Cisco APIC Layer 2 Networking Configuration Guide, Release 6.2(x)

Troubleshoot endpoint connectivity

Updated: July 7, 2026

Want to summarize with AI?

Configure various troubleshooting methods to identify and resolve endpoint connectivity issues in your fabric environment.

Follow these steps to troubleshoot endpoint connectivity:

Procedure

Inspect the operational status of each endpoint.

The operational status will reveal any fault or misconfiguration of the endpoints. See Inspect the endpoint status.
Inspect the status of the tunnel interface.

The operational status will reveal any fault or misconfiguration of the tunnel. See Inspect the tunnel interface status.
Perform a traceroute between the endpoint groups (EPGs).

A traceroute will reveal any problems with intermediate nodes, such as spine nodes, between the endpoints. See Perform a traceroute between endpoints.
Configure an atomic counter on an endpoint.

The atomic counter will confirm whether the source endpoint is transmitting packets or the destination endpoint is receiving packets, and whether the number of packets received equals the number of packets sent. See Configure atomic counters.
Inspect the contracts under each EPG.

Inspect the contracts under each EPG to make sure they allow the traffic that should flow between the EPGs. As a test, you can temporarily open the contracts to allow unrestricted traffic.
Configure a SPAN policy to forward source packets to a monitoring node.

A packet analyzer on the monitoring node will reveal any packet issues such as an incorrect address or protocol. See Troubleshoot endpoint connectivity.

Inspect the endpoint status
Verify endpoint properties and view health, status, and fault information for source and destination endpoints in the Application Policy Infrastructure Controller (APIC) GUI.
Inspect the tunnel interface status
Verify the operational status of tunnel interfaces by examining health, status, and fault information for both source and destination endpoints.
Perform a traceroute between endpoints
Configure a traceroute policy to analyze network paths between source and destination endpoints in your tenant.
Configure atomic counters
Configure atomic counter policies to measure traffic between endpoints, endpoint groups, external interfaces, and IP addresses.
Configure a tenant SPAN session using the Cisco APIC GUI
Configure a tenant SPAN policy to forward replicated source packets to a remote traffic analyzer using the Cisco APIC GUI.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.