Quantcast
Channel: VMware Communities: Message List
Viewing all articles
Browse latest Browse all 169668

Re: Port mirroring available with vswitch or only dvswitch?

$
0
0

So the ESXi side is completely unaware of the mirroring in your setup? In that case it should not make any difference whether you use a standard or distributed vSwitch. The forwarding logic is exactly the same. Just make sure the actual port group where you connect the analyzer VM has promiscuous mode enabled too (not overwritten) and not just the vSwitch.

Do the frames mirrored by your juniper switch arrive with 802.1Q tags on the port? Is the port group of the analyzer VM configured with that VLAN or VLAN ID 4095 (see http://kb.vmware.com/kb/1004074)?

 

The easiest way to figure out whether the issue is on the ESXi or Juniper side would be just to test your port mirroring setup with a physical, non-ESXi system.

 

Anyways, having said that I'm a little surprised it used to work like you described before if I think about it. I thought a vSwitch should drop unknown incoming unicast frames with a destination unicast MAC that does not match any of the attached vNICs (or custom ones if you enable MAC address change).

See this wonderful article:

http://blog.ioshints.info/2010/11/vmware-virtual-switch-no-need-for-stp.html

Unicast packets received through the uplink ports and addressed to unknown MAC addresses are dropped.

This drop should be implicit before the promiscuous mode setting takes effect, so you shouldn't see anything expect a few multicast and broadcast frames. Do you not even see any multicast/broadcast frames?


Viewing all articles
Browse latest Browse all 169668

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>