Viewing Device Details

From the Inventory screen, you can quickly drill down to view details about a particular device by clicking the device icon. In the tabular view, click the device name to view the corresponding device details.

The screen refreshes to show the device-state data streamed from the device to CVP.

Figure 1. Viewing Devices Details (Single Device)

Device details include the information on overview, system, compliance, environment, switching, routing, and interfaces.

Related topics:

Compliance

The Compliance section provides information on vulnerability to known bugs.

Figure 2. Compliance Section

Device Overview

The Device Overview section provides an overview of system details, telemetry status, and interface counts. Click More to reach corresponding sections for detailed information.

Figure 3. Device Overview Section

The Historical Comparison sub-section provides the information on EOS version, 5-minute CPU load average, MLAG status, IPv4 attached routes, IPV4 learned routes, configured BGP, IPv6 attached routes, IPV6 learned routes, and MAC addresses learned.

The system displays only Device Overview and System information for third-party devices.

Figure 4. Third-Party Device Overview

Environment Details

The Environment section provides statistics on temperature, fan speeds, and output power.

Figure 5. Environment Section

Switching Information

The Switching section provides the count of VLANs in which MAC address learning is enabled, count of total VLANs, count of configured VLANs, and detailed information on configured VLANs.

Figure 6. Switching Section

Sub-sections provide switching data like ARP table, NDP table, bridging capability, MAC address table, MLAG, and VXLAN.

Routing Information

The Routing section provides statistics on IPV4 route count by type, IPv6 route count by type, and routing statistics by VRF.

Figure 7. Routing Section

Sub-sections provide routing data like IPv4 and IPv6 routing tables, routing table changes, multicast data like sparse mode PIM and static, and BGP information.

System Information

The System section provides an overview of device details, telemetry status, and PTP status.

Figure 8. System Section

Sub-sections provide information on processes, storage, log messages, hardware capacity, running config, and snapshots.

802.1X Metrics

802.1X information shows which endpoints have authenticated, are undergoing authentication, or have failed to authenticate to the network. This information is available to view primarily from the 802.1X page in the Devices application.

Accessing 802.1X Metrics

To access 802.1X Metrics From the Inventory screen in the Devices tab, select a device. In the scrolling menu on the left side of the page, select 801.X. The 801.X Metrics page is displayed.

Figure 9. 802.1X Metrics

The graphs display the total number of interfaces and the status of each.

The table lists all of the endpoints with additional information. The columns show the following:
  • Identity: the MAC address of the endpoint. The username, if provided, is displayed in parenthesis.
  • IP Address: the IP address of the endpoint.
  • Interface: which interface the endpoint is on. Selecting the interface will display a table showing all of the endpoints on that specific interface.
  • Host Mode: the host mode of the endpoint (Single-Host, Multi-Host, Multi-Host Authenticated) with an optional Mac-Based VLAN Assignment. Place the cursor over Mac-Based VLAN Assignment to display the full name.
  • Auth Status: the authentication status of the endpoint.
  • Auth Mode: how the endpoint is authenticated.
  • VLAN: the VLAN the endpoint is on.
  • VLAN Type: the type of VLAN being used.

802.1X Dashboard View

802.1X metrics is also available from the Dashboard View. Refer to Dashboards for more information about creating a dashboard.

Figure 10. 802.1X Dashboard View

Viewing Traffic Flows

CloudVision lets you analyze the network traffic routed through a single device or through all devices that have flow tracking configured.
Note: Traffic flows return tunneled flows when the inner packet headers matches the user's query.
You can drill down into the details of global and device specific network flow activities using bar charts, stacked time series graphs, and tables of usage statistics. See Accessing the Global Traffic Flows Screen and Accessing the Device Specific Traffic Flows Screen.
Note: You can drill down the details of device specific network flow activities using heatmaps also.

To view the data on traffic flows, you must enable traffic flow tracking in devices to get data. See Enabling Traffic Flow Tracking.

Enabling Traffic Flow Tracking

Enabling flow tracking on a device allows CloudVision to provide a detailed breakdown of the forwarded network traffic. Traffic flow tracking is enabled through either of the following methods:

Enable sFlow Sampling on a Device

Arista switches provide a single sFlow agent instance that samples ingress traffic from all Ethernet and port channel interfaces.

Run the following commands to enable sFlow sampling on a device:

switch(config)#sflow sample <sampling rate>
switch(config)#sflow polling-interval <polling interval>
switch(config)#sflow destination 127.0.0.1
switch(config)#sflow source-interface <source interface>
switch(config)#sflow run

sFlow monitors a random sample of packets at the configured sampling rate. Reported bandwidth and packet measurements are scaled up using the sampling rate to provide estimates of actual bandwidth usage and packet counts.

Enable Hardware Based IPFIX Flow Tracking

Arista switches also allow exporting flow information using the IPFIX format.

Run the following commands to enable hardware based IPFIX flow tracking:

switch(config)#flow tracking hardware
switch(config)#!
switch(config)#tracker <tracker name>
switch(config)#record export on inactive timeout <inactive timeout>
switch(config)#record export on interval <interval>
switch(config)#record format ipfix standard timestamps counters
switch(config)#!
switch(config)#exporter <exporter name>
switch(config)#collector <loopback interface ip>
switch(config)#local interface <loopback interface>
switch(config)#template interval <interval>
switch(config)#no shutdown
switch(config)#exit
switch(config)#interface <interface>
switch(config)#flow tracker hardware <tracker name>
switch(config)#no shutdown

Accessing the Global Traffic Flows Screen

To view the global traffic flows screen, navigate to Devices > Traffic Flows on the CloudVision portal. This screen displays information about traffic flows captured by all devices on the network with flow monitoring enabled.See the figure below.

Figure 11. Global Traffic Flows Screen
Note: This screen may present multiple values reported by different devices for the same flow or flow category.

Use the following search filters for customised presentation of the traffic flows data:

  • Host filters

    • Source Hosts

      • Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be displayed
      • Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be concealed

    • Destination Hosts

      • Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be displayed
      • Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be concealed
    • Bidirectional checkbox - Select the checkbox to view the traffic flows between specified hosts.
      Note: When you select the Bidirectional checkbox, the Source Hosts and Destination Hosts fields change to Hosts and To/From Hosts.

  • Port filters

    • Source Ports autocomplete field - Provide port numbers or service names of the source port

    • Destination Ports autocomplete field - Provide port numbers or service names of the destination port

    • Show/Hide dropdown - Select either Show or Hide to view or conceal the traffic flow data of specified source and destination ports respectively.
    • Bidirectional checkbox - Select the checkbox to view the traffic flows between specified ports.
      Note: When you select the Bidirectional checkbox, the Source Ports and Destination Ports fields change to Ports and To/From Ports.

  • Protocol filter - Provide IP protocols of the required traffic flow data in the autocomplete field.

    Select either Show or Hide to view or conceal the traffic flow data of specified protocols respectively.

  • More filters

    • Locality - Select Public and Private checkboxes to view traffic flows of corresponding networks

    • Fragmentation checkbox - Selecting the checkbox displays only flows with fragmented packets

  • Clear all filters - Clears all specified filters

  • Top dropdown menu - As per your selection, the top n items are displayed for each break down.
  • by dropdown menu - Select the required method to measure traffic.
The global traffic flows dashboard provides the following display types for analyzing the flow data in different ways:
Note:
  • Click the View in Topology link to see the data from the perspective of the topology flows view.
  • The refresh icon provides countdown in seconds for refreshing the traffic flow data. The data in live mode gets updated every 30 seconds.

Charts View

The Charts display option presents the summary of global traffic flows in charts. The traffic flow data is arranged based on the breakdown selected from the dropdown list. See the figure below.

Figure 12. Global Traffic Flow Summary in Charts

Bar charts represent the device specific traffic flows over the selected time period. The bar length represents the traffic flow of a device with highest usage.

Note:

  • Click on a bar in the bar chart in the stacked graph to set the clicked-on item as a filter wherever it is possible. For example, hosts or ports of source and destination.

  • Hover the cursor on the dot in a bar to find the observing device.

Summary Table View

The Summary Table display option presents the summary of global traffic flows in a tabular format. See the figure below.

Figure 13. Global Traffic Flow Summary in Table

The traffic flow data is grouped based on the selected breakdowns. If multiple options are selected in the Group By field, the table displays a summary of usage statistics that is broken down according to the selected criteria. The summary can be sorted by bytes, packets, or flows in descending order.

Note: Click on a device name to view the traffic flows for the respective device.

Flow Records View

The Flow Records display option presents the record of all traffic flows in a tabular format. See the figure below.

Figure 14. Global Traffic Flow Record
Note: Click on a device name to view the traffic flows for the respective device.

Accessing the Device Specific Traffic Flows Screen

On the CloudVision portal, navigate to Devices > Inventory > Device_Name > Traffic Flows to view the Traffic Flows screen. See the figure below.

Figure 15. Inband Telemetry

This screen displays the summary of flows, bandwidth, packets, active hosts, and sampling rate. Provide the following details to view custom information of traffic flows:

  • Inband Telemetry Data
    • Flow tracking (sFlow or IPFIX)
    • Inband telemetry

  • Host filters

    • Source Hosts

      • Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be displayed
      • Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be concealed

    • Destination Hosts

      • Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be displayed
      • Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be concealed

  • Port filters

    • Source Ports autocomplete field - Provide port numbers or service names of the source port

    • Destination Ports autocomplete field - Provide port numbers or service names of the destination port

    • Show/Hide dropdown - Select either Show or Hide to view or conceal the traffic flow data of specified source and destination ports respectively.

  • Protocol filter - Provide IP protocols of the required traffic flow data in the autocomplete field.

    Select either Show or Hide to view or conceal the traffic flow data of specified protocols respectively

  • Interface filters
    • Show autocomplete field - Select the interfaces of which the traffic flow needs to be displayed
    • Hide autocomplete field - Select the interfaces of which the traffic flow needs to be concealed

  • More filters

    • Locality - Select Public and Private checkboxes to view traffic flows of corresponding networks

    • Fragmentation checkbox - Selecting the checkbox displays only flows with fragmented packets

  • Clear all filters - Clears all specified filters

  • Top dropdown menu - As per your selection, the top n items are displayed for each break down.
  • by dropdown menu - Select the required method to measure traffic.
The device specific traffic flows dashboard provides the following display types for analyzing the flow data in different ways:
Note:
  • Click the View in Topology link to see the data from the perspective of the topology flows view.
  • The refresh icon provides countdown in seconds for refreshing the traffic flow data. The data in live mode gets updated every 30 seconds.

Charts View

The Charts display option presents the summary of device specific traffic flows in charts. The traffic flow data is arranged based on the breakdown selected from the dropdown list. See the figure below.

Figure 16. Device Specific Traffic Flow Summary in Charts

The following information is provided for each break down:

  • Bar charts that display the total usage over the time period for items
    Note: Clicking on a bar in the bar chart or a time series in the stacked graph sets the clicked-on item as a filter wherever it is possible. For example, hosts or ports of source and destination.
  • Stacked time series graphs that provide the following information:
    • The rate of usage vs. time
      Note: This information is provided only when the Sort By option is either Bandwidth (bytes) or Packets.
    • The number of flows active vs. time
      Note: This information is provided only when the Sort By option is Flow Count.

Charts View

The Charts display option presents the summary of device specific traffic flows in charts. The traffic flow data is arranged based on the breakdown selected from the dropdown list. See the figure below.

Figure 17. Device Specific Traffic Flow Summary in Charts

The following information is provided for each break down:

  • Bar charts that display the total usage over the time period for items
    Note: Clicking on a bar in the bar chart or a time series in the stacked graph sets the clicked-on item as a filter wherever it is possible. For example, hosts or ports of source and destination.
  • Stacked time series graphs that provide the following information:
    • The rate of usage vs. time
      Note: This information is provided only when the Sort By option is either Bandwidth (bytes) or Packets.
    • The number of flows active vs. time
      Note: This information is provided only when the Sort By option is Flow Count.

Heatmap View

The Heatmap display option presents the summary of device specific traffic flows in a heatmap. See the figure below.

Figure 18. Device Specific Traffic Flow Summary in Heatmap

The heatmap plots two breakdowns against each other. For example, the user selects top 20 source hosts vs. top 20 destination hosts. The system displays the top 20 destination hosts that communicated with any of those top 20 source hosts.

Each pairing of source host and destination host is shown as a cell in the grid. Cells are displayed in various shades of green based on their usage. The higher the usage, the darker the green shade.

Note: The system displays an empty cell if there is no usage.

Summary Table View

The Summary Table display option presents the summary of device specific traffic flows in a table. See the figure below.

Figure 19. Device Specific Traffic Flow Summary in Table

The traffic flow data is grouped based on the selected breakdowns. If multiple options are selected in the Group By field, the table displays a summary of usage statistics that is broken down according to the selected criteria. The summary can be sorted by bytes, packets, or flows in descending order.

Flow Records View

The Flow Records display option presents the record of device specific traffic flows in a tabular format. See the figure below.

When viewing individual flow records, the path of a flow, complete with ingress and egress interfaces, TTLs and latencies for each hop, can be inspected using the Hops column.

Figure 20. Flow Records View
Note: Filters and fields related to packet fragmentation, tunnelling, and user identity are not available for inband telemetry data.

Status of Interfaces

The Interfaces section provides status of Ethernet interfaces, VLAN interfaces, IP interfaces, and port channels.

Figure 23. Interfaces Section

Sub-sections provide detailed information on Ethernet interfaces, routed ports, port channels, traffic counters, LLDP neighbors, and Power Over Ethernet.

Power Over Ethernet

Power Over Ethernet (PoE) is a technology for delivering electrical power along with network data over physical Ethernet connections. Some benefits of PoE are provided below:

  • Reduces the need of extension cables and additional outlets
  • Provides a reliable power source on difficult terrain
  • Prevents data transmission hiccups
  • Substantial reductions in space usage, cost, and time

In CloudVision, the Power Over Ethernet screen provides a summary of all interfaces along with information on each interface.

Figure 24. Power Over Ethernet Screen

The Power Over Ethernet screen displays the following information:

  • Summary of All Interfaces
    • Total Approved Power - Sum of the approved maximum power amounts configured for each Ethernet port
    • Total Granted Power - Sum of the approved power amounts minus power loss to transmission over Ethernet cables
    • Total Output Power - Sum of actual power amounts delivered to each powered Ethernet device
  • Information on Individual Interfaces
    • Interface - Interface name
    • Port Class - Maximum power in watts (W)
    • Port State - Operational status of a PoE device connected to the port
    • Approved Power - Configured maximum power output in watts (W) for the interface
    • Granted Power - Maximum power available to the device
    • Output Power - Power drawn by the device
    • Output Current - Current available on the PoE link in milliamps (mA)
    • Output Voltage - Voltage available over the PoE link in volts (V)
Note: PoE metrics are also available in the Metrics Explorer and can be built into custom metrics dashboards. Data on individual interfaces is available under the Interfaces metric type.

Viewing 802.1x Details for Endpoint Search

From the 2023.2.0 release onward, you can view additional functionality (Endpoint Authentication tab) when you search for the device details using the Devices > Endpoint Search page from the CloudVision portal. You can view the device details by entering the MAC address, IP address, device name, or device ID in the search window. For example:

Figure 25. Search Window


Based on the configuration, the device details are displayed, with three tabs: Network Location, Flow Visibility, and Endpoint Authentication. For details on Network Location and Flow Visibility, see the Address Search sections. From the 2023.2.0 release onward, the Endpoint Authentication tab is also visible as in the example here:

Figure 26. Endpoint Search Results


The Endpoint Authentication tab displays 802.1x information for the MAC addresses associated with the searched device or endpoint. If there is no 802.1x information for the searched MAC Addresses, a "No data found" page is displayed as here:

Figure 27. Endpoint Authentication Tab


If there is 802.1x information associated with the searched MAC address, a card with Operational, AAA, and Quick Links are displayed for that MAC address as in the example here.

Figure 28. Endpoint_Authentication_Results


The following 802.1x details are displayed for the searched device or endpoint:

  • Operational tab
    • User Name
    • Authentication Method
    • Authentication Mode
    • Authentication Status
    • Supplicant State
    • Fallback Applied
    • Calling-Station-Id
    • Reauthentication Behavior
    • Reauthentication Interval
    • Time until Reauthentication
    • VLAN ID
    • VLAN Type
    • Accounting Session ID
    • Captive Portal
  • AAA tab
    • Arista-WebAuth
    • Filter-Id
    • IP Address
    • NAS-Filter-Rule
    • Service Type
    • Session Timeout
    • Termination Action
    • Tunnel Private Group ID
    • Arista Periodic Identity
    • Arista Dynamic Host Mode
    • Arista Device Type
  • Quick Links tab
    • Link to the associated device in Topology
    • Link to the Dot1x sections for the associated device
    • Link to the Dot1x sections via Ethernet for the associated interface
    • Link to the Telemetry Browser to view the additional fields that are not displayed in Endpoint Search