Chapter 45 VM Tracer - Arista · VM Tracer is enabled. The ESX host updates the vCenter when it...

3013

Chapter 45

VM TracerThis chapter describes VM Tracer configuration and usage and contains these sections:

• Section 45.1: VM Tracer Introduction

• Section 45.2: VM Tracer Description

• Section 45.3: VM Tracer Configuration Procedures

• Section 45.4: VM Tracer Configuration Commands

45.1 VM Tracer IntroductionVM Tracer is a switch feature that determines the network configuration and requirements of connectedVMware hypervisors. The switch uses VMware's SOAP XML API to discover VMware host servercomponents, including:

• instantiated VMs with their network configuration (VLANs and distributed/virtual Switches).

• server hardware IPMI data which can be shown to the network manager.

VM Tracer also supports adaptive auto-segmentation, which automatically provisions and prunesVLANs from server-switched ports as VMs are instantiated and moved within the data center.

3014

VM Tracer Description Chapter 45: VM Tracer

45.2 VM Tracer DescriptionCloud operating systems manage large virtualized computing infrastructures, including software andhardware. Cloud operating systems consist of virtual machines and hypervisors:

• A virtual machine (VM) is a software implementation of a computer that operates as running ondedicated physical hardware. Multiple VMs share physical machine resources from a singlephysical device. Each VM is controlled by its operating system.

• A hypervisor, also called a virtual Machine Manager (VMM), is software that manages multipleoperating systems running concurrently on a physical device.

VM Tracer tracks activity of VMs that are controlled by hypervisors connected to the switch’s Ethernetor LAG ports. VM Tracer supports vSphere versions 6.0– 6.5. vSphere features include distributedvirtual switches (DVS) and VM movement among VMware servers (VMotion).

vSphere components include:

• ESX and ESXi: hypervisors that run on VMware host server hardware.

• vCenter: centralized tool that manages multiple servers running VMware hypervisors.

• NSX for vSphere® (NSX-V): network virtualization platform delivering networking and security.

Monitoring VLAN based configurations requires vCenter access. Monitoring VXLAN basedconfigurations requires access to vCenter and NSX-V. The following sections describe topologies thatmonitor these networks:

• Section 45.2.1: Monitoring VLAN Based Configurations

• Section 45.2.2: Monitoring VXLAN Based Configurations

45.2.1 Monitoring VLAN Based Configurations

vCenter manages ESX hosts and VMs through a central database. VM Tracer identifies interfacesconnected to a specified ESX host and sends discovery packets (CDP or LLDP) on interfaces whereVM Tracer is enabled. The ESX host updates the vCenter when it receives a discovery packet. VMTracer reads this data from the vCenter through a SOAP XML API to associate the ESX host to theconnected switch ports. Figure 45-1 displays the network topology of this configuration.

Figure 45-1: VM Tracer Topology – Monitoring VLAN Based Configurations

vCenter

ESXi Serverv5.1

ESXi Serverv5.1

CDPor

LLDP

CDPor

LLDP

SOAPAPI

SOAPAPI

Chapter 45: VM Tracer VM Tracer Description

3015

VM Tracer connects to a maximum of four vCenters through a SOAP (Simple Object Access Protocol)API to discover VMs in the data centers that the vCenters manage. VM Tracer maintains a list of VMsin the data center and gathers network related information about each VM, including the number ofVnics (virtual network interface card), the MAC address of each Vnic, the switch to which it connects,and the host on which it resides. VM Tracer also identifies the host NICs connected to the switchthrough the bridge MAC address and the interface port name. VM Tracer then searches for VMs on thishost and connected to the vswitch or dvswitch whose uplink is mapped to the connected NIC.

For each connected interface, VM Tracer creates a VM Table that lists its active VMs, sorted by VnicMAC address. Each VM entry includes its name, Vnic name, VLAN, switch name, datacenter name,and portgroup. An entry is deleted when the corresponding VM is removed, moved to a different host,or its Vnic is no longer part of the vswitch or dvswitch. An entry is added when a VM is created or movedto a host connected to the interface. VM Tracer monitors vCenter for VM management updates. If aninterface goes down, all VM entries for that interface are removed from the VM Table.

45.2.2 Monitoring VXLAN Based Configurations

Monitoring VXLAN based configurations require access to the NSX for vSphere® (NSX-V), in additionto the configuration described in Section 45.2.1. Each VM Tracer session can communicate with oneNSX-V through a REST interface over XML and gathers VXLAN information by polling it on a 30 secondpolling cycle. VXLAN data that the switch receives from the NSX-V includes:

• VNI range.

• VXLAN segment.

• Multicast address range.

• network scope.

The network scope specifies the virtual address space the VXLAN segments span and is definedby the server group (cluster) collections within the segments, which in turn contain a collection ofdistributed virtual switches (DVS) from ESX hosts within the clusters.

VM Tracer uses this information to build a network model. Communications with NSX-V requires asingle polling thread that detects network connectivity and constantly updates the local data model.

Figure 45-2 displays the network topology of this configuration.

Figure 45-2: VM Tracer Topology – Monitoring VXLAN Based Configurations

vCenter

ESXi Serverv5.1

ESXi Serverv5.1

CDPor

LLDP

CDPor

LLDP

SOAPAPI

SOAPAPI

RESTAPI

RESTAPI

vShieldManager

3016

VM Tracer Configuration Procedures Chapter 45: VM Tracer

45.3 VM Tracer Configuration ProceduresThe following sections describe the session configuration process, configuring the NSX-V connectionfor VXLAN based configurations, and the procedure for enabling VM Tracer on individual interfaces.The switch defines vmtracer configuration mode and VMtracer mode:

• vmtracer configuration mode is a command mode for configuring VM Tracer monitoring sessions.

• VMtracer mode is defines an interface state where discovery packets are sent to attachedvSwitches.

45.3.1 Configuring vCenter Monitoring Sessions

A VM Tracer session connects the switch to a vCenter server for downloading data about VMs andvSwitches managed by ESX hosts connected to the switch’s ports. The switch supports four VM Tracersessions.

The switch is placed in vmtracer configuration mode to edit session parameters, including the vCenterlocation and dynamic VLAN usage. Changes take effect by exiting vmtracer mode.

The vmtracer session command places the switch in vmtracer configuration mode for a specifiedsession. The command either creates a new session or loads an existing session for editing.

• This command enters vmtracer configuration mode for the system_1 session.

switch(config)#vmtracer session system_1switch(vmtracer-system_1)#

In vmtracer configuration mode, the url (vmtracer mode), username (vmtracer mode), and password(vmtracer mode) commands specify the location and the account information that authenticates theswitch. The url parameter must reference a fully formed secure URL.

• These commands specify the IANA url along with the username and password that allow the switchto access the location.

switch(vmtracer-system_1)#url https://example.com/sdkswitch(vmtracer-system_1)#username a-switch_01switch(vmtracer-system_1)#password abcdeswitch(vmtracer-system_1)#

Default session settings allow auto-segmentation, or the dynamic allocation and pruning of VLANswhen a VM managed by the ESX host connected to the switch is created, deleted, or moved to adifferent host. The autovlan disable command prevents auto-segmentation, regardless of VM activity.The allowed-vlan command specifies the VLANs that may be added when a VM is added or moved.By default, all VLANs are allowed.

• This command disables auto-segmentation.

switch(vmtracer-system_1)#autovlan disableswitch(vmtracer-system_1)#

• These commands enable auto-segmentation and limit the list of allowed VLANs to VLAN 1-2000.

switch(vmtracer-system_1)#no autovlan disableswitch(vmtracer-system_1)#allow-vlan 1-2000switch(vmtracer-system_1)#

The exit command returns the switch to Global configuration mode and enables the VM Tracer session.Vmtracer configuration mode can be re-entered for this session to edit session parameters.

• This command exits vmtracer configuration mode.

switch(vmtracer-system_1)#exitswitch(config)#

Chapter 45: VM Tracer VM Tracer Configuration Procedures

3017

The no vmtracer session command disables the session and removes it from running-config.

• This command disables and deletes the system_1 VM Tracer session.

switch(config)#no vmtracer session system_1switch(config)#

45.3.2 Configuring vShield Monitoring Sessions

To monitor VXLAN based VMware configurations, the switch must communicate with a NSX forvSphere® (NSX-V). Vmtracer-vxlan configuration mode specifies the location and user account datathat allows the switch to access a NSX-V within the configuration mode vmtracer session.

The switch is placed in vmtracer configuration mode to edit session parameters, including the vCenterlocation and dynamic VLAN usage. Changes take effect by exiting vmtracer mode.

The vxlan (vmtracer mode) command is executed from vmtracer mode for a specified session andplaces the switch in vmtracer-vxlan configuration mode for that session. Each VM Tracer session canbe associated with one vShield instance.

• These commands create the vShield instance for the VMTracer session named vnet-1.

switch(config)#vmtracer session vnet-1switch(config-vmtracer-vnet-1)#vxlanswitch(config-vmtracer-vnet-1-vxlan)#

In vmtracer-vxlan configuration mode, the url (vmtracer-vxlan mode), username (vmtracer-vxlanmode), and password (vmtracer-vxlan mode) commands specify the vShield server’s location and theaccount information that authenticates the switch to the vShield server. The url parameter mustreference a fully formed secure url, such as https://vcshield.democorp.com/sdk.

• These commands specify the vShield’s URLalong with the username and password that allow theswitch to access the vShield server.

switch(config-vmtracer-vnet-1-vxlan)#url https://vshieldserver.company1.org/sdkswitch(config-vmtracer-vnet-1-vxlan)#username a-shield_01switch(config-vmtracer-vnet-1-vxlan)#password homeswitch(config-vmtracer-vnet-1-vxlan)#

45.3.3 Enabling vmtracer Mode

VMtracer mode is an interface setting that enables interfaces to send discovery packets to theconnected vSwitch. The vmtracer command enables VMtracer mode on the configuration modeinterface.

• These commands enable VMtracer mode on the Ethernet 3 interface.

switch(config)#interface Ethernet3switch(config-if-Et3)#vmtracer vmware-esxswitch(config-if-Et3)#

The no vmtracer command disables vmtracer mode on the configuration mode interface.

• This command disables vmtracer mode on the Ethernet 3 interface.

switch(config-if-Et3)#no vmtracer vmware-esxswitch(config-if-Et3)#

45.3.4 Displaying VM Tracer Data

45.3.4.1 Displaying Session Status

The show vmtracer session command displays information about the specified session.

3018

VM Tracer Configuration Procedures Chapter 45: VM Tracer

Without the detail parameter, the command displays connection parameters and status for the vCenterassociated to the specified session.

• This command displays connection parameters for the vCenter associated with the system_1session.

switch#show vmtracer session system_1 vCenter URL https://vmware-vcenter1/sdk username arista password arista Session Status Disconnected

With the detail parameter, the command displays connection status and data concerning messagesthe vCenter previously received from ESX hosts connected to the switch.

• This command displays connection parameters and message details for the vCenter associatedwith the system_1 session.

switch#show vmtracer session system_1 detail vCenter URL https://vmware-vcenter1/sdk username arista sessionState Connected lastStateChange 19 days, 23:03:59 ago lastMsgSent CheckForUpdatesMsg timeOfLastMsg 19 days, 23:14:09 ago resonseTimeForLastMsg 0.0 numSuccessfulMsg 43183 lastSuccessfulMsg CheckForUpdatesMsg lastSuccessfulMsgTime 19 days, 23:14:19 ago numFailedMsg 1076 lastFailedMsg CheckForUpdatesMsg lastFailedMsgTime 19 days, 23:14:09 ago lastErrorCode Error -1 fault: SOAP-ENV:Client [no subcode] "End of file or no input: Operation interrupted or timed out after 600s send or 600s receive delay" Detail: [no detail] CheckForUpdates:

45.3.4.2 Displaying VM Interfaces

The show vmtracer interface command displays the VM interfaces (Vnics) that are active on switchinterfaces where vmtracer mode is enabled. For each Vnic, the command displays the name of theattached VM, the adapter name, its VLAN, the VM power state, and the presence status of its MACaddress in the switch's MAC table.

Chapter 45: VM Tracer VM Tracer Configuration Procedures

3019

• This command displays the Vnics connected to all VM Tracer-enabled interfaces.

switch#show vmtracer interface

Ethernet8 : example.com VM Name VM Adapter VLAN Status esx3.aristanetworks.com vmk0 0 Up/Down vspheremanagement Network adapter 1 0 Up/Down

Ethernet15 : example.om VM Name VM Adapter VLAN Status Openview Network adapter 1 123 Up/Down VmTracerVm Network adapter 1 123 Down/Down

Ethernet23 : example.com VM Name VM Adapter VLAN Status

Ethernet24 : example.com VM Name VM Adapter VLAN Status

45.3.4.3 Displaying VMs

The show vmtracer vm command displays VM interfaces (Vnics) accessible to the VM Tracer-enabledinterfaces. For each active listed VM, the command displays its name, adapter, and the connectedhypervisor.

• This command displays the VMs connected to all VM Tracer-enabled interfaces.

switch#show vmtracer vm VM Name VM Adapter Interface VLAN Openview Network adapter 1 Et15 123 vspheremanagement Network adapter 1 Et8 0 VmTracerVm Network adapter 1 Et15 123 example.com vmk0 Et8 0

• This command displays connection data for the VMs connected to all VM Tracer-enabledinterfaces.

switch#show vmtracer vm detailVM Name Openview intf : Et15 vnic : Network adapter 1 mac : 00:0c:29:ae:7e:90 portgroup : dvPortGroup vlan : 123 switch : vds host : example.com

3020

VM Tracer Configuration Commands Chapter 45: VM Tracer

45.4 VM Tracer Configuration CommandsGlobal Configuration Commands• vmtracer session

Interface Configuration (Ethernet and Port Channel) Commands• vmtracer

VMTracer Configuration Commands• allowed-vlan• autovlan disable• password (vmtracer mode)• source-interface• url (vmtracer mode)• username (vmtracer mode)• vrf (vmtracer mode)• vxlan (vmtracer mode)

VMTracer-VXLAN Configuration Commands• password (vmtracer-vxlan mode)• url (vmtracer-vxlan mode)• username (vmtracer-vxlan mode)

VM Tracer Display Commands• show vmtracer all• show vmtracer interface• show vmtracer session• show vmtracer session vcenter• show vmtracer session vsm• show vmtracer vm• show vmtracer vm detail• show vmtracer vnic counters• show vmtracer vxlan segment• show vmtracer vxlan vm

Chapter 45: VM Tracer VM Tracer Configuration Commands

3021

allowed-vlan

The allowed-vlan command specifies the VLANs that may be added when a VM is added or movedfrom the hypervisor connected to the session specified by the vmtracer mode. By default, all VLANsare allowed.

Command ModeVmtracer Configuration

Command Syntaxallowed-vlan VLAN_LISTno allowed-vlan vlandefault allowed-vlan vlan

Parameters• VLAN_LIST The VLAN list or the edit actions to the current VLAN list. Valid v_range formats

include number, or number range.

• v_range The list consists of the v_range VLANs.

• add v_range The v_range VLANs are added to the current VLAN list.

• all The list consists of all VLANs (1-4094).

• except v_range The list consists of all VLANs except for those specified by v_range.

• none The list of VLANs is empty.

• remove v_range The v_range VLANs are removed from the current VLAN list.

Related Commands• vmtracer session places the switch in vmtracer configuration mode.

Examples• This command sets the list of allowed VLANs to 1 through 2000.

switch(vmtracer-system_1)#allow-vlan 1-2000switch(vmtracer-system_1)#

• This command adds VLANs to 2501 through 3000.

switch(vmtracer-system_1)#allow-vlan add 2051-3000switch(vmtracer-system_1)#

3022


autovlan disable

Default VM Tracer session settings enable auto provisioning, which allows the dynamic assignmentand pruning of VLANs when a VM attached to the ESX connected to the switch is created, deleted, ormoved to a different ESX host. The autovlan setting controls auto provisioning.

The autovlan disable command disables auto provisioning, which prevents the creation or deletion ofVLANs regardless of VM activity. The allowed-vlan command specifies the VLANs that may be addedwhen a VM is added or moved. By default, all VLANs are allowed.

The no autovlan disable command enables the creation and deletion of VLANs caused by VM activity.This is the default setting.


Command Syntaxautovlan disableno autovlan disabledefault autovlan disable


Example• This command disables dynamic VLAN creation or pruning within the configuration mode VM

Tracer session.

switch(vmtracer-system_1)#autovlan disableswitch(vmtracer-system_1)#


3023

password (vmtracer mode)

The password command specifies the token that authorizes the username to the vCenter associatedwith the VM Tracer mode session.


Command Syntaxpassword [ENCRYPTION] [password]

Parameters• ENCRYPTION encryption level of the password.

• <no parameter> password is a clear-text string.

• 0 the password is a clear-text string. Equivalent to <no parameter>.

• 7 the password is an encrypted string.

• password text that authenticates the username.

• password is a clear-text string if ENCRYPTION specifies clear text.

• password is an encrypted string if ENCRYPTION specifies an encrypted string.


Example• This command configures abode as the clear-text string that authorizes the username

a-switch_01 located at example.com/sdk.

switch(vmtracer-system_1)#url https://example.com/sdkswitch(vmtracer-system_1)#username a-switch_01switch(vmtracer-system_1)#password abcdeswitch(vmtracer-system_1)#

3024


password (vmtracer-vxlan mode)

The password command specifies the token that authorizes the username on the NSX for vSphere®(NSX-V) server located at the URL configured for the configuration mode VM Tracer. The switch usesthis account to access NSX-V information.

The password statement is replaced in running-config for the configuration mode interface by asubsequent password command. The statement is removed by deleting the NSX-V instance througha no vxlan (vmtracer mode) command in vmtracer configuration mode.

Command ModeVmtracer-vxlan Configuration

Command Syntaxpassword [ENCRYPTION] password

Parameters• ENCRYPTION encryption level of the password.

• <no parameter> password is a clear-text string.

• 0 the password is a clear-text string. Equivalent to <no parameter>.

• 7 the password is an encrypted string.

• password text that autorizes the username.

• password is a clear-text string if ENCRYPTION specifies clear text.

• password is an encrypted string if ENCRYPTION specifies an encrypted string.

Related Commands• vxlan (vmtracer mode) places the switch in vmtracer-vxlan configuration mode.

Example• This command configures 5678 as the clear-text string that authorizes the username admin to the

NSX-V located at https://example.com/sdk.

switch(config)#vmtracer session vnet-1switch(config-vmtracer-vnet-1)#vxlanswitch(config-vmtracer-vnet-1-vxlan)#url https://example.com/sdkswitch(config-vmtracer-vnet-1-vxlan)#username adminswitch(config-vmtracer-vnet-1-vxlan)#password 5678switch(config-vmtracer-vnet-1-vxlan)#exitswitch(config-vmtracer-vnet-1)#show activevmtracer session vnet-1 allowed-vlan 1-4094 vxlan url https://example.com/sdk username admin password 7 s2Xq4GSBlYU=switch(config-vmtracer-vnet-1)#


3025

show vmtracer all

The show vmtracer all command displays VM Tracer data for all switches with the vSphere scope.

Command ModeEXEC

Command Syntaxshow vmtracer all

Example• This command displays data for both switches in the vSphere scope.

switch>show vmtracer all

Switch : a109(10.10.30.109)Ethernet49 : 10.102.28.3/10G VM Name VM Adapter VLAN Status State ABCD Network adapter 2 native Up/-- --

Switch : a164(10.10.30.(172.22.30.164)Ethernet49 : 10.102.28.3/10G Storage Network/dvUplink1 VM Name VM Adapter VLAN Status State WXYZ Network adapter 2 native Up/-- --switch>

3026


show vmtracer interface

The show vmtracer interface command displays the VM interfaces (Vnics) that are active on the VMTracer enabled interface. For each Vnic, the command displays the name of the attached VM, theadapter name, its VLAN, the VM power state, and the presence status of its MAC address in theswitch's MAC table.

Command ModeEXEC

Command Syntaxshow vmtracer interface [INT_NAME][INFO_LEVEL]

Parameters• INT_NAME the interfaces to be configured. Values include:

• <no parameter> command returns information for all interfaces.

• ethernet e_range Ethernet interface range.

• port-channel p_range Port Channel interface range.

Valid e_range and p_range formats include number, number range, or comma-delimited list ofnumbers and ranges.

• INFO_LEVEL specifies information that the command returns.

• <no parameter> connection parameters and status for VM associated to specified sessions.

• detail connection status and data concerning messages the VM.

• host name of the connected host.

Examples• This command displays the Vnics connected to all VM Tracer enabled interfaces.

switch>show vmtracer interface

Ethernet8 : example.com VM Name VM Adapter VLAN Status esx3.aristanetworks.com vmk0 0 Up/Down vspheremanagement Network adapter 1 0 Up/Down

Ethernet15 : example.com VM Name VM Adapter VLAN Status Openview Network adapter 1 123 Up/Down VmTracerVm Network adapter 1 123 Down/Down

Ethernet23 : example.com VM Name VM Adapter VLAN Statusswitch>

• This command displays the Vnics connected to the Ethernet 8 interface.

switch>show vmtracer interface Ethernet8

Ethernet8 : example.com VM Name VM Adapter VLAN Status example.com vmk0 0 Up/Down vspheremanagement Network adapter 1 0 Up/Downswitch>


3027

show vmtracer session

The show vmtracer session command displays vCenter and vShield connection information for aspecified VM Tracer session.

Command ModeEXEC

Command Syntaxshow vmtracer session [SESSION_LIST]

Parameters• SESSION_LIST VM Tracer sessions for which the command returns information.

• <no parameter> all configured VM Tracer sessions.

• session_name name of one VM Tracer session.

Examples• This command displays connection parameters associated to the abcde session.

switch>show vmtracer session abcde

Session abcdevCenter URL https://example.com/sdk username Administrator autovlan enabled allowed-vlans 1-4094 sessionState Connected VShield URL https:/vmware-vshield5.1.xyz.abcde.com username admin sessionState Connected

switch>

3028


show vmtracer session vcenter

The show vmtracer session vcenter command displays vCenter information for a specified VMTracer session.

Command ModeEXEC

Command Syntaxshow vmtracer session session_name vcenter [INFO_LEVEL]

Parameters• session_name VM Tracer sessions for which the command returns information.


• <no parameter> displays connection and status information for the specified vCenter.

• detail displays connection, status, and history information for the specified vCenter.

Examples• This command displays connection parameters for the vCenter associated to the abcde session.

switch>show vmtracer session abcde vcenter

Session abcdevCenter URL https://vmware-vcenter5.1/sdkusername Administratorautovlan enabledallowed-vlans 1-4094sessionState Connectedswitch>

• This command displays connection parameters and history details from the vCenter associated tothe abcde session.

switch>show vmtracer session abcde vcenter detail

Session abcdevCenter URL https://vmware-vcenter5.1/sdkusername Administratorautovlan enabledallowed-vlans 1-4094SessionState ConnectedlastStateChange 2:46:50 agolastMsgSent Query network hint messagetimeOfLastMsg 0:00:20 agoresponseTimeForLastMsg 0.000102301000479numSuccessfulMsg 998lastSuccessfulMsg Query network hint messagelastSuccessfulMsgTime 0:00:20 agonumFailedMsg 0 lastFailedMsg -- lastFailedMsgTime neverlastErrorCode --switch>


3029

show vmtracer session vsm

The show vmtracer session vsm command displays NSX-V information for a specified VM Tracersession.

Command ModeEXEC

Command Syntaxshow vmtracer session session_name vsm [INFO_LEVEL]

Parameters• session_name VM Tracer sessions for which the command returns information.


• <no parameter> connection and status information for the specified NSX-V.

• detail connection, status, and history information for the specified NSX-V.

Examples• This command displays connection parameters for the NSX-V associated to the abcde session.

switch>show vmtracer session abcde vsm

Session abcdeVShield URL https://example.com/sdkusername adminsessionState Connectedswitch>

• This command displays connection parameters and history details from the vShield Managerassociated to the abcde session.

switch>show vmtracer session abcde vsm detail

Session abcdeVShield URL https://vmware-vshield5.1/username adminSessionState ConnectedLaststateChange 19 days, 23:14:19 agoLastMsgSent /api/2.0/vdn/scopestimeOfLastMsg 1 days, 13:22:09 agoresponseTimeForLastMsg 0.3 secnumSuccessfulMsg 3649lastSuccessfulMsg /api/2.0/vdn/scopeslastSuccessfulMsgTime 0:00:00 agonumFailedMsg 1lastFailedMsg /api/2.0/vdn/config/segmentslastFailedMsgTime 10 days, 1:15:29 agolastErrorCode CURLE_COULDNT_RESOLVE_HOST - Couldn't resolve host The given remote host was not resolved.switch>

3030


show vmtracer vm

The show vmtracer vm command displays VMs interfaces (Vnics) that are accessible to VM Tracerenabled interfaces. For each active VM, the command displays the name of the VM, its adapter, andthe hypervisor to which it connects.

Command ModeEXEC

Command Syntaxshow vmtracer [INT_NAME] vm [VM_LIST]

Parameters• INT_NAME the interfaces name Values include:

• <no parameter> command returns information for all interfaces.

• interface ethernet e_range Ethernet interface range.

• interface port-channel p_range Port Channel interface range.

Valid e_range and p_range formats include a number, number range, or comma-delimited listof numbers and ranges.

• VM_LIST The virtual machines for which the command displays information. Options include:

• <no parameter> command returns information for all present VMs.

• vm_name command returns information only for specified VM.

Related Commands• show vmtracer vm detail displays connection information for one or more specified VMs.

Examples• This command displays the VMs connected to all VM Tracer enabled interfaces.

switch>show vmtracer vmVM Name Esx Host Interface VLAN Status

vCenter1 172.22.28.8 Po45 native Down/DownvCenter2 172.22.28.8 Po45 native Up/UpvCenter3 172.22.28.8 Po45 11 Down/DownvCenter4 172.22.28.8 Po45 native Down/DownVMKernel Po43 native Up/Updemo vcenter 5 clone Po43 native Up/Upswitch>


3031

show vmtracer vm detail

The show vmtracer vm detail command displays connection data for VMs interfaces (Vnics) that areaccessible to VM Tracer enabled interfaces.

Command ModeEXEC

Command Syntaxshow vmtracer vm [VM_LIST] detail

Parameters• VM_LIST The virtual machines for which the command displays information. Options include:

• <no parameter> command returns information for all present VMs.

• vm_name command returns information only for specified VM.

Examples• This command displays connection data for the VMs connected to all VM Tracer enabled

interfaces.

switch#show vmtracer vm vmcenter1VM Name vCenter1 Server App Interface : Po45 vNIC : Network adapter 1 MAC : 00:31:22:8e:b8:41 Portgroup : VM Network VLAN : native Switch : Switch2 Status : Down/Down Host : 10.22.18.28 Data Center : vcenter-5switch>

• This command displays connection data for the VMs connected to all VM Tracer enabledinterfaces.

switch>show vmtracer vm detailVM Name vCenter1 Server App Interface : Po45 vNIC : Network adapter 1 MAC : 00:31:22:8e:b8:41 Portgroup : VM Network VLAN : native Switch : Switch2 Status : Down/Down Host : 10.22.18.28 Data Center : vcenter-5

VM Name vCenter2 Server App Interface : Po45 vNIC : vmk0 MAC : 00:33:23:3c:e1:4e Portgroup : Management Network VLAN : native

switch>

3032


show vmtracer vnic counters

The show vmtracer interface vnic counters command displays input and output packet counts forVM interfaces (Vnics) that are active on the specified interface or VM.

Command ModeEXEC

Command Syntaxshow vmtracer [ENTITY] vnic counters

Parameters• ENTITY the virtual machine or interface over which statistics are gathered and displayed.

• <no parameter> command returns information for all active VMs.

• interface ethernet e_range Ethernet interface range.

• interface port-channel p_range Port Channel interface range.

• vm vm_name command returns information for specified VM.

Valid e_range and p_range formats include a number, number range, or comma-delimited listof numbers and ranges.

Examples• This command displays the Vnics connected to Ethernet interface 24.

switch>show vmtracer interface ethernet 24 vnic countersPhysical Intf: Ethernet24Host: 10.17.28.8/site1/dvUplink1VM Name vNic Input Pkt/Byte/% Output Pkt/Byte/%vCenter1 Network adapter 2 2550/ 187175/ 0.6 6/ 360/ 0.0vCenter2 Network adapter 2 418615/ 30678024/ 99.4 1904439/ 1145654613/100.0Summary 421165/ 30865199/100.0 1904445/ 1145654973/100.0switch>


3033

show vmtracer vxlan segment

The show vmtracer vxlan segment command displays information about the VXLAN segments thatare managed by the connected NSX for vSphere® (NSX-V).

Command ModeEXEC

Command Syntaxshow vmtracer segment ENTITY

Parameters• ENTITY specifies the information that the command displays. Options include:

• <no parameter> displays information for VXLAN segments.

• pool displays resource pools available to segments.

• pool pool_name displays connection information about the specified pool.

• range displays the VNI range of the managed segments.

Examples• This command displays the VXLAN segments managed by the NSX-V.

switch>show vmtracer vxlan segment

Name VNI Multicast IP Network Scope ----------------------------------------------------------------- Eng Wire 5002 237.0.0.1 abcdeHR Wire 5000 237.0.0.2 abcde

switch>

• This command displays the resource pools available to the VXLANs.

switch>show vmtracer vxlan segment pool

Name Description Segments --------------------------------------------------------------------------------- abcde Spans Cluster 1 and Cluster 2 Eng Wire, HR Wire

switch>

• This command displays connection and packet information for the abcde pool.

switch>show vmtracer vxlan segment pool abcde

Name: abcdeDescription: Spans Cluster 1 and Cluster 2 Segments: Eng Wire, HR Wire

Vxlan Segment Cluster Host VTEP IP DVS VLAN MTUEng Wire Cluster2 test2.example.com 10.168.200.1/24 dvs-test2 200 1600Eng Wire Cluster1 test2.example.com 10.168.100.1/24 dvs-test1 100 1600HR Wire Cluster1 test2.example.com 10.168.100.1/24 dvs-test1 100 1600HR Wire Cluster2 test2.example.com 10.168.200.1/24 dvs-test2 200 1600switch>

3034


• This command displays the VNI range of the VXLAN segments.

switch>show vmtracer vxlan segment range

VNI Range Multicast IP Range---------------------------------------------------5000 - 5024 237.0.0.1 - 237.0.0.117

Name VNI Multicast IP Network Scope----------------------------------------------------------------- HR Wire 5002 237.0.0.1 abcde

Eng Wire 5000 237.0.0.2 abcdeswitch>


3035

show vmtracer vxlan vm

The show vmtracer interface vnic counters command displays the VXLAN segments, their VTEP IPnumbers, and their VM endpoints that are managed by the connected NSX for vSphere® (NSX-V).

Command ModeEXEC

Command Syntaxshow vmtracer vxlan vm

Examples• This command displays the VM endpoints of the VXLAN segments managed by the NSX-V.

switch>show vmtracer vxlan vm

Vxlan Segment VTEP IP VLAN VMsEng Wire 192.168.200.1/24 200 Eng VM3, Eng VM2Eng Wire 192.168.100.1/24 100 Eng VM1HR Wire 192.168.100.1/24 100 HR VM2, HR VM1HR Wire 192.168.200.1/24 200 --switch>

3036


source-interface

The source-interface command allows you to connect to a remote vCenter endpoint by using theprimary address of the interface as the source IP address. If the interface is not specified, the sourceIP address is determined by the routing table.

The no source-interface and default source-interface commands restore default behavior byremoving the source-interface command from the running-config.


Command Syntaxsource-interface [INTERFACE_NAME]no source-interfacedefault source-interface

Parameters• INTERFACE_NAME specifies the interface for which the information is displayed. Options

include:

• Ethernet e_num specifies the Ethernet interface number.

• Loopback l_num specifies the loopback interface number. Value ranges from 0 to 2100.

• Management m_num specifies the management interface number. The values are 1 or 2.

• Port-Channel {lag_num | lag_num.sub_num} specifies the port-channel interface number.Value of interface ranges from 1 to 2000. Value of sub-interface ranges from 1 to 4094.

• Tunnel tunnel_num specifies the tunnel interface number. Value ranges from 1 to 255.

• UnconnectedEthernet port_num specifies the unconnected Ethernet port number. Valueranges from 1 to 8.

• VLAN vlan_num specifies the VLAN interface number. Value ranges from 1 to 4094.

Related Commands• vmtracer session places the switch in Vmtracer configuration mode.

Examples• This command configures VM Tracer to use Ethernet interface 17 to derive the source address for

session packets.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#source-interface Ethernet 17switch(config-vmtracer-session-system_1)#

• This command configures a loopback interface 0 for VM Tracer session.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#source-interface Loopback 0switch(config-vmtracer-session-system_1)#

• This command configures management interface 1 for VM Tracer session.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#source-interface management 1switch(config-vmtracer-session-system_1)#


3037

• This command configures port-channel interface 10 for VM Tracer session.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#source-interface port-channel 10switch(config-vmtracer-session-system_1)#

• This command configures tunnel interface 25 for VM Tracer session.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#source-interface tunnel 25switch(config-vmtracer-session-system_1)#

• This command configures unconnected Ethernet interface 1 for VM Tracer session.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#source-interface unconnected Ethernet 1switch(config-vmtracer-session-system_1)#

• This command configures VLAN interface 25 for VM Tracer session.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#source-interface vlan 25switch(config-vmtracer-session-system_1)#

3038


url (vmtracer mode)

The url command specifies the vCenter server location that is monitored by the session being editedby the current vmtracer mode. The command must reference a fully formed secure url.


Command Syntaxurl url_name

Parameters• url_name location of the vCenter server. Valid formats include IP address (dotted decimal

notation) and fully qualified domain name.


Example• This command specifies the location of the vCenter monitored by the system_1 VM Tracer session.

switch(vmtracer-system_1)#url https://example.com/sdkswitch(vmtracer-system_1)#


3039

url (vmtracer-vxlan mode)

The url command specifies the NSX for vSphere® (NSX-V) server location that is monitored for VXLANinformation by the configuration mode VM Tracer session. The command must reference a fully formedsecure URL.

The url statement is replaced in running-config for the configuration mode session by a subsequenturl command. The statement is removed by deleting the NSX-V instance through a no vxlan(vmtracer mode) command in vmtracer configuration mode.


Command Syntaxurl url_name

Parameters• url_name location of the NSX-V server. Valid formats include IP address (dotted decimal

notation) and fully qualified domain name.


Example• This command configures the location of the NSX-V monitored by the vnet-1 VM Tracer session.

switch(config)#vmtracer session vnet-1switch(config-vmtracer-vnet-1)#vxlanswitch(config-vmtracer-vnet-1-vxlan)#url https://example.com/sdkswitch(config-vmtracer-vnet-1-vxlan)#exitswitch(config-vmtracer-vnet-1)#show activevmtracer session vnet-1 allowed-vlan 1-4094 vxlan url https://example.com/sdkswitch(config-vmtracer-vnet-1)#

3040


username (vmtracer mode)

The username command identifies the switch’s account name on the vCenter server. The switch usesthis user name to access vCenter information.


Command Syntaxusername name_string

Parameters• name_string vCenter account user name. Parameter must match the user name configured on

the vCenter.


Example• This command configures the user name for the vCenter associated with the system_1 session.

The session uses this user name to log into the vCenter server.

switch(vmtracer-system_1)#username a-switch_01switch(vmtracer-system_1)#


3041

username (vmtracer-vxlan mode)

The username command identifies the switch’s account name on the NSX for vSphere® (NSX-V)server located at the URL configured for the configuration mode VM Tracer. The switch uses this username to access NSX-V information.

The username statement is replaced in running-config for the configuration mode interface by asubsequent username command. The statement is removed by deleting the NSX-V instance througha no vxlan (vmtracer mode) command in vmtracer configuration mode.


Command Syntaxusername name_string

Parameters• name_string NSX-V account user name. Parameter must match a user name configured on the

NSX-V.


Example• This command configures the user name of admin for the NSX-V located at the URL specified by

the URL command.

switch(config)#vmtracer session vnet-1switch(config-vmtracer-vnet-1)#vxlanswitch(config-vmtracer-vnet-1-vxlan)#url https://example.com/sdkswitch(config-vmtracer-vnet-1-vxlan)#username adminswitch(config-vmtracer-vnet-1-vxlan)#exitswitch(config-vmtracer-vnet-1)#show activevmtracer session vnet-1 allowed-vlan 1-4094 vxlan url https://example.com/sdk username adminswitch(config-vmtracer-vnet-1)#

3042


vmtracer

The vmtracer command enables vmtracer mode on the configuration mode interface. Interfaces withvmtracer mode enabled send discovery packets to the connected vSwitch.

The no vmtracer and default vmtracer commands disable vmtracer mode on the configuration modeinterface by removing the corresponding vmtracer command from running-config.

Command ModeInterface-Ethernet ConfigurationInterface-Port-channel Configuration

Command Syntaxvmtracer HOST_TYPEno vmtracer HOST_TYPEdefault vmtracer HOST_TYPE

Parameters• HOST_TYPE the type of hypervisor that controls the vSwitch to which the interface connects.

• vmware-esx ESX or ESXI hypervisor (VMware).

Examples• These commands enable vmtracer mode on the Ethernet 3 interface.

switch(config)#interface Ethernet 3switch(config-if-Et3)#vmtracer vmware-esxswitch(config-if-Et3)#

• This command disables vmtracer mode on the Ethernet 3 interface.

switch(config-if-Et3)#no vmtracer vmware-esxswitch(config-if-Et3)#


3043

vmtracer session

The vmtracer session command places the switch in vmtracer mode for the specified session. Thecommand creates a new session or loads an existing session for editing.

A VM Tracer session connects the switch to a vCenter server at a specified location, then downloadsdata about VMs and vSwitches managed by ESX hosts connected to switch ports. The switch supportsa maximum of four VM Tracer sessions.

VM Tracer session parameters are configured in vmtracer mode. Parameters configured in vmtracermode include the vCenter location and dynamic VLAN usage.

The no vmtracer session and default vmtracer session commands disable the session and removeits configuration from running-config.

Command ModeGlobal Configuration

Command Syntaxvmtracer session nameno vmtracer session namedefault vmtracer session name

Parameters• name The label assigned to the VM Tracer session.

Commands Available in vmtracer Configuration Mode• allowed-vlan

• autovlan disable

• password (vmtracer mode)

• url (vmtracer mode)

• username (vmtracer mode)

• vxlan (vmtracer mode)

Examples• This command enters vmtracer mode for the system_1 session.

switch(config)#vmtracer session system_1switch(vmtracer-system_1)#

• This command disables the system_1 VM Tracer session. The system_1 session and all of itsparameters are removed from running-config.

switch(config)#no vmtracer session system_1switch(config)#

3044


vrf (vmtracer mode)

The vrf command allows the switch to communicate with a vCenter server by enabling VmTracerconfiguration mode. By default, VmTracer is enabled only in the default vrf.


Command Syntaxvrf vrf_name

Parameters• vrf_name specifies information of the corresponding VRF.

Example• These commands place the VRF vrf1 in the Vmtracer configuration mode.

switch(config)#vmtracer session system_1switch(config-vmtracer-session-system_1)#vrf vrf1switch(config-vmtracer-session-system_1)#


3045

vxlan (vmtracer mode)

The vxlan command places the switch in vmtracer-vxlan configuration mode. To monitor VXLAN basedVMware configurations, the switch must communicate with a NSX for vSphere® (NSX-V).Vmtracer-vxlan configuration mode specifies the location and user account data that allows the switchto access a NSX-V within the configuration mode vmtracer session. Each VM Tracer session can beassociated with one NSX-V instance.

The no vxlan and default interface vxlan commands delete the NSX-V instance from theconfiguration mode vmtracer session by removing all vmtracer-vxlan mode commands fromrunning-config.


Command Syntaxvxlanno vxlandefault vxlan


Commands Available in vmtracer-vxlan Configuration Mode• password (vmtracer mode)

• url (vmtracer mode)

• username (vmtracer mode)

Example• These commands create the vShield instance for the VMTracer session named vnet-1.

switch(config)#vmtracer session vnet-1switch(config-vmtracer-vnet-1)#vxlanswitch(config-vmtracer-vnet-1-vxlan)#

3046


Chapter 45 VM Tracer - Arista · VM Tracer is enabled. The ESX host updates the vCenter when it...

Documents

Transcript of Chapter 45 VM Tracer - Arista · VM Tracer is enabled. The ESX host updates the vCenter when it...