Starting with ACI release 6.1.2, AppCenter and its applications can no longer be hosted on Cisco APIC. For any questions or support, feel free to reach out to us at aciappcenter-support@external.cisco.com.
ELAM Assistant
Company: Cisco
Details
The ELAM Assistant performs ELAM to capture a packet and decode the result.
+ What is ELAM(Embedded Logic Analyzer)?
ELAM is a built-in tool that captures a single packet at the ASIC level to check forwarding decision details.
It is typically used by Cisco TAC as it requires a deep knowledge of each ACI ASIC to both perform and corretly understand the resulting output.
+ What does this app do?
This app hides the differences between each ACI ASIC and provides a UI to perform an ELAM capture for those who don't have access to ASIC level information.
It then decodes the results of the ELAM capture in a user friendly format.
+ How does this app work?
It will SSH to selected nodes via the APIC infra addresses within the overlay-1 VRF to perform the ELAM, then obtain real time information from the node to decode the result.
Once the SSH session is established, it keeps the sessions open until the app is disabled. This is to accelerate subsequent executions.
+ Supported hardware
This app does not support leaf/spine switches with 1st generation ASICs (i.e. PID without -EX/-FX/-FX2 and so on).
+ Supported ACI version
This app supports any ACI versions that support appCenter.
+ Official Support?
No Cisco official support. This app is maintained via best effort support.
Cisco TAC can troubleshoot any issues mainly to identify the issue but if the fix needs to be done in the app itself, its fix is not the subject of any Cisco contracts or service level agreement (SLA).
+ Issues?
If you see a problem inside the app such as failure in ELAM parsing, please reach out to aciappcenter-elamassistant@cisco.com along with logs mentioned below.
If the problem is the installation of the app itself, please reach out to Cisco TAC as it is a problem in the appCenter infra on APIC instead of the app itself.
Tips :
When upgrading the APIC controller, the appcenter infrastructure may experience some issues if the app was not disabled during the upgrade.
In those cases, please try to uninstall/re-install the app or see if other stateful appCenter apps work.
If other stateful appCenter apps don't work either, please open a Cisco TAC case to check the appCenter infra on APICs.
+ Logs
Logs are located under /data2/logs/Cisco_ElamAssistant on one of the APICs.
Release Note :
== v0.11 ==
+ New support - N9K-C9336C-FX2-E
== v0.10 ==
+ New support - N9K-C9348GC-FX3, N9K-C9348D-GX2A, N9K-C9364D-GX2A, N9K-C9332D-GX2B
== v0.9 ==
+ Fixed - Parsing failure for flooding traffic on FX3 switches
+ Fixed - Incorrect number of ASICs on fabric modules. (note that functionality on fabric modules are not tested)
+ New - Support breakout ports
== v0.8 ==
+ Fixed - The limitation of maximum 3 concurrent ELAM seesions is lifted from APIC 5.2 or newer. 4.2, 5.0 and 5.1 still have the limitation.
+ Fixed - ELAM Set failure when many parameters are set for one header such as IPv4 (only on APIC 5.2 or newer is susceptible)
+ Fixed - Stale APIC SSH sessions after the initialization/credential check inside the app on APIC 5.1 or older (APIC 5.2 or newer is not susceptible).
== v0.7 ==
+ Fixed - Unable to set ELAM for N9K-C93216TC-FX2
+ Fixed - ELAM parsing failure on ACI 3.2 or older with v0.5 and v0.6
== v0.6 ==
+ New feature - With APIC version 5.2 or later, ELAM Assistant does not require credential checks at the begining.
+ Fixed - The app login/initialization takes longer in v0.5 than v0.4 when a large number of objects are configured in ACI.
== v0.5 ==
+ New support - New switch models (see the home view inside the app for details).
+ New feature - Updated SSH KEX algorithm used between the app and APIC (see below for details).
+ Fixed - L4 source port in the report showing the destination port instead.
+ Fixed (again) - ELAM Set failure on a particular switch due to SSH timeout when the app hasn't been used for a while and used again without re-login in the app.
== v0.4 ==
+ Fixed - A failure on getting devices (the left pane) in versions older than 4.0 (a regression due to the vPod fix on v0.3).
+ (regression) ELAM Set failure on a particular switch due to SSH timeout when the app hasn't been used for a while and used again without re-login in the app.
== v0.3 ==
+ New feature - The app works even when docker0 IP address is changed on APIC.
+ Fixed - ELAM Set failure on a particular switch due to SSH timeout when the app hasn't been used for a while and used again without re-login in the app.
+ Fixed - ELAM Set failure on a particular switch due to SSH host key change of the switch.
+ Fixed - ELAM Parsing failure on FX2 switches due to CSCvo12091.
+ Fixed - A failure on getting supported devices when vPod node exists.
SSH KEX Algorithm Update :
== prior to v0.5 ==
diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256
== from v0.5 ==
diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256
diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521
+ What is ELAM(Embedded Logic Analyzer)?
ELAM is a built-in tool that captures a single packet at the ASIC level to check forwarding decision details.
It is typically used by Cisco TAC as it requires a deep knowledge of each ACI ASIC to both perform and corretly understand the resulting output.
+ What does this app do?
This app hides the differences between each ACI ASIC and provides a UI to perform an ELAM capture for those who don't have access to ASIC level information.
It then decodes the results of the ELAM capture in a user friendly format.
+ How does this app work?
It will SSH to selected nodes via the APIC infra addresses within the overlay-1 VRF to perform the ELAM, then obtain real time information from the node to decode the result.
Once the SSH session is established, it keeps the sessions open until the app is disabled. This is to accelerate subsequent executions.
+ Supported hardware
This app does not support leaf/spine switches with 1st generation ASICs (i.e. PID without -EX/-FX/-FX2 and so on).
+ Supported ACI version
This app supports any ACI versions that support appCenter.
+ Official Support?
No Cisco official support. This app is maintained via best effort support.
Cisco TAC can troubleshoot any issues mainly to identify the issue but if the fix needs to be done in the app itself, its fix is not the subject of any Cisco contracts or service level agreement (SLA).
+ Issues?
If you see a problem inside the app such as failure in ELAM parsing, please reach out to aciappcenter-elamassistant@cisco.com along with logs mentioned below.
If the problem is the installation of the app itself, please reach out to Cisco TAC as it is a problem in the appCenter infra on APIC instead of the app itself.
Tips :
When upgrading the APIC controller, the appcenter infrastructure may experience some issues if the app was not disabled during the upgrade.
In those cases, please try to uninstall/re-install the app or see if other stateful appCenter apps work.
If other stateful appCenter apps don't work either, please open a Cisco TAC case to check the appCenter infra on APICs.
+ Logs
Logs are located under /data2/logs/Cisco_ElamAssistant on one of the APICs.
Release Note :
== v0.11 ==
+ New support - N9K-C9336C-FX2-E
== v0.10 ==
+ New support - N9K-C9348GC-FX3, N9K-C9348D-GX2A, N9K-C9364D-GX2A, N9K-C9332D-GX2B
== v0.9 ==
+ Fixed - Parsing failure for flooding traffic on FX3 switches
+ Fixed - Incorrect number of ASICs on fabric modules. (note that functionality on fabric modules are not tested)
+ New - Support breakout ports
== v0.8 ==
+ Fixed - The limitation of maximum 3 concurrent ELAM seesions is lifted from APIC 5.2 or newer. 4.2, 5.0 and 5.1 still have the limitation.
+ Fixed - ELAM Set failure when many parameters are set for one header such as IPv4 (only on APIC 5.2 or newer is susceptible)
+ Fixed - Stale APIC SSH sessions after the initialization/credential check inside the app on APIC 5.1 or older (APIC 5.2 or newer is not susceptible).
== v0.7 ==
+ Fixed - Unable to set ELAM for N9K-C93216TC-FX2
+ Fixed - ELAM parsing failure on ACI 3.2 or older with v0.5 and v0.6
== v0.6 ==
+ New feature - With APIC version 5.2 or later, ELAM Assistant does not require credential checks at the begining.
+ Fixed - The app login/initialization takes longer in v0.5 than v0.4 when a large number of objects are configured in ACI.
== v0.5 ==
+ New support - New switch models (see the home view inside the app for details).
+ New feature - Updated SSH KEX algorithm used between the app and APIC (see below for details).
+ Fixed - L4 source port in the report showing the destination port instead.
+ Fixed (again) - ELAM Set failure on a particular switch due to SSH timeout when the app hasn't been used for a while and used again without re-login in the app.
== v0.4 ==
+ Fixed - A failure on getting devices (the left pane) in versions older than 4.0 (a regression due to the vPod fix on v0.3).
+ (regression) ELAM Set failure on a particular switch due to SSH timeout when the app hasn't been used for a while and used again without re-login in the app.
== v0.3 ==
+ New feature - The app works even when docker0 IP address is changed on APIC.
+ Fixed - ELAM Set failure on a particular switch due to SSH timeout when the app hasn't been used for a while and used again without re-login in the app.
+ Fixed - ELAM Set failure on a particular switch due to SSH host key change of the switch.
+ Fixed - ELAM Parsing failure on FX2 switches due to CSCvo12091.
+ Fixed - A failure on getting supported devices when vPod node exists.
SSH KEX Algorithm Update :
== prior to v0.5 ==
diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256
== from v0.5 ==
diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256
diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521