A Windows System Admin's Blog

Covering Server Administration, Endpoint Management, Scripting and Network Management

Useful Debug commands for ArubaOS (AOS) Switches

,

I was recently out at a site working through an 802.1x wired implementation, their site runs all Aruba Networking gear running older style ArubaOS (or AOS) which is basically the ProCurve/ProVision with a mix of 2930f, 3810m switches and 5406zl chassis. The hard work of certificates has already been done sine we earlier did a 802.1x EAP-TLS deployment for them. After doing the initial build out (I’ll do a post on this soon) I needed to see the traffic between our test switch and their RADIUS server.

While these commands are useful, there are a few gotcha’s. First, you need to ensure you output it to the correct terminal, so depending if your connected via Console/Serial or SSH you’ll just need to tweak your debug command. Secondly, debug commands can have a significant impact on performance, so use them when you need them and turn them off when you’re done.

Firstly, setup your session so the debug output hits our console window

debug destination session

The following is a list of debug commands that can be issues, these will vary slightly based on the model/series of the switch you are on. The easiest thing I can tell you to confirm whether it’s valid is just to tab complete the command.

Following is a list of all available debug commands
 acl                   Displays debug messages for access control lists.
 all                   Display all debug messages.
 cdp                   Display CDP information.
 cfg-restore           Display cfg-restore debug messages.
 cppm                  Display CPPM debug Messages.
 cwmp                  Enable or disable CWMP events debug messages.
 destination           Select destination for debug messages.
 dfp                   Display DFP debug Messages.
 dhcp-server           Display DHCP server debug messages.
 dldp                  Enable DLDP debug messages.
 est                   Display EST debug messages.
 event                 Display event log messages.
 hpe-anw-central       Display HPE ANW Central server debug information.
 ip                    Display debug messages for IPv4.
 ip-sla                Enable debug logs for IP SLA.
 ipv6                  Enable debug messages for IPv6.
 lacp                  Display LACP information.
 lldp                  Display LLDP information.
 mdns                  Display mDNS debug messages.
 mstp                  Display MSTP debug messages.
 mvrp                  Enable MVRP debug messages.
 ntp                   Display debug messages for NTP.
 openflow              Display all OpenFlow packets.
 openflow-traffic      Enable logging of OpenFlow debug packets for a specific flow table for an instance.
 papi                  Displays PAPI exchange messages.
 policy                Display policy debug messages.
 rest-interface        Display REST debug information.
 rpvst                 Display RPVST debug messages.
 security              Display all Security messages.
 smart-link            Display Smart link debug messages.
 snmp                  Display SNMP debug messages.
 time-stamp            Enable/disable system-time to be associated with debug messages.
 tunnel                Display tunnel debug messages.
 udld                  Display UDLD debug messages.
 uplink-failure-det... Display UFD debug messages.
 usertn                Displays authentication module log messages for user-based tunneled node
 vrrp                  Display VRRP debug messages.
 ztp                   Display ZTP debug messages.

For my example, we need to look at radius server messages, so I issued this command

debug security radius-server

Once you’re done, we simply cancel out the debug with no.

no debug all

I’ll repeat that tab complete works wonders if you’re stuck. Hope that helps.

Leave a Reply

More Posts

Applying inherit rights (inheritable) for permissions to a large number of Active Directory objects

I was recently involved in a project to help secure a School’s Active Directory environment.  After sitting down and planning what we wanted to achieve in terms of account security we went to work.  After setting up all of the IT based security groups and assigning and delegating the appropriate rights and permissions we found […]

Change Windows 10 Taskbar Icons Script Deploying a custom taskbar for Windows 10

Over the summer holiday period, I was assisting a school with building out an SoE for the new year.  One of the things we used to do with Windows 7 was tweak the Taskbar to contain only items we were after instead of the default items of Internet Explorer, Windows Explorer and Windows Media Player. […]

Adventures with setting up RDS RemoteApp and Web Access in Windows Server 2012 R2

So I was recently setting up a demo environment in Azure with two servers.  Our goal was to have Remote Web Access and then publish RemoteApps through that so we could give live demos.  The process to setup Remote Desktop Services is much easier in Server 2012 / 2012 R2 thanks to the Add Remove […]