Skip to main content
gmonte
Staff
Staff
February 23, 2026

Technical Tip: Debug Cisco ACI SDN connector

  • February 23, 2026
  • 0 replies
  • 230 views
Description

This article describes the output of the command 'diagnose debug application acid -1' that shows the exchange of dynamic addresses between the FortiGate and the Cisco ACI. This command is intended to be run when the Cisco ACI SDN connector is configured on the FortiGate.

Scope FortiGate.
Solution

This article assume the ACI SDN is already configured as defined in configure the Cisco ACI connector in FortiOS.

Debugging the ACI SDN connector:
execute the following commands to generate an output similar as below:

diagnose debug application acid -1

diagnose debug timestamp enable

diagnose debug enable

2026-02-06 22:08:16 update sdn connector ACI-Connector status to disabled
2026-02-06 22:08:20 sdnd exit
2026-02-06 22:08:37 acid curl failed, 6
2026-02-06 22:08:37 acid server is down <----- At this moment, the status shows as 'down' since the Cisco ACI and the connector have been restarted a moment before to capture this debug.
2026-02-06 22:08:39 sdnd start
2026-02-06 22:08:40 vdom AA initializing sdn db check...
2026-02-06 22:08:40 vdom AA sdn db check passed, continue to process...
2026-02-06 22:08:40 sdnd successufully initialized db env for vdom AA
2026-02-06 22:08:40 sdnd successufully extracted svcs for vdom AA
2026-02-06 22:08:40 vdom BB initializing sdn db check...
2026-02-06 22:08:40 vdom BB sdn db check passed, continue to process...
2026-02-06 22:08:40 sdnd successufully initialized db env for vdom BB
2026-02-06 22:08:40 sdnd successufully extracted svcs for vdom BB
2026-02-06 22:08:40 vdom root initializing sdn db check...
2026-02-06 22:08:40 vdom root sdn db check passed, continue to process...
2026-02-06 22:08:40 sdnd successufully initialized db env for vdom root
2026-02-06 22:08:40 sdnd successufully extracted svcs for vdom root
2026-02-06 22:08:42 acid sdn connector ACI-Connector updating
2026-02-06 22:08:42 acid validating server status: 10.10.10.10
2026-02-06 22:08:43 acid confirmed active server: 10.10.10.10
2026-02-06 22:08:43 acid sdn connector ACI-Connector getting token
2026-02-06 22:08:43 acid APIC version: 6.1(5e)
2026-02-06 22:08:43 acid token length: 731
2026-02-06 22:08:43 acid token expire: 1770412723
2026-02-06 22:08:43 acid starts requesting IP list...
2026-02-06 22:08:44 acid starts parsing IP list...
2026-02-06 22:08:44 acid parsed 0 IP addresses
2026-02-06 22:08:44 acid sdn connector ACI-Connector updating IP addresses
2026-02-06 22:08:44 acid checking address object epg-ABC, vd 1 <----- Here the dynamic object has been retrieved.
2026-02-06 22:08:44 acid checking address object epg-123, vd 1 <----- Here the dynamic object has been retrieved.
2026-02-06 22:08:44 acid checking address object epg-example, vd 1 <----- Here the dynamic object has been retrieved.
2026-02-06 22:08:44 acid checking address object epg-address, vd 1 <----- Here the dynamic object has been retrieved.
2026-02-06 22:08:44 acid checking address object epg-lan, vd 1 <----- Here the dynamic object has been retrieved.
2026-02-06 22:08:44 acid checking address object epg-wan, vd 1 <----- Here the dynamic object has been retrieved.
2026-02-06 22:08:44 acid sdn connector ACI-Connector finished updating
2026-02-06 22:08:44 sdnd reap child pid: 18376, reaped updater: ACI-Connector
2026-02-06 22:09:43 acid sdn connector ACI-Connector updating
2026-02-06 22:09:43 acid stored active server is found: 10.10.10.10
2026-02-06 22:09:43 acid ACI-Connector sdn connector will retrieve token after 540 secs
2026-02-06 22:09:43 acid sdn connector ACI-Connector getting token
2026-02-06 22:09:43 acid APIC version: 6.1(5e)
2026-02-06 22:09:43 acid token length: 731
2026-02-06 22:09:43 acid token expire: 1770412783
2026-02-06 22:09:43 acid starts requesting IP list...
2026-02-06 22:09:44 acid starts parsing IP list...
2026-02-06 22:09:44 acid parsed 6 IP addresses

 

Disable the debug processes after completion:

 

diagnose debug disable 

diagnose debug reset

 

The SDN Connector uses an API Call to retrieve the dynamic addresses displayed above.