I was looking at some of http logs and found the ACNS is initiating a connect to the internet, but it looks like ACNS acts like a proxy, which means some other host behind this ACNS is intitiating the connection, can somebody help me on how to find the original ip who initiated this connection? or is there a way to find out the original host who initiated the connection through ACNS?
You're right ACNS is a proxy solution so most likely all the request trying to go out will be seen sourced from the ACNS "outside/routable" IP address.
If you want to find out the who the original request is you can enable the x-forwarder-for so that the WAE/CE will inject the IP address into a new header, this feature works for HTTP traffic only.
The command to enable it is:
http append x-forwarded-for-header
Now if you're the WAE/CE admin and want to monitor all the request going through you need to enable the transactional logging that would allow you to log traffic for all the protocols that you're proxy'ing on the box.
To enable transactional logging you need to enter this commands:
CE# transaction-log force archive
Once they've been applied wait for a few seconds while some traffic goes through the box and then check the following file
You'll see that each message looks like the one below:
Thanks a lot this was really helpful.........i can see some of the log file in this directory "/local1/logs", is there a way to download the log files to my machine?.....and also is there a easy way to find (like grep in unix) out the log entrires for particular domain from the log file?.... for example: if i want to find out all the entries in the log file for www.google.com, how can i do it?
VMware Trunk Port Group is supported from ACI version 2.1
VMM integration must be configured properly
ASA device package must be uploaded to APIC
ASAv version must be compatible with ACI and device package version
In the Previous articles of ACI Automation, we are using Postman/Newman as the Rest API tool to automate the ACI Configuration.
In this article I’m going to discuss on usin...
One of the first steps in building your ACI Fabric is to go through Fabric Discovery. While Fabric Discovery is usually a straightforward process, there are various issues that may prevent you from discovering an ACI switch. This article wil...