Aruba and HP switches debug and diagnostics commands cheat sheet
|
Note
|
All commands were tested on HP/Aruba 5400 switches (specifically 5406Rzl2), but will work on any model with recent firmware versions (16.x or newer), except for the hardware features unavailable on smaller models, like VSF . |
General Health
| Command | Description |
|---|---|
show system |
Show general info: current CPU load, uptime, memory used/free, software version. |
show cpu [seconds] |
Show CPU stats of average load for 1 second, 5 seconds, and 1 minute, optionally setting period in seconds (300 is max). |
show uptime |
Show uptime of the switch since reboot, for VSF stacked switches shows uptime for each member. |
show time |
Show switch time and date, for log correlation. |
show flash |
Show what firmware images are stored in the flash, and which one is the primary/secondary for the next boot. |
show boot-history |
Show log of previous boots with their reason (user reboot/cold reboot), crashes and what process crashed with its memory dump, and timestamps. |
boot system flash primary|secondary |
Set the image to boot from on the next reboot. |
show redundancy [detail] |
In module management redundancy standalone/stack topology, shows firmware image version of each module, as well as the number of failovers. |
show system power-supply [detail] |
Show statistics of the power supplies: power consumed, power supplied, fan speed,inlet and internal temperature. |
show system fans |
Show fans state: OK/Failed, and number of failures if any. For VSF shows info for both members. |
show config option |
Display part of saved configuration given by option:
|
show modules |
Show installed modules and their state and serial numbers. |
show tech [all] |
WARNING: I bring this command for completeness sake, but this command will run dozens/hundreds of debug commands, printing lots of info, hundreds of pages, which in turn will load the switch as well. Run it with caution, most probably at the HPE support request only. |
show environment |
Show the chassis' sensors temperature |
Logs
| Command | Description |
|---|---|
Logs severity:
|
All logs are categorized into severities when written, and the severity is presented in the 1st column of each log. This also allows filtering logs for display by their severity, see below. |
show logging -r |
Show system logs and events in reverse chronological order, i.e. newest logs first. |
show log -a |
Show logs from previous boot cycles. HP/Aruba will display only logs since the
last boot, by default, but you can add |
show log string-to-search |
Search and display only logs containing the specified string. The search is
case sensitive, and no regex - just plain strings with exact match. E.g. to
search for logs containing the interface 1/B2: |
show log command [-a] |
Show log of commands issued by users on CLI. This log is NOT hidden even by
the |
show running-config changes-history [detail] |
Display history of up to 32 last changes to the configuration, including time of change, IP address if any, event id. This will NOT show what the changes were themselves though. |
show log -m/-e/-p/-w/-i/-d |
Show only logs of the specified severity, see above for the available severities. |
clear log |
Hides, not deletes, (almost) all logs for the current session. Applying |
show log -s |
Display logs from the Standby commander/management module in a VSF stack or in standalone switch with management module redundancy. |
show log -b |
Show logs with time since boot instead of an absolute date/time format. |
Interfaces
| Command | Description |
|---|---|
show interface [port-id] |
Show as a table (if port-id is not given) all ports with the total bytes/frames, Rx/Tx errors, and Broadcast limit if set for each port. |
clear statistics global |
Clear counters on all interfaces. |
show interface status |
Show list of all interfaces with info for each: state (Up/Down), Actual Speed,
Tagged or not, VLANs configured for the interface (single VLAN for Untagged,
|
display interface [name] |
Show detailed information of an interface: media type, speed/duplex state, MAC
address, up/down, max frame size, VLAN id if any untagged set and |
show interface display |
Present TUI dialog window with real-time information for all interfaces, including total bytes/frames, Rx/Tx errors, and drops. The information is updated every 3 seconds dynamically. Use arrows/tab to navigate, CTRL + C to exit the menu. |
show interfaces custom start-port[-end-port] <port / type / status / speed / mode / name / vlan / enabled> |
Show selected ports with only specified fields: |
show interface port-utilization |
Show one time as a table the current traffic rates passing each interface. |
show interface trunk-utilization |
Show current traffic rates of all trunks. |
show int queue port-name |
Show statistics of all queue buffers of a given interface, including drops for each. |
conf t int name disable/enable |
Disable/enable a specific interface (in Cisco world |
show interface transceiver [name] [detail] |
Info on installed optical transceivers: Port number where installed, Type/Speed, Serial Number. If detail is added, will also show temperature, voltage, Transmit (TX) and Receive (RX) power in mW and dBm. |
show ip |
Show all configured IP addresses on a switch. |
show arp vlan vlan-id |
List all IP addresses (provided Layer 3 features are enabled) learned on the VLAN vlan-id. |
show name |
Lists all interfaces with their names if set. In Cisco it would be |
show trunks |
Show trunk interfaces with their state and type. NOTE: In HP/Aruba world trunk means aggregated interfaces (LAG), what in Cisco world is called port/ether-channel. |
show trunk-statistics trunk-name |
Show cumulative statistics for the trunk interface: packets passed, bytes received, drops if any. |
show lacp |
Show LACP state on the trunking interfaces. |
show lacp counters |
show stats for received/sent LACP PDUs per trunk (should be increasing). |
show port-security port-id |
Show port security state for all/specified interfaces. |
test cable-diagnostics port-list show cable-diagnostics |
Initiate and show results of Time-domain reflectometer cable diagnostics test to check Ethernet cables for faults. This will shut down temporarily all the tested ports! |
VLANs
| Command | Description |
|---|---|
show vlans |
Show a list of all VLANs configured on this switch. |
show vlans ports port-name[,port2-name…] |
Show vlans enabled on the specified physical port. |
show vlans vlan-id |
Show ports where the specified vlan-id is enabled, either as |
conf t (config)# no vlan vlan-id |
Deletes VLAN vlan-id from configuration and un-assigns all ports from it, if some ports have no other VLAN association, they will be auto-assigned to default VLAN 1. WARNING: this command deletes the VLAN specified no matter from which sub-config mode you issue it. That is, even under interface config mode, this will remove all configuration for this VLAN from everywhere. |
Daemons Real-Time Debug
| Command | Description |
|---|---|
show debug |
Show currently enabled debug |
debug destination logging/session/buffer |
Set location to output the debug to (default
|
show debug buffer |
Show log buffer with the collected debug output if the destination was set to
|
[no] debug daemon-name |
enable real-time debug of the specified daemon. Use
|
debug ip routing-process |
Debug various routing processes. The routing-process is one of the:
|
Spanning Tree Protocol (STP)
| Command | Description |
|---|---|
display stp root |
Show root switch for each VLAN. |
display stp brief |
Show STP state for each port/VLAN - Forwarding/Blocking, STP role. |
Routing Info
Static
| Command | Description |
|---|---|
show ip |
Show IP routing state: disabled/enabled. It is disabled by default, to enable: (config)# ip routing on platforms that support Layer 3 routing. Also displays list of all the interfaces/VLANs with IP address set. |
show ip route |
Show static and connected routes on the switch. |
BGP
| Command | Description |
|---|---|
show ip bgp summary |
Show in short format all BGP peers with their IP address, AS number, and state. The first command to try for BGP. |
show ip bgp prefix/mask |
Show BGP info for the specified prefix. |
show ip bgp |
Display routes learned via BGP. |
show ip bgp neighbor [ip-address-of-peer] |
Show detailed information about the BGP session with all or the specified peer(s), including hold time, weight, prefixes advertised/received, etc. |
show ip bgp neighbor ip-address advertised-routes |
Display routes we advertise via BGP to the ip-address neighbor. |
show ip bgp neighbor ip-address received-routes |
Display routes we learned from the given BGP peer. |
show log bgp |
Show logs that include the word |
OSPF
| Command | Description |
|---|---|
show ip ospf |
Show if the OSPF process is running and router id. |
show ip ospf area |
Show all areas configured on this device. |
show ip ospf statistics |
List OSPF packet statistics (OSPF sent,recieved and error packet count) of all OSPF enabled interfaces. |
show ip ospf interface |
Show OSPF interfaces' information. |
show ip ospf neighbor |
List all established neighborships on this device. |
show ip ospf link-state |
Show all Link State Advertisements. |
LLDP & MAC & CDP
| Command | Description |
|---|---|
show lldp info remote-device [detail] |
Display LLDP neighbors. The info includes: local port name, chassis id of the peer, remote system name, remote port. If detail is added, will also show exact firmware version used, and management IP address if configured. Useful for topology discovery, which switch is connected to which. |
show lldp info local-device [detail] |
Show info about the device you are connected to: chassis id, system name, firmware image version, IP addresses configured. |
show lldp stats |
Show LLDP packets sent/received per port. |
show mac-address [detail] |
Show complete MAC addresses table with port names, MAC addresses, and VLANs. If detail is added, will also show age of each entry. |
show mac-address vlan vlanid |
Show MAC addresses learned on the specified VLAN. |
show mac-address port1[,port2…] |
Show MAC addresses learned on specified ports. |
show cdp neighbors [detail] |
Show list of CDP neighhbors with info on their MAC address, model, local port
where it was seen. Adding |
PoE
| Command | Description |
|---|---|
show power-over-ethernet brief [port name] |
Show detailed information about PoE-enabled interfaces, including information on drawn/available power per port, state. Optionally, limit information to a specific port. |
show power-over-ethernet brief vsf member member id |
Show PoE detailed info per VSF member. |
show power-over-ethernet |
Display PoE general information for the whole switch: total available/used power, PoE redundancy status, internal power. |
DHCP
| Command | Description |
|---|---|
show dhcp-server statistics |
Show DHCP server stats for Discover/Offer/Ack/NAK messages received/sent, number of pools configured. |
clear dhcp-server statistics |
Clear DHCP server stats. |
show dhcp-server binding|conflict|database|pool |
Show variouis operational parameters of the DHCP server. |
NTP
| Command | Description |
|---|---|
show ntp status |
Show current status of NTP |
show ntp servers |
Display configured NTP servers |
show ntp statistics |
Show stats for NTP - number of NTP packets sent/received, and errors. |
show ntp associations [detail] |
Show state of associations with the configured NTP servers, together with stats: delay, offset, dispersion, and stratum. |
show run | i ntp |
Show NTP-related configs. |
VSF (Virtual Switching Framework)
| Command | Description |
|---|---|
show vsf [detail] |
Show general VSF status: who is active, priority, software versions. |
show vsf member member-id |
Show general info on a specific member: serial number, uptime, cpu usage, memory usage, status: Commander/Standby, priority. |
show vsf link [detail|utilization] |
Show info on VSF link (VPC peer link in the Cisco world). Problems with VSF link may cause split-brain situation, when each member acts independently. |
show redundancy |
Shows firmware image version of each member, as well as the number of failovers. |
boot vsf member member-id |
Reboot the specified VSF member. |
Follow me on https://www.linkedin.com/in/yurislobodyanyuk/ not to miss what I publish on Linkedin, Github, blog, and more.