Other Tools and Configuration
Additional Tools and Configuration Commands
Other tools can assist in troubleshooting. Also, we recommend reviewing several configuration commands.
CLI Usage Note
To execute command on a local switch only, use the command: switch-local. The display of an asterisk * denotes commands will run on the local switch. To revert to displaying information from all switches use the command: switch.
In some cases, a command's horizontal output may be wide and wrap inside the terminal CLI session. To display the information in a vertical format use the format command layout vertical. To revert, omit the format command.
Arista NetVisor UNUM: Use the Security / Monitoring Dashboard and the Services Dashboards to manage and review system monitoring and QOS/COS queues.
vFlow Introduction
The vFlow feature allows an administrator to monitor, capture, or manipulate network flows. vFlows are created by specifying matching criteria to isolate particular network traffic and then prescribe an action to take once the matching traffic is isolated.
vFlows are powerful network tools and provide troubleshooting information on specific network traffic.
vFlow Status
View the configured vFlows with the vflow-show command.
Note: The action of this command is to drop the matching traffic.
View vFlow configuration with the command: vflow-show
|
CLI (network-admin@udev-leo1) > vflow-show switch name scope type burst-size precedence enable table-name ---------- ------ ----- ----- ---------- ---------- ------ -------------------- udev-leo-3 asdasd local vflow auto default enable System-L1-L4-Tun-1-0 |
vFlow Statistics
The vflow facility also captures statistics about the defined vflows. This is useful to measure activity for a given vflow.
View vflow statistics with the command: vflow-stats-show
|
CLI (network-admin@udev-leo1) > vflow-stats-show switch name pkts bytes cpu-pkts cpu-bytes drops drop-bytes policer-drops policer-drop-bytes cpu-tx-pkts cpu-tx-bytes ---------- ------------- ----- ----- -------- --------- ----- ---------- ------------- ------------------ ----------- ------------ udev-leo1 Control-Total 23.1M 21.6G 23.2M 21.6G 1 64 0 0 19.9M 2.90G udev-leo-4 Control-Total 14.3M 4.41G 14.3M 4.40G 10.4K 666K 0 0 10.5M 2.78G udev-leo-3 asdasd 7 658 0 0 0 0 0 0 0 0 udev-leo-3 Control-Total 19.7M 20.5G 20.1M 20.5G 1 7.36M 0 0 6.97M 2.62G |
Other vFlow Commands
vFlow capabilities are extensive and provide many other features and functions. The following are several of the other vFlow commands. Please refer to the technical product documentation for a complete description of the vFlow command set.
|
vflow-class-show |
Display virtual flow class information. |
|
vflow-create |
Create a virtual flow definition for L2 or L3 IP. |
|
vflow-show |
Display virtual flow information. |
|
vflow-snoop |
Display the packet headers of flows directed to the server-switch CPU. |
|
vflow-stats-show |
Display packet statistics or logs for the vflow. |
vFlow Snoop
Capturing and Analyzing traffic is an extremely valuable tool for troubleshooting.
Snooping only works if you use the parameters: copy- to-cpu or to-cpu. The copy-to-cpu parameter ensures that the data plane forwards the packets and sends a copy to the CPU, and you should use this parameter if you want traffic to flow through the switch.
Using vflow-snoop, capture and analyze interesting traffic, as shown in the example below:
Create the vFlow name using the command: vflow-create name snoop_ssh scope local action copy-to-cpu src-port 22 proto tcp
|
CLI (network-admin@udev-leo1*) > vflow-create name snoop_ssh scope local action copy-to-cpu src-port 22 proto tcp |
Examine the vflow snoop using the command: vflow-snoop name snoop_ssh
|
CLI network-admin@pnswitch1 > vflow-snoop name snoop_ssh switch: pleiades24, flow: snoop_ssh, port: 41, size: 230, time: 10:56:57.05785917 src-mac: 00:15:17:ea:f8:7 dst-mac: f4:6d:04:0e:77:60, etype: ip src-ip: 10.9.11.18, dst-ip: 10.9.10.65, proto: tcp src-port: 22, dst- port: 62356 switch: pleiades24, flow: snoop_ssh, port: 41, size: 118, time: 10:56:57.05922560 src-mac: 00:15:17:ea:f8: dst-mac: f4:6d:04:0e:77:60, etype: ip src-ip: 10.9.11.18, dst-ip: 10.9.10.65, proto: tcp src-port: 22, dst- port: 62356 |
Caution: The following configuration settings should only be changed under the direction of Arista Networks support personnel.
Arista NetVisor UNUM: Use the Manager Layer 2 Dashboards to review and manage Layer 2 functionality described below.
Port Storm Control Configuration
View the port storm control settings with the command: port-storm-control-show
|
CLI (network-admin@udev-leo1*) > port-storm-control-show port speed unknown-ucast-level unknown-mcast-level broadcast-level trunk ---- ----- ------------------- ------------------- --------------- ----------- 1 10g 30% 30% 30% port1-4 2 10g 30% 30% 30% 3 10g 30% 30% 30% 4 10g 30% 30% 30% port1-4 5 10g 30% 30% 30% 6 10g 30% 30% 30% 7 10g 30% 30% 30% 8 10g 30% 30% 30% 9 10g 30% 30% 30% 10 10g 30% 30% 30% 11 10g 30% 30% 30% s1-to-leafs 12 10g 30% 30% 30% s1-to-leafs 13 10g 30% 30% 30% s1-to-leafs 14 10g 30% 30% 30% 15 10g 30% 30% 30% 16 10g 30% 30% 30% 17 10g 30% 30% 30% auto-273 18 10g 30% 30% 30% auto-273 19 10g 30% 30% 30% 20 10g 30% 30% 30% test-trunk 21 10g 30% 30% 30% test-trunk 22 10g 30% 30% 30% test-trunk 23 10g 30% 30% 30% test-trunk 24 10g 30% 30% 30% test-trunk 25 10g 30% 30% 30% test-trunk 26 10g 30% 30% 30% test-trunk 27 10g 30% 30% 30% test-trunk 28 10g 30% 30% 30% test-trunk 29 10g 30% 30% 30% test-trunk 30 10g 30% 30% 30% test-trunk 31 10g 30% 30% 30% 32 10g 30% 30% 30% 33 10g 30% 30% 30% 34 10g 30% 30% 30% 35 10g 30% 30% 30% 36 10g 30% 30% 30% 37 10g 30% 30% 30% 38 10g 30% 30% 30% 39 10g 30% 30% 30% 40 10g 30% 30% 30% 41 10g 30% 30% 30% 42 10g 30% 30% 30% 43 10g 30% 30% 30% 44 10g 30% 30% 30% 45 40g 30% 30% 30% 46 10g 30% 30% 30% 47 10g 30% 30% 30% 48 10g 30% 30% 30% 49 40g 30% 30% 30% 50 10g 30% 30% 30% 51 10g 30% 30% 30% 52 10g 30% 30% 30% 53 40g 30% 30% 30% 54 10g 30% 30% 30% 55 10g 30% 30% 30% 56 10g 30% 30% 30% 57 40g 30% 30% 30% 58 10g 30% 30% 30% 59 10g 30% 30% 30% 60 10g 30% 30% 30% 61 40g 30% 30% 30% 62 10g 30% 30% 30% 63 10g 30% 30% 30% 64 10g 30% 30% 30% 65 40g 30% 30% 30% 66 10g 30% 30% 30% 67 10g 30% 30% 30% 68 10g 30% 30% 30% 69 1g 30% 30% 30% 70 1g 30% 30% 30% 71 1g 30% 30% 30% 72 1g 30% 30% 30% |
L2 Setting Configuration
View the L2 control settings with the command: l2-setting-show
|
CLI (network-admin@udev-leo1*) > l2-setting-show aging-time(s): 900 software-aging: on l2-max-count: 1200000 l2-cur-count: 153 l2-active-count: 8 l2-max-mem: 2.29G l2-cur-mem: 306K l2-checker: disabled l2-checker-interval: 10m l3-arp-max-count: 1200000 l3-arp-cur-count: 8 l3-arp-max-mem: 769M l3-arp-cur-mem: 5.25K |
Arista NetVisor UNUM: Use the Services System Manage System Settings Dashboard to manage and review system settings.
System Control Settings
View the system control settings with the command: sys-flow-setting-show
|
CLI (network-admin@udev-leo1*) > system-settings-show optimize-arps: off lldp: on policy-based-routing: off optimize-nd: off reactivate-mac: on reactivate-vxlan-tunnel-mac: on manage-unknown-unicast: off manage-broadcast: off block-loops: on auto-trunk: on auto-host-bundle: off cluster-active-active-routing: on fast-route-download: off fast-interface-lookup: on routing-over-vlags: off source-mac-miss: copy-to-cpu igmp-snoop: use-l3 vle-tracking-timeout: 3 pfc-buffer-limit: 40% cosq-weight-auto: off port-cos-drop-stats-interval(s): disable lossless-mode: off snoop-query-stagger: no-stagger-queries host-refresh: off proxy-conn-retry: on proxy-conn-max-retry: 3 proxy-conn-retry-interval: 500 manage-l2-uuc-drop: on xcvr-link-debug: disable fastpath-bfd: off linkscan-interval: 150000 linkscan-mode: software single-pass-flood: off |
Set a specific system setting using the command: system-settings-modify optimize-arps
|
CLI (network-admin@udev-leo1*) > system-settings-modify optimize-arps CLI (network-admin@udev-leo1*) > |
View the settings change using the command: system-settings-show (example shown below).
|
CLI (network-admin@udev-leo1*) > system-settings-show optimize-arps: on lldp: on policy-based-routing: off optimize-nd: off reactivate-mac: on reactivate-vxlan-tunnel-mac: on manage-unknown-unicast: off manage-broadcast: off block-loops: on auto-trunk: on auto-host-bundle: off cluster-active-active-routing: on fast-route-download: off fast-interface-lookup: on routing-over-vlags: off source-mac-miss: copy-to-cpu igmp-snoop: use-l3 vle-tracking-timeout: 3 pfc-buffer-limit: 40% cosq-weight-auto: off port-cos-drop-stats-interval(s): disable lossless-mode: off snoop-query-stagger: no-stagger-queries host-refresh: off proxy-conn-retry: on proxy-conn-max-retry: 3 proxy-conn-retry-interval: 500 manage-l2-uuc-drop: on xcvr-link-debug: disable fastpath-bfd: off linkscan-interval: 150000 linkscan-mode: software single-pass-flood: off |
Control Stats Show
Use the following command to display the packet counts sent from the CPU.
|
CLI (network-admin@corvus-ring-1) > control-stats-show switch caller ipkts ibytes idrops idrops-vlan idrops-stp idrops-vxlan idrops-packet-size idrops-from-mirror idrops-err idrops-loop idrops-qfull opkts obytes odrops oqfull odrops-requeue odrops-alloc odrops-stp odrops-vlan odrops-port odrops-switch-cfg odrops-pktsz ------------- ------ ----- ------ ------ ----------- ---------- ------------ ------------------ ------------------ ---------- ----------- ------------ ----- ------ ------ ------ -------------- ------------ ---------- ----------- ----------- ----------------- ------------ corvus-ring-1 Vxlan 13.7M 1.35G 0 0 0 0 0 0 0 0 0 12.6M 1.23G 27.0K 0 0 0 0 0 27.0K 0 0 corvus-ring-1 Total 31.9M 4.32G 8.22K 0 0 0 0 0 0 0 0 18.8M 3.26G 74.9K 0 0 0 0 0 0 0 0 corvus-ring-2 Vxlan 10.2M 1021M 0 0 0 0 0 0 0 0 0 12.2M 1.19G 22.4K 0 0 0 0 0 22.4K 0 0 corvus-ring-2 Total 28.1M 4.47G 52 0 0 0 0 0 0 0 0 16.6M 2.65G 69.9K 0 0 0 0 0 0 0 0 pavo-ring-7 Vxlan 17.9M 1.75G 0 0 0 0 0 0 0 0 0 12.1M 1.19G 30.8K 0 0 0 0 0 30.8K 0 0 pavo-ring-7 Total 43.0M 5.29G 3.21K 0 0 0 0 0 0 0 0 19.2M 4.62G 76.4K 0 0 0 0 0 0 0 0 pavo-ring-8 Vxlan 6.15M 631M 0 0 0 0 0 0 0 0 0 12.1M 1.18G 22.6K 0 0 0 0 0 22.6K 0 0 pavo-ring-8 Total 16.1M 2.61G 50 0 0 0 0 0 0 0 0 18.2M 3.20G 67.5K 0 0 0 0 0 0 0 0 pavo-ring-12 Vxlan 15.7M 1.59G 0 0 0 0 0 0 0 0 0 12.1M 1.19G 22.6K 0 0 0 0 0 22.6K 0 0 pavo-ring-12 Total 38.2M 4.76G 51 0 0 0 0 0 0 0 0 19.0M 4.61G 72.4K 0 0 0 0 0 0 0 0 pavo-ring-9 Total 4.51M 3.07G 53 0 0 0 0 0 0 0 0 872K 418M 44.4K 0 0 0 0 0 0 0 0 pavo-ring-11 Vxlan 8.24M 840M 0 0 0 0 0 0 0 0 0 13.3M 1.30G 27.0K 0 0 0 0 0 27.0K 0 0 pavo-ring-11 Total 20.3M 2.94G 876 0 0 0 0 0 0 0 0 19.6M 3.37G 160K 0 0 0 0 0 0 0 0 pavo-ring-2 Vxlan 17.8M 1.74G 0 0 0 0 0 0 0 0 0 12.3M 1.20G 27.0K 0 0 0 0 0 27.0K 0 0 pavo-ring-2 Total 44.7M 6.49G 50 0 0 0 0 0 0 0 0 19.3M 4.59G 76.9K 0 0 0 0 0 0 0 0 pavo-ring-1 Vxlan 6.17M 632M 0 0 0 0 0 0 0 0 0 12.1M 1.19G 27.0K 0 0 0 0 0 27.0K 0 0 pavo-ring-1 Total 16.5M 2.91G 19.9K 0 0 0 0 0 0 0 0 18.3M 3.22G 74.6K 0 0 0 0 0 0 0 0 pavo-ring-6 Vxlan 15.1M 1.49G 0 0 0 0 0 0 0 0 0 12.1M 1.18G 27.2K 0 0 0 0 0 27.2K 0 0 pavo-ring-6 Total 35.2M 4.81G 12.4K 0 0 0 0 0 0 0 0 20.7M 5.22G 72.9K 0 0 0 0 0 0 0 0 pavo-ring-5 Vxlan 8.99M 898M 0 0 0 0 0 0 0 0 0 12.1M 1.18G 27.0K 0 0 0 0 0 27.0K 0 0 pavo-ring-5 Total 26.0M 4.45G 59 0 0 0 0 0 0 0 0 16.6M 2.60G 72.4K 0 0 0 0 0 0 0 0 delph-ring-1 Vxlan 16.2M 1.60G 0 0 0 0 0 0 0 0 0 12.2M 1.19G 27.8K 0 0 0 0 0 27.8K 0 0 delph-ring-1 Total 37.7M 5.16G 2.41K 0 0 0 0 0 0 0 0 17.2M 2.39G 77.6K 0 0 0 0 0 0 0 0 delph-ring-4 Vxlan 16.3M 1.61G 0 0 0 0 0 0 0 0 0 12.1M 1.19G 22.4K 0 0 0 0 0 22.4K 0 0 switch caller ipkts ibytes idrops idrops-vlan idrops-stp idrops-vxlan idrops-packet-size idrops-from-mirror idrops-err idrops-loop idrops-qfull opkts obytes odrops oqfull odrops-requeue odrops-alloc odrops-stp odrops-vlan odrops-port odrops-switch-cfg odrops-pktsz ------------- ------ ----- ------ ------ ----------- ---------- ------------ ------------------ ------------------ ---------- ----------- ------------ ----- ------ ------ ------ -------------- ------------ ---------- ----------- ----------- ----------------- ------------ delph-ring-4 Total 36.8M 4.57G 829 0 0 0 0 0 0 0 0 20.5M 5.20G 68.4K 0 0 0 0 0 0 0 0 delph-ring-3 Vxlan 7.74M 774M 0 0 0 0 0 0 0 0 0 12.1M 1.18G 22.4K 0 0 0 0 0 22.4K 0 0 delph-ring-3 Total 22.8M 3.87G 11.4K 0 0 0 0 0 0 0 0 16.6M 2.61G 72.0K 0 0 0 0 0 0 0 0 scorp-ring-2 Vxlan 11.6M 1.14G 0 0 0 0 0 0 0 0 0 12.1M 1.19G 27.0K 0 0 0 0 0 27.0K 0 0 scorp-ring-2 Total 32.2M 4.39G 3.62K 0 0 0 0 0 0 0 0 26.8M 6.59G 74.8K 0 0 0 0 0 0 0 0 delph-ring-2 Vxlan 7.77M 777M 0 0 0 0 0 0 0 0 0 12.2M 1.19G 22.4K 0 0 0 0 0 22.4K 0 0 delph-ring-2 Total 23.7M 4.29G 56 0 0 0 0 0 0 0 0 15.5M 1.74G 69.6K 0 0 0 0 0 0 0 0 pavo-ring-3 Total 3.27M 2.22G 51 0 0 0 0 0 0 0 0 762K 401M 42.2K 0 0 0 0 0 0 0 0 hydra-ring-2 Vxlan 8.76M 893M 0 0 0 0 0 0 0 0 0 12.5M 1.22G 22.6K 0 0 0 0 0 22.6K 0 0 hydra-ring-2 Total 27.9M 4.37G 1.21M 0 0 0 0 0 0 0 0 16.1M 1.87G 79.2K 0 0 0 0 0 0 0 0 scorp-ring-1 Vxlan 12.3M 1.20G 0 0 0 0 0 0 0 0 0 12.1M 1.18G 27.0K 0 0 0 0 0 27.0K 0 0 scorp-ring-1 Total 31.9M 4.54G 148 0 0 0 0 0 0 0 0 20.2M 5.49G 79.3K 0 0 0 0 0 0 0 0 vnv-ring-1 Total 165K 11.7M 4 0 0 0 0 0 0 0 0 6.38M 4.09G 2 0 0 0 0 0 0 0 0 pavo-ring-4 Vxlan 24.3M 2.41G 0 0 0 0 0 0 0 0 0 13.8M 1.34G 22.3K 0 0 0 0 0 22.3K 0 0 pavo-ring-4 Total 52.2M 6.05G 506 0 0 0 0 0 0 0 0 20.4M 4.75G 322K 0 0 0 0 0 0 0 0 hydra-ring-1 Vxlan 22.1M 7.43G 0 0 0 0 0 0 0 0 0 12.4M 1.21G 27.2K 0 0 0 0 0 27.2K 0 0 hydra-ring-1 Total 63.1M 27.1G 265K 0 0 0 0 0 0 0 0 24.5M 7.95G 76.3K 0 0 0 0 0 0 0 0 pyxis-ring-2 Vxlan 18.4M 6.99G 0 0 0 0 0 0 0 0 0 12.1M 1.19G 22.2K 0 0 0 0 0 22.2K 0 0 pyxis-ring-2 Total 43.5M 15.2G 75 0 0 0 0 0 0 0 0 15.7M 1.77G 64.3K 0 0 0 0 0 0 0 0 pyxis-ring-3 Vxlan 24.5M 2.42G 0 0 0 0 0 0 0 0 0 11.9M 1.16G 26.5K 0 0 4.74K 0 0 21.7K 0 0 pyxis-ring-3 Total 51.8M 5.51G 49 0 0 0 0 0 0 0 0 14.2M 1.68G 102K 0 0 0 0 0 0 0 0 pyxis-ring-1 Vxlan 11.3M 1.15G 0 0 0 0 0 0 0 0 0 29.7M 3.08G 27.8K 0 0 5.57K 0 0 22.2K 0 0 pyxis-ring-1 Total 48.9M 19.9G 79.2K 0 0 0 0 0 0 0 0 41.8M 9.79G 80.6K 0 0 0 0 0 0 0 0 CLI (network-admin@corvus-ring-1) > |