| **Index**
| **Health Check Module**
| **Brief Description of the Module**
| **CLI(s) Used to Perform Health Check**
|
| 1\.
| NX-OS Release Check
| Checks if the device runs a Cisco recommended NX-OS software release
| **`show version`**
|
| 2\.
| Nexus EoS/EoL Product Check
| Verifies if any of the components (hardware/software) has reached End-of-Life (EOL) or End-of-Sale (EOS)
| `show versionshow moduleshow inventory`
|
| 3\.
| Field Notice Check
| Checks if the device is potentially affected by a known PSIRT/CVE or Field Notice.
| **`show versionshow moduleshow inventoryshow running-config`**
and, any command needed to check the file against a given FN/PSIRT.
|
| 4\.
| NX-OS CPU Health Check
| Checks the symptoms for the elevated CPU utilization. It is reported when the current/historical CPU usage is >60%.
| **`show processes cpushow processes cpu sortshow processes cpu historyshow system resources`**
|
| 5\.
| NX-OS Memory Health Check
| Checks if memory usage on the device is over the system memory thresholds (default or user configured values).
| **`show versionshow processes memoryshow system resources`**
|
| 6\.
| NX-OS Interfaces Check
| Checks if any of the interfaces reported drops in either RX or TX direction. The module prints 5 interfaces with the highest error rates in each direction.
| **`show interfaceshow interface briefshow queuing`**
|
| 7\.
| CoPP Health Check
| Checks if CoPP is disabled, or incorrectly configured (for example, all CPU-bound traffic that hits default-class), or have outdated CoPP policy (for example, carried over from older releases), or >1000 drops reported in non-default classes.
| `show copp statusshow policy-map interface control-planeshow running-config`
|
| 8\.
| Inter-process Communication (MTS) Health Check
| Detects if there are any inter-process communication (referred as MTS) messages stuck for more than 1 day.
| `show system internal mts buffer summaryshow system internal mts buffer details`
|
| 9\.
| Nexus Module Health Check
| Checks if any of the modules (linecard, fabric, and so on) reported diagnostic failures or in powered down / failed state
| **`show moduleshow inventoryshow diagnostic result module all detail`**
|
| 10\.
| PSU & FAN Health Check
| Detects if any of the power supplies is not in operational state.
| **`show inventoryshow environment show logging logshow logging nvram`**
|
| 11\.
| vPC Best Practices Check
| Validates the device configuration meets vPC best practices, like peer-router, peer-switch, and peer-gateway configurations.
| Layer3 Peer Router:
**`show running-config`** (to check if OSPF, EIGRP and BGP adjacencies formed)
Peer-Gateway / Peer-switch:
**`show running-configshow spanning-treeshow vpc briefshow interface brief`**
|
| 12\.
| MTU Check
| Detects inconsistent MTU configurations, like Layer2 Interface and Layer3 SVI have mismatch MTU configs, Incorrect MTU on OTV Join Interfaces, or Jumbo MTU not enabled on interfaces where it is needed and so on.
| **`show running-configshow interfaceshow ip arp show mac address-tableshow ip route detail show ip eigrp neighbors show ip ospf neighbors show bgp `**
|
| 13\.
| Layer2 feature Configuration Health Check
| Checks if any L2 feature enabled but not used
| **`show running-config`**
|
| 14\.
| NX-OS vPC Compatibility Check
| Checks if type1/type 2 incompatibility errors reported of Virtual Port-Channels (vPC).
| **`show running-configshow vpc `**
|
| 15\.
| Spanning Tree Protocol Health Check
| Checks the attached outputs for an indication of Spanning Tree Protocol instabilities or in unexpected state. Module reports vlans where most recent topology changes occurred together with some additional information:
timestamp, interface and Root bridge ID.
Currently, this health check module supports only RSTP; the support for MST is planned for the future versions.
| **`show spanning-tree detailshow spanning-tree internal errorsshow spanning-tree internal event-history show spanning-tree activeshow logging log`**
**`show mac address-table notification mac-move`**
**`show system internal `**
|
| 16\.
| PortChannel Health Check
| Detects if any of the configured port-channel members is in unhealthy state: (I), (s) (D) or (H)
| **`show port-channel summary`**
|
| 17\.
| SFP Validation Check
| Detects any transceivers which reported "SFP Validation Failed" error
| `show interface brief`
|
| 18\.
| Layer3 Feature Configuration Health Check
| Checks if any L3 feature enabled but not used
| **`show running-config`**
|
| 19\.
| Default Route via Management VRF Check
| Checks if the device has a default route configured in the Default vrf pointing through Management vrf.
| **`show running-configshow accounting log`**
|
| 20\.
| Unsupported Multicast Routing over vPC Check
| Checks for unsupported PIM adjacency over vPC
| `show running-configshow ip pim interface vrf all internalshow ip pim neighbor vrf all detail`
|
| 21\.
| OSPF Health Check
| Checks for a possible adjacency issues observed on the device.For example:
- multiple neighbors detected on interface configured as P2P
- router ID not configured manually or that used a loopback IP
- adjacencies not in FULL state
- adjacencies which reached FULL state recently and indicates potential instability
| **`show running-configshow ip interface brief vrf allshow ip ospf neighbors detail vrf all privateshow ip ospf interface vrf all privateshow logging log`**
|
| 22\.
| EIGRP Health Check
| Checks for a possible adjacency issues observed on the device. For example:
- AS number not configured
- No active neighbors detected
- High Values of SRTT, RTO or Q Cnt detected
- High number of dropped EIGRP packets detected
- Lesser than 15 mins uptime of adjacency, and indicates potential instability
- Adjacency went down in last 7 days
| **`show running-configshow logging logshow ip eigrp neighbors detail vrf allshow ip eigrp detail vrf all`**
|
| 23\.
| BGP Peers Health Check
| Checks for BGP adjacency in IDLE state.
| **`show running-configshow bgp vrf all all summary`**
|
| 24\.
| First-Hop Redundancy Protocol (FHRP)
| Checks for the non-default timer configurations, as these configurations can result in a sub-optimal performance.
This health check module covers ONLY Hot-Standby Routing Protocol (HSRP)
| **`show running-config`**
|