Viewing Device Details

From the Inventory screen, you can quickly drill down to view details about a particular device by clicking the device icon. In the tabular view, click the device name to view the corresponding device details.

The screen refreshes to show the device-state data streamed from the device to CVP.

Figure 1. Viewing Devices Details (Single Device)

Device details include the information on overview, system, compliance, environment, switching, routing, and interfaces.

Related topics:

Compliance

The Compliance section provides information on vulnerability to known bugs.

Device Overview

The Device Overview section provides an overview of system details, telemetry status, and interface counts. Click More to reach corresponding sections for detailed information.

The Historical Comparison sub-section provides the information on EOS version, 5-minute CPU load average, MLAG status, IPv4 attached routes, IPV4 learned routes, configured BGP, IPv6 attached routes, IPV6 learned routes, and MAC addresses learned.

The system displays only Device Overview and System information for third-party devices.

Environment Details

The Environment section provides statistics on temperature, fan speeds, and output power.

Switching Information

The Switching section provides the count of VLANs in which MAC address learning is enabled, count of total VLANs, count of configured VLANs, and detailed information on configured VLANs.

Sub-sections provide switching data like ARP table, NDP table, bridging capability, MAC address table, MLAG, and VXLAN.

Routing Information

The Routing section provides statistics on IPV4 route count by type, IPv6 route count by type, and routing statistics by VRF.

Sub-sections provide routing data like IPv4 and IPv6 routing tables, routing table changes, multicast data like sparse mode PIM and static, and BGP information.

System Information

The System section provides an overview of device details, telemetry status, and PTP status.

Sub-sections provide information on processes, storage, log messages, hardware capacity, running config, and snapshots.

802.1X Metrics

802.1X information shows which endpoints have authenticated, are undergoing authentication, or have failed to authenticate to the network. This information is available to view primarily from the 802.1X page in the Devices application.

Accessing 802.1X Metrics

To access 802.1X Metrics From the Inventory screen in the Devices tab, select a device. In the scrolling menu on the left side of the page, select 801.X. The 801.X Metrics page is displayed.

The graphs display the total number of interfaces and the status of each.

The table lists all of the endpoints with additional information. The columns show the following:

Identity: the MAC address of the endpoint. The username, if provided, is displayed in parenthesis.
IP Address: the IP address of the endpoint.
Interface: which interface the endpoint is on. Selecting the interface will display a table showing all of the endpoints on that specific interface.
Host Mode: the host mode of the endpoint (Single-Host, Multi-Host, Multi-Host Authenticated) with an optional Mac-Based VLAN Assignment. Place the cursor over Mac-Based VLAN Assignment to display the full name.
Auth Status: the authentication status of the endpoint.
Auth Mode: how the endpoint is authenticated.
VLAN: the VLAN the endpoint is on.
VLAN Type: the type of VLAN being used.

802.1X Dashboard View

802.1X metrics is also available from the Dashboard View. Refer to Dashboards for more information about creating a dashboard.

Viewing Traffic Flows

CloudVision lets you analyze the network traffic routed through a single device or through all devices that have flow tracking configured.

Note: Traffic flows return tunneled flows when the inner packet headers matches the user's query.

You can drill down into the details of global and device specific network flow activities using bar charts, stacked time series graphs, and tables of usage statistics. See Accessing the Global Traffic Flows Screen and Accessing the Device Specific Traffic Flows Screen.

Note: You can drill down the details of device specific network flow activities using heatmaps also.

To view the data on traffic flows, you must enable traffic flow tracking in devices to get data. See Enabling Traffic Flow Tracking.

Enabling Traffic Flow Tracking

Enabling flow tracking on a device allows CloudVision to provide a detailed breakdown of the forwarded network traffic. Traffic flow tracking is enabled through either of the following methods:

Enable sFlow Sampling on a Device

Arista switches provide a single sFlow agent instance that samples ingress traffic from all Ethernet and port channel interfaces.

Run the following commands to enable sFlow sampling on a device:

switch(config)#sflow sample <sampling rate>
switch(config)#sflow polling-interval <polling interval>
switch(config)#sflow destination 127.0.0.1
switch(config)#sflow source-interface <source interface>
switch(config)#sflow run

sFlow monitors a random sample of packets at the configured sampling rate. Reported bandwidth and packet measurements are scaled up using the sampling rate to provide estimates of actual bandwidth usage and packet counts.

Enable Hardware Based IPFIX Flow Tracking

Arista switches also allow exporting flow information using the IPFIX format.

Run the following commands to enable hardware based IPFIX flow tracking:

switch(config)#flow tracking hardware
switch(config)#!
switch(config)#tracker <tracker name>
switch(config)#record export on inactive timeout <inactive timeout>
switch(config)#record export on interval <interval>
switch(config)#record format ipfix standard timestamps counters
switch(config)#!
switch(config)#exporter <exporter name>
switch(config)#collector <loopback interface ip>
switch(config)#local interface <loopback interface>
switch(config)#template interval <interval>
switch(config)#no shutdown
switch(config)#exit
switch(config)#interface <interface>
switch(config)#flow tracker hardware <tracker name>
switch(config)#no shutdown

Accessing the Global Traffic Flows Screen

To view the global traffic flows screen, navigate to Devices > Traffic Flows on the CloudVision portal. This screen displays information about traffic flows captured by all devices on the network with flow monitoring enabled.See the figure below.

Note: This screen may present multiple values reported by different devices for the same flow or flow category.

Use the following search filters for customised presentation of the traffic flows data:

Host filters
- Source Hosts
  - Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be displayed
  - Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be concealed
- Destination Hosts
  - Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be displayed
  - Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be concealed
- Bidirectional checkbox - Select the checkbox to view the traffic flows between specified hosts.
  Note: When you select the Bidirectional checkbox, the Source Hosts and Destination Hosts fields change to Hosts and To/From Hosts.
Port filters
- Source Ports autocomplete field - Provide port numbers or service names of the source port
- Destination Ports autocomplete field - Provide port numbers or service names of the destination port
- Show/Hide dropdown - Select either Show or Hide to view or conceal the traffic flow data of specified source and destination ports respectively.
- Bidirectional checkbox - Select the checkbox to view the traffic flows between specified ports.
  Note: When you select the Bidirectional checkbox, the Source Ports and Destination Ports fields change to Ports and To/From Ports.
Protocol filter - Provide IP protocols of the required traffic flow data in the autocomplete field.

Select either Show or Hide to view or conceal the traffic flow data of specified protocols respectively.
More filters
- Locality - Select Public and Private checkboxes to view traffic flows of corresponding networks
- Fragmentation checkbox - Selecting the checkbox displays only flows with fragmented packets
Clear all filters - Clears all specified filters
Top dropdown menu - As per your selection, the top n items are displayed for each break down.
by dropdown menu - Select the required method to measure traffic.

The global traffic flows dashboard provides the following display types for analyzing the flow data in different ways:

Note:

Click the View in Topology link to see the data from the perspective of the topology flows view.
The refresh icon provides countdown in seconds for refreshing the traffic flow data. The data in live mode gets updated every 30 seconds.

Charts View

The Charts display option presents the summary of global traffic flows in charts. The traffic flow data is arranged based on the breakdown selected from the dropdown list. See the figure below.

Figure 12. Global Traffic Flow Summary in Charts

Bar charts represent the device specific traffic flows over the selected time period. The bar length represents the traffic flow of a device with highest usage.

Note:

Click on a bar in the bar chart in the stacked graph to set the clicked-on item as a filter wherever it is possible. For example, hosts or ports of source and destination.
Hover the cursor on the dot in a bar to find the observing device.

Summary Table View

The Summary Table display option presents the summary of global traffic flows in a tabular format. See the figure below.

Figure 13. Global Traffic Flow Summary in Table

The traffic flow data is grouped based on the selected breakdowns. If multiple options are selected in the Group By field, the table displays a summary of usage statistics that is broken down according to the selected criteria. The summary can be sorted by bytes, packets, or flows in descending order.

Note: Click on a device name to view the traffic flows for the respective device.

Flow Records View

The Flow Records display option presents the record of all traffic flows in a tabular format. See the figure below.

Note: Click on a device name to view the traffic flows for the respective device.

Accessing the Device Specific Traffic Flows Screen

On the CloudVision portal, navigate to Devices > Inventory > Device_Name > Traffic Flows to view the Traffic Flows screen. See the figure below.

This screen displays the summary of flows, bandwidth, packets, active hosts, and sampling rate. Provide the following details to view custom information of traffic flows:

Inband Telemetry Data
- Flow tracking (sFlow or IPFIX)
- Inband telemetry
Host filters
- Source Hosts
  - Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be displayed
  - Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the source host that needs to be concealed
- Destination Hosts
  - Show autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be displayed
  - Hide autocomplete field - Provide hostnames, IP addresses, or subnets in CIDR notation of the destination host that needs to be concealed
Port filters
- Source Ports autocomplete field - Provide port numbers or service names of the source port
- Destination Ports autocomplete field - Provide port numbers or service names of the destination port
- Show/Hide dropdown - Select either Show or Hide to view or conceal the traffic flow data of specified source and destination ports respectively.
Protocol filter - Provide IP protocols of the required traffic flow data in the autocomplete field.

Select either Show or Hide to view or conceal the traffic flow data of specified protocols respectively
Interface filters
- Show autocomplete field - Select the interfaces of which the traffic flow needs to be displayed
- Hide autocomplete field - Select the interfaces of which the traffic flow needs to be concealed
More filters
- Locality - Select Public and Private checkboxes to view traffic flows of corresponding networks
- Fragmentation checkbox - Selecting the checkbox displays only flows with fragmented packets
Clear all filters - Clears all specified filters
Top dropdown menu - As per your selection, the top n items are displayed for each break down.
by dropdown menu - Select the required method to measure traffic.

The device specific traffic flows dashboard provides the following display types for analyzing the flow data in different ways:

Note:

Click the View in Topology link to see the data from the perspective of the topology flows view.
The refresh icon provides countdown in seconds for refreshing the traffic flow data. The data in live mode gets updated every 30 seconds.