17-nn4-server
File descriptor 4 (/tmp/ffilsggoY (deleted)) leaked on lvs invocation. Parent PID 3853: /bin/sh
done
INFO: Updated grub. Please reboot to take effect.
Mode
Basic
Availability
Edge
Set the
plane property of the interface and optionally configure the IP address. By default, the plane property is not configured, the dataplane component takes control of the interface for the data path and the interface is not visible to the Linux kernel. If plane is set to mgmt, it is reported as such to the management plane (MP) via MPA, and the corresponding interface is not consumed by the dataplane for dataplane operations and is available for configuration from the CLI. If it is set to debug, the dataplane does not consume the interface for dataplane operations and the interface is available for configuration from the CLI. Optionally, you can configure the interface with a DHCP or static IP address. If you configure a static IP address, make sure an appropriate network route is also configured. You can use the optional gateway argument, or set a route using the set route command.
For NSX Manager or a controller, you cannot configure the plane property. You also cannot configure a DHCP or static IP address because both NSX Manager and a controller have a static IP address that is set at installation and cannot be changed.
| Option | Description |
|---|---|
| <interface-name> | Configurable network interface argument |
| <prefix> | CIDR notation argument |
| <gateway-ip> | Gateway IP address argument |
| <plane> | Interface plane argument Allowed values: mgmt, debug |
Example
nsx-edge> set interface eth0 plane mgmt
nsx-edge>
or
nsx-edge> set interface eth0 dhcp plane mgmt
nsx-edge>
or
nsx-edge> set interface eth0 ip 192.168.110.111/24 gateway 192.168.110.1 plane mgmt
nsx-edge>
Mode
Basic
Availability
Edge
Configure the specified interface to use DHCP. You cannot configure DHCP for NSX Manager or a controller because both must have a static IP address.
| Option | Description |
|---|---|
| <interface-name> | Configurable network interface argument |
Example
nsx-edge> set interface eth0 dhcp
nsx-edge>
Mode
Basic
Availability
Edge
Configure a static IP address and netmask. Make sure an appropriate network route is also configured. You can use the optional
gateway argument, or set a route using the set route command. You cannot configure a static IP address for NSX Manager or a controller because their static IP address is set at installation and cannot be changed.
| Option | Description |
|---|---|
| <interface-name> | Configurable network interface argument |
| <prefix> | CIDR notation argument |
| <gateway-ip> | Gateway IP address argument |
Example
nsx-edge> set interface eth0 ip 192.168.110.110/24 gateway 192.168.110.1
nsx-edge>
Mode
Basic
Availability
Edge
Configure a logging server. The logging system uses the facilities
codes defined in RFC 5424. Facility local7 is used for audit messages,
and local6 is used for non-audit messages.
| Option | Description |
|---|---|
| <hostname-or-ip-address[:port]> | A hostname or IP address with optional port delimited by a colon |
| <proto> | Logging server protocol Allowed values: tcp, udp, tls |
| <level> | Level of log entries to export Allowed values: emerg, alert, crit, err, warning, notice, info, debug |
| <facility> | Comma delimited list of facilities of log entries to export |
| <messageid> | Comma delimited list of MSGIDs of log entries to export |
| <filename> | Existing file argument |
Example
nsx> set logging-server 192.168.110.60 proto udp level info facility syslog messageid SYSTEM,FABRIC
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Enable or disable maintenance mode. Maintenance mode can be used during upgrade and debugging. When an Edge is in maintenance mode only management traffic will be passed; data traffic will be dropped.
| Option | Description |
|---|---|
| <enabled> | One of {enabled|disabled} Allowed values: enabled, disabled |
Example
nsx-edge-1> set maintenance-mode enabled
Maintenance Mode: enabled
Mode
Basic
Availability
Edge
Add a name server to the DNS configuration.
| Option | Description |
|---|---|
| <ip-address> | Name server IP address argument |
Example
nsx> set name-servers 192.168.110.10
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Configure a new NTP server.
| Option | Description |
|---|---|
| <hostname-or-ip-address> | A hostname or IP address |
Example
nsx-manager-1> set ntp-server 172.31.32.2
nsx-manager-1>
Mode
Basic
Availability
Controller, Edge, Manager
Add a network route. You can also just set a gateway by specifying a
prefix value of 0.0.0.0/0.| Option | Description |
|---|---|
| <prefix> | CIDR notation argument |
| <gateway-ip> | Gateway IP address argument |
| <interface-name> | Configurable network interface argument |
Example
nsx> set route prefix 10.10.10.0/24 gateway 192.168.110.1
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Add a domain name to the DNS search list.
| Option | Description |
|---|---|
| <domain> | Search domain argument |
Example
nsx> set search-domains example.com
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set the cluster-mgmt service logging level.
| Option | Description |
|---|---|
| <level> | The cluster-mgmt service logging level Allowed values: error, warn, info, debug |
Example
nsx-controller-1> set service cluster-mgmt logging-level info
nsx-controller-1>
Mode
Basic
Availability
Controller
Set the log level for the controller service.
| Option | Description |
|---|---|
| <level> | The controller service logging level Allowed values: off, fatal, error, warn, info, debug, trace |
Example
nsx-controller-1> set service controller logging-level info
nsx-controller-1>
Mode
Basic
Availability
Controller
Set the log level for the specified component.
| Option | Description |
|---|---|
| <string> | String argument Allowed pattern: ^.*$ |
| <level> | The controller service logging level Allowed values: off, fatal, error, warn, info, debug, trace |
Example
nsx-controller-1> set service controller logging-level name BgpConfigSplitter error
Name: BgpConfigSplitter LogLevel: error
Mode
Basic
Availability
Controller
Set the log level for components that match the specified pattern. The pattern can be a regular expression.
| Option | Description |
|---|---|
| <string> | String argument Allowed pattern: ^.*$ |
| <level> | The controller service logging level Allowed values: off, fatal, error, warn, info, debug, trace |
Example
nsx-controller-1> set service controller logging-level pattern Dhcp error
Name: DhcpIpPoolSplitter LogLevel: error
Name: DhcpRelaySplitter LogLevel: error
Name: DhcpStaticBindingSplitter LogLevel: error
Name: LogicalDhcpServerSplitter LogLevel: error
Name: com.vmware.nsx.canary.span.DhcpIpPoolSpanner LogLevel: error
Name: com.vmware.nsx.canary.span.DhcpStaticBindingSpanner LogLevel: error
Name: com.vmware.nsx.canary.span.LogicalDhcpServerSpanner LogLevel: error
Mode
Basic
Availability
Controller
Set the log level of the Dataplane service.
| Option | Description |
|---|---|
| <level> | Edge service logging level argument Allowed values: off, emerg, err, warn, info, dbg |
Example
nsx-edge-1> set service dataplane logging-level warn
nsx-edge-1>
Mode
Basic
Availability
Edge
Set the log level of the DHCP service.
| Option | Description |
|---|---|
| <level> | Edge service logging level argument Allowed values: off, emerg, err, warn, info, dbg |
Example
nsx-edge-1> set service dhcp logging-level warn
nsx-edge-1>
Mode
Basic
Availability
Edge
Set the log level of the Edge Management service.
| Option | Description |
|---|---|
| <level> | Edge service logging level argument Allowed values: off, emerg, err, warn, info, dbg |
Example
nsx-edge-1> set service edge-mgmt logging-level warn
nsx-edge-1>
Mode
Basic
Availability
Edge
Set the HTTP service connection timeout value.
| Option | Description |
|---|---|
| <http-conn-timeout> | HTTP connection timeout in seconds |
Example
nsx-manager-1> set service http connection-timeout 60
nsx-manager-1>
Mode
Basic
Availability
Manager
Set the HTTP service session timeout value.
| Option | Description |
|---|---|
| <http-session-timeout> | HTTP session timeout in seconds |
Example
nsx-manager-1> set service http session-timeout 60
nsx-manager-1>
Mode
Basic
Availability
Manager
Set the install-upgrade service's enabled property.
Example
nsx-manager-1> set service install-upgrade enabled
nsx-manager-1>
Mode
Basic
Availability
Manager
Set the log level of the Local Controller service.
| Option | Description |
|---|---|
| <level> | Edge service logging level argument Allowed values: off, emerg, err, warn, info, dbg |
Example
nsx-edge-1> set service local-controller logging-level warn
nsx-edge-1>
Mode
Basic
Availability
Edge
Set the log level of the manager service.
| Option | Description |
|---|---|
| <level> | Manager logging level argument Allowed values: error, warn, info, debug, trace |
Example
nsx-manager-1> set service manager logging-level warn
Logging level: warn
Mode
Basic
Availability
Manager
Set log level for routing service
| Option | Description |
|---|---|
| <level> | Edge service logging level argument Allowed values: off, emerg, err, warn, info, dbg |
Example
nsx-edge-1> set service router logging-level warn
nsx-edge-1>
Mode
Basic
Availability
Edge
Set log level for routing config service
| Option | Description |
|---|---|
| <level> | Edge service logging level argument Allowed values: off, emerg, err, warn, info, dbg |
Example
nsx-edge-1> set service routing-config logging-level dbg
nsx-edge-1>
Mode
Basic
Availability
Edge
Configure the snmp service to start on boot.
Example
nsx> set service snmp start-on-boot
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Configure the SSH service to start on boot.
Example
nsx> set service ssh start-on-boot
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set the SNMP service v1/v2c community string. This must be set before MIBs can be queried. Choose a string that is difficult to guess.
| Option | Description |
|---|---|
| <community-string> | SNMP community string argument at most 64 characters long Allowed pattern: ^[\S]{1,64}$ |
Example
nsx> set snmp community Q_cHeHUBe7Ud2+sayuReq2t3
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set the system timezone.
| Option | Description |
|---|---|
| <timezone> | Timezone (e.g. UTC, America/New_York, Asia/Tokyo, Europe/Zurich) |
Example
nsx> set timezone America/Los_Angeles
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set the password for the specified user. If you do not specify
the passwords on the command line, you are prompted to enter them.
For details on setting passwords during installation, please see
the NSX-T Installation Guide.
| Option | Description |
|---|---|
| <username> | Username of user |
| <password> | Password of user |
| <old-password> | Current password of user |
Example
nsx> set user admin password NewPass789! old-password Testing123$
nsx>
or
nsx> set user admin password NewerPass789!
Current password:
nsx>
or
nsx> set user admin
Current password:
New password:
Confirm new password:
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Set a runtime option for the specified vSwitch.
| Option | Description |
|---|---|
| <option-name> | Runtime option name Allowed values: IGMPQueries, IGMPQueryInterval, IGMPRouterIP, IGMPV3MaxSrcIPNum, IGMPVersion, MLDRouterIP, MLDV2MaxSrcIPNum, MLDVersion, MaxRARPsPerInterval, RARPAdvertisementDuration, TeamPolicyUpDelay |
| <option-value> | Runtime option value Allowed pattern: ^(([0-9]+)|(((25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9]).){3}(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9]))|(([A-Za-z0-9]{0,4}:){5}[A-Za-z0-9]{0,4}))$ |
Example
esx-1> set vswitch runtime IGMPQueries 1
esx-1>
Mode
Basic
Availability
ESXi
Shut down the system. If you specify the
force argument, the system will shut down immediately without prompting for confirmation.Example
nsx> shutdown
Are you sure you want to shutdown (yes/no): yes
Broadcast message from root@nsx
(unknown) at 1:26 ...
The system is going down for halt NOW!
Mode
Basic
Availability
Controller, Edge, Manager
Start a packet capture on the specified interface.
If you don't specify a file, the output displays on the terminal.
Type Control-C to end the packet capture.
You can filter the capture using tcpdump expressions. The expression must be the last argument of the command.
| Option | Description |
|---|---|
| <interface-name> | Network interface argument |
| <filename> | Capture file name Allowed pattern: ^[^/ *;&|]+$ |
| <packet-count> | Packet count value greater than or equal to 1 |
| <expression> | Packet capture expression |
Example
nsx> start capture interface eth0 count 5 file capturefile expression host 192.168.110.10 and port 22
Capture 5 packets to file initiated,
enter Ctrl-C to terminate before all packets captured
5 packets captured
13 packets received by filter
0 packets dropped by kernel
nsx>
Mode
Basic
Availability
Controller, Edge, KVM, Manager
Start firewall synchronization for the logical router interface. Synchronization happens automatically, but you can optionally start a bulk sync to more quickly synchronize a new or restarted standby router. The sync must be started from the primary router.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge> start firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e bulk-sync
nsx-edge>
Mode
Basic
Availability
Edge
Start the specified service.
| Option | Description |
|---|---|
| <service-name> | Node startable and stoppable service argument |
Example
nsx> start service snmp
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Start an upgrade with the specified upgrade bundle and according to the specified playbook.
| Option | Description |
|---|---|
| <bundle-name> | Name of NSX upgrade bundle in filestore |
| <playbook-file> | Name of Playbook file to use |
Example
nsx-edge-1> start upgrade-bundle VMware-NSX-edge-1.1.0.0.0.4557585 playbook playbook
Validating playbook /var/vmware/nsx/file-store/playbook.yml
Running "11-preinstall-enter_maintenance_mode" (step 1 of 5)
Running "install_os" (step 2 of 5)
System will now reboot (step 3 of 5)
After the system reboots, use "resume" to start the next step, "41-postboot-exit_maintenance_mode".
{
"info": "",
"body": null,
"state": 1,
"state_text": "CMD_SUCCESS"
}
localhost>
Broadcast message from root@localhost
(unknown) at 23:38 ...
The system is going down for reboot NOW!
Mode
Basic
Availability
Controller, Edge, Manager
Stop firewall bulk synchronization for the logical router interface.
| Option | Description |
|---|---|
| <uuid> | Datapath UUID argument |
Example
nsx-edge> stop firewall e159f0db-d8e4-4973-9cbb-8cc30def2c3e bulk-sync
nsx-edge>
Mode
Basic
Availability
Edge
Stop the specified service.
| Option | Description |
|---|---|
| <service-name> | Node startable and stoppable service argument |
Example
nsx> stop service snmp
nsx>
Mode
Basic
Availability
Controller, Edge, Manager
Move to the top of the path. The arrow moves to show which interface is current.
Example
nsx-edge-1(path)> top
->interface : de650f56-276d-46ef-959e-960752acfe19
interface : 140ca8de-61e0-4bba-b429-6a3791b0846a
port : 9eff9e4e-9157-4107-a0dd-c79350dce6f7
port : 53bab4b1-f0df-451b-af80-0a9d5e580186
interface : 2a7bf881-1f89-4833-833e-47673b79901a
interface : bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
port : 5b2068d0-8c28-4427-8be4-48f422f92309
port : eb3bd495-9ce3-40b4-a955-c2ddc4893cfa
interface : 1fec3ffa-213d-4d2b-ae1b-e12857434846
interface : 13592f56-be3c-4d3d-88de-7d5825dd51bb
port : c588fc5d-dd62-45b2-bc16-3dae466c16c7
port : 2120ef07-05e3-477f-8d96-e2be390784db
interface : 3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278
interface : dd10beb2-3673-43a5-b180-ecc46e830ee0
port : fdc429ef-d778-421b-bf84-e1063a7bf5ab
Mode
Path
Availability
Edge
Trace the specified packet.
| Option | Description |
|---|---|
| <port-uuid-name> | Datapath String argument |
| <base64-string> | Datapath Base64 Encoded String argument |
Example
nsx-edge-1> traceflow fp-eth1 AQAMzMzNaO+9TphYADKqqgMAAAwBCwAAAAAAgG5o771OmEAAAAAAgG5o771OmECAGQAAFAACAA8AAAAAAAIAbg==
Packet Trace Results
EVENT : physical_received
PACKET_BASE64 : AQAMzMzNaO+9TphYADKqqgMAAAwBCwAAAAAAgG5o771OmEAAAAAAgG5o771OmECAGQAAFAACAA8AAAAAAAIAbg==
PACKET_HEADER : 21:40:54.830903 68:ef:bd:4e:98:58 > 01:00:0c:cc:cc:cd, 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid PVST (0x010b): STP 802.1d, Config, Flags [none], bridge-id 806e.68:ef:bd:4e:98:40.8019, length 42
PARENT_UUID : 3284f707-98f9-4e7c-b573-f7898dfa12ba
TRACE_UUID : 09c4513c-9c8e-11e6-b333-005056a94529
TYPE : physical_node
EVENT : logical_forwarded
PACKET_BASE64 : AQAMzMzNaO+9TphYADKqqgMAAAwBCwAAAAAAgG5o771OmEAAAAAAgG5o771OmECAGQAAFAACAA8AAAAAAAIAbg==
PACKET_HEADER : 21:40:54.883850 68:ef:bd:4e:98:58 > 01:00:0c:cc:cc:cd, 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid PVST (0x010b): STP 802.1d, Config, Flags [none], bridge-id 806e.68:ef:bd:4e:98:40.8019, length 42
PARENT_UUID : 6e8ad2e8-15eb-553a-ae2e-e3a6bcd890cc
TRACE_UUID : 09c4513c-9c8e-11e6-b333-005056a94529
TYPE : logical_switch_port
UUID : 6fea361f-cf04-5391-bac1-281119bce14d
EVENT : logical_received
PACKET_BASE64 : AQAMzMzNaO+9TphYADKqqgMAAAwBCwAAAAAAgG5o771OmEAAAAAAgG5o771OmECAGQAAFAACAA8AAAAAAAIAbg==
PACKET_HEADER : 21:40:54.936503 68:ef:bd:4e:98:58 > 01:00:0c:cc:cc:cd, 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid PVST (0x010b): STP 802.1d, Config, Flags [none], bridge-id 806e.68:ef:bd:4e:98:40.8019, length 42
PARENT_UUID : 736a80e3-23f6-5a2d-81d6-bbefb2786666
TRACE_UUID : 09c4513c-9c8e-11e6-b333-005056a94529
TYPE : logical_router_port
UUID : c96c41bc-f689-5e28-9b04-d614a746fa1a
EVENT : logical_dropped
PACKET_BASE64 : AQAMzMzNaO+9TphYADKqqgMAAAwBCwAAAAAAgG5o771OmEAAAAAAgG5o771OmECAGQAAFAACAA8AAAAAAAIAbg==
PACKET_HEADER : 21:40:54.989125 68:ef:bd:4e:98:58 > 01:00:0c:cc:cc:cd, 802.3, length 64: LLC, dsap SNAP (0xaa) Individual, ssap SNAP (0xaa) Command, ctrl 0x03: oui Cisco (0x00000c), pid PVST (0x010b): STP 802.1d, Config, Flags [none], bridge-id 806e.68:ef:bd:4e:98:40.8019, length 42
PARENT_UUID : 736a80e3-23f6-5a2d-81d6-bbefb2786666
TRACE_UUID : 09c4513c-9c8e-11e6-b333-005056a94529
TYPE : logical_router_port
Mode
Basic
Availability
Edge
Trace the route to the specified IPv4 address or host.
| Option | Description |
|---|---|
| <hostname-or-ip-address> | A hostname or IP address |
Example
nsx-manager-1> traceroute 10.192.43.71
traceroute to 10.192.43.71 (10.192.43.71), 30 hops max, 60 byte packets
1 10.160.127.251 (10.160.127.251) 0.824 ms 2.589 ms 1.529 ms
2 10.250.228.1 (10.250.228.1) 2.570 ms 10.250.228.9 (10.250.228.9) 1.992 ms 1.116 ms
3 10.250.22.25 (10.250.22.25) 1.647 ms 10.250.22.85 (10.250.22.85) 2.487 ms 10.250.22.25 (10.250.22.25) 1.529 ms
4 10.250.22.186 (10.250.22.186) 2.464 ms 1.903 ms 2.425 ms
5 10.250.23.26 (10.250.23.26) 1.553 ms 1.676 ms 2.504 ms
6 10.250.232.34 (10.250.232.34) 2.355 ms 10.250.232.42 (10.250.232.42) 1.229 ms 10.250.232.38 (10.250.232.38) 1.379 ms
7 10.192.43.71 (10.192.43.71) 1.398 ms 1.689 ms 1.619 ms
Mode
Basic
Availability
Controller, Manager
Trace the route to the specified IP address.
The maxttl specifies the maximum time-to-live, or
maximum number of routers the traceroute packet will traverse.
The source argument specifies which source IP
address to use for traceroute. This may be required in some
circumstances for traceroute to work as expected. For example,
if there is overlap in IP addresses used in the tier 0 and
tier 1 router transit subnets, traceroute packets from the
tier 0 VRF will not reach virtual machines on networks routed
by the tier 1 router. If you use the source argument
to specify a unique IP used by that VRF (in this case, the tier 0
uplink IP) the traceroute packets will reach the virtual machines.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
| <number> | Number argument Allowed pattern: ^[0-9]+$ |
Example
nsx-edge-1(tier0_sr)> traceroute 172.16.110.11 source 192.168.130.3
edge-tracert to 172.16.110.11 (172.16.110.11) from VRF 3, 64 hops max, 52 byte packets
1 100.64.1.1 (100.64.1.1) 0.656 ms 0.354 ms 0.353 ms
2 172.16.110.11 (172.16.110.11) 28.142 ms 4.427 ms 2.765 ms
Mode
Basic, VRF, Tier0_sr, Tier1_sr
Availability
Edge
Trace the route to the specified IP address.
The
maxttl specifies the maximum time-to-live, or
maximum number of routers the traceroute packet will traverse.
The vrfid argument
specifies which VRF to send the traceroute packets from. You can
get a list of available VRFs with the
get logical-routers command.
The source argument specifies which source IP
address to use for traceroute. This may be required in some
circumstances for traceroute to work as expected. For example,
if there is overlap in IP addresses used in the tier 0 and
tier 1 router transit subnets, traceroute packets from the
tier 0 VRF will not reach virtual machines on networks routed
by the tier 1 router. If you use the source argument
to specify a unique IP used by that VRF (in this case, the tier 0
uplink IP) the traceroute packets will reach the virtual machines.
| Option | Description |
|---|---|
| <ip-address> | Network IP address argument |
| <number> | Number argument Allowed pattern: ^[0-9]+$ |
| <vrf-id> | VRF ID argument Allowed pattern: ^[0-9]+$ |
Example
nsx-edge-1> traceroute 172.16.110.11 source 192.168.130.3 vrfid 3
edge-tracert to 172.16.110.11 (172.16.110.11) from VRF 3, 64 hops max, 52 byte packets
1 100.64.1.1 (100.64.1.1) 0.560 ms 0.261 ms 0.366 ms
2 172.16.110.11 (172.16.110.11) 3.544 ms 5.696 ms 3.928 ms
Mode
Basic
Availability
Edge
Move up the path. The arrow moves to show which interface is current.
Example
nsx-edge-1(path)> get path
interface : de650f56-276d-46ef-959e-960752acfe19
interface : 140ca8de-61e0-4bba-b429-6a3791b0846a
port : 9eff9e4e-9157-4107-a0dd-c79350dce6f7
port : 53bab4b1-f0df-451b-af80-0a9d5e580186
interface : 2a7bf881-1f89-4833-833e-47673b79901a
interface : bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
->port : 5b2068d0-8c28-4427-8be4-48f422f92309
port : eb3bd495-9ce3-40b4-a955-c2ddc4893cfa
interface : 1fec3ffa-213d-4d2b-ae1b-e12857434846
interface : 13592f56-be3c-4d3d-88de-7d5825dd51bb
port : c588fc5d-dd62-45b2-bc16-3dae466c16c7
port : 2120ef07-05e3-477f-8d96-e2be390784db
interface : 3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278
interface : dd10beb2-3673-43a5-b180-ecc46e830ee0
port : fdc429ef-d778-421b-bf84-e1063a7bf5ab
nsx-edge-1(path)> up
interface : de650f56-276d-46ef-959e-960752acfe19
interface : 140ca8de-61e0-4bba-b429-6a3791b0846a
port : 9eff9e4e-9157-4107-a0dd-c79350dce6f7
port : 53bab4b1-f0df-451b-af80-0a9d5e580186
interface : 2a7bf881-1f89-4833-833e-47673b79901a
->interface : bbf5b23c-3f0a-4afe-b3b3-b19814d4dd2a
port : 5b2068d0-8c28-4427-8be4-48f422f92309
port : eb3bd495-9ce3-40b4-a955-c2ddc4893cfa
interface : 1fec3ffa-213d-4d2b-ae1b-e12857434846
interface : 13592f56-be3c-4d3d-88de-7d5825dd51bb
port : c588fc5d-dd62-45b2-bc16-3dae466c16c7
port : 2120ef07-05e3-477f-8d96-e2be390784db
interface : 3bbbd5e9-2ffe-4fb7-9edb-edc7bba67278
interface : dd10beb2-3673-43a5-b180-ecc46e830ee0
port : fdc429ef-d778-421b-bf84-e1063a7bf5ab
Mode
Path
Availability
Edge
Verify and extract the specified upgrade bundle to the default location.
| Option | Description |
|---|---|
| <bundle-name> | Name of NSX upgrade bundle in filestore |
Example
nsx-edge-1> verify upgrade-bundle VMware-NSX-edge-1.1.0.0.0.4557585
Checking upgrade bundle /var/vmware/nsx/file-store/VMware-NSX-edge-1.1.0.0.0.4557585.nub contents
Verifying bundle VMware-NSX-edge-1.1.0.0.0.4557585.bundle with signature VMware-NSX-edge-1.1.0.0.0.4557585.bundle.sig
Moving bundle to /image/VMware-NSX-edge-1.1.0.0.0.4557585.bundle
Extracting bundle payload
Successfully verified upgrade bundle
Bundle manifest:
appliance_type: 'nsx-edge'
version: '1.1.0.0.0.4557585'
os_image_path: 'files/nsx-root.fsa'
Mode
Basic
Availability
Controller, Edge, Manager
This command enters VRF context mode. You can find VRF IDs with the
get logical-routers command.| Option | Description |
|---|---|
| <uuid-vrfid> | Datapath UUID or VRF ID argument |
Example
nsx-edge-1> vrf 3
nsx-edge-1(tier0_sr)>
or
nsx-edge-1> vrf 19772688-b220-4a34-94a3-8a094dcdd979
nsx-edge-1(tier0_sr)>
Mode
Basic
Availability
Edge