Netscaler Troubleshooting using command line
Credit: https://c4rm0.wordpress.com/netscaler-troubleshooting-using-command-line/
In this blog i will go through some Netscaler CLI/Shell commands i use for troubleshooting Netscaler issues and commands i use to test and gather information about the configuration on the Netscaler
First of all download and open up putty and connect to the NSIP using the nsroot credentials
Show Commands – are useful for gathering information such as which features and modes are enabled and things such as Netscaler IP’s, static routes, VLANS and interfaces. Below is a list of show commands i typically use
show ns info
Show version
Show interface
show ns ip
show route
show vlan
show hardware
show lb vserver
show persistentsessions
show ha node
show vpn vserver
show aaa stats
show aaa session
show service
show running | more
show connectiontable | grep IPaddresss
Troubleshooting commands – are useful when troubleshooting issues such as connectivity and performance issues as well as authentication issues and configuration issues
Ping
traceroute
Telnet
Show techsupport (The capture can be pulled off the netscaler using Winscp and uploaded to Citrix Insight Service / Citrix smart check for Analysis)
cat /var/log/ns.log (read the ns.log file)
nsconmsg -K newnslog -d event (view the newnslog file)
nsconmsg -K newnslog -d consmsg (view the console messages)
nsconmsg -d current -g pol_hits (View the policy hits for a user logging in and connecting)
cd /tmp cat aaad.debug (View authentication information)
Network Packet captures – Are usefull when you are troubleshooting connectivity problems such as firewalls between your Netscalers and backend VDA’s
nstcpdump.sh host 192.168.3.219 and port 2598
start nstrace -size 0 -filter “connection.ip.ne(127.0.0.1) && connection.ip.eq(192.168.3.210)”
packet captures can be found in cd /var/nstrace and pulled off with winscp
Important locations on the Netscaler
cd /var/log
cd /var/nslog
cd /var/crash
cd /var/core
cd /nsconfig
cd /nsconfig/ssl
cd /nsconfig/license
Other Commands
save c or save config
set ha node -hastatus stayprimary/staysecondary
stat aaa
stat lb vserver
stat ssl
All done 
No comments:
Post a Comment