Description

This KB explained a possibility that why analyzer to mirror VxLAN-enabled VLAN traffic failed. 

Symptoms

Customer may report analyzer issue in VxLAN environment for mirroring VLAN traffic with VxLAN enabled.

>>> Configuration on control plane/CLI looks good as below.

forwarding-options {
    analyzer {
        PORT-MIRROR {
            input {
                ingress {
                    vlan 1201;
                    vlan 1202;
                    vlan 1210;
                    vlan 1211;
                    vlan 1218;
                    vlan 1219;
                    vlan 1255;
                    vlan 1256;
                    vlan 1212;
                    vlan 1203;
                }
            }
            output {
                interface xe-0/0/26:3.0;
            }
        }
    }
}

However, there are no traffic being mirrored via the output interface.

**************************************************************

A PFE (dynamic) filter needs to be installed to make the analyzer work. This issue may be caused by programming error on PFE.

>>> To verify it, we need to locate filter "dyn-analyzer_vxlan_vlan" on PFE.

root@QFX5120-32C-SW:RE:0% cprod -A fpc0 -c "show filter hw dynamic"

List of dynamic filters:
========================
  0 dyn-vccpdf
  1 dyn-vc_ipc
  2 dyn-vc_ipc_udp
  3 dyn-vc_ttp
<Output truncated>
158 dyn-arp_my_mac
159 dyn-lfm-loopback-allow
160 dyn-analyzer_vxlan_vlan        <<<<<<<<<<<<<<<< Here
161 dyn-ifp-vxlan_snoop
162 dyn-ifp-vxlan_snoop_rsvd_mcast
<Output truncated>
179 dyn-native_vxlan_untagged
========================

>>> Check filter programming via commands below.

HW (unit 0)

root@QFX5120-32C-SW:RE:0% cprod -A fpc0 -c 'set dcbcm bcmshell "d chg EGR_IM_MTP_INDEX"'

<No output>


root@QFX5120-32C-SW:RE:0% cprod -A fpc0 -c "show filter hw dynamic 160"

Filter name         : dyn-analyzer_vxlan_vlan

Filter enum         : 160

Filter location     : IFP_VXLAN

List of tcam entries : [empty                       <<<<<<<<<< No entries here.

Solution

To fix this issue, you may need to:
>>> remove analyzer configuration, re-add it and commit full.
>>> reboot the switch or restart PFE if step above did not fix the issue.

**************************************************************
>>> Correct programming looks like below.

root@QFX5120-32C-SW_working:RE:0% cprod -A fpc0 -c 'set dcbcm bcmshell "d chg EGR_IM_MTP_INDEX"'

HW (unit 0)

EGR_IM_MTP_INDEX.epipe0[0]: <MTP_DST_PORT=0x6e,>

EGR_IM_MTP_INDEX.epipe0[1]: <MTP_DST_PORT=0x6e,>

EGR_IM_MTP_INDEX.epipe0[2]: <MTP_DST_PORT=0x6e,>

EGR_IM_MTP_INDEX.epipe0[3]: <MTP_DST_PORT=0x6e,>

EGR_IM_MTP_INDEX.epipe0[4]: <MTP_DST_PORT=0x6e,>

EGR_IM_MTP_INDEX.epipe0[5]: <MTP_DST_PORT=0x6e,>

EGR_IM_MTP_INDEX.epipe0[6]: <MTP_DST_PORT=0x6e,>

EGR_IM_MTP_INDEX.epipe0[7]: <MTP_DST_PORT=0x6e,>

 

root@QFX5120-32C-SW_working:RE:0% cprod -A fpc0 -c "show filter hw dynamic 160"


Filter name         : dyn-analyzer_vxlan_vlan

Filter enum         : 160

Filter location     : IFP_VXLAN

List of tcam entries : [(total entries: 6) ]

             unit:  0 pipe: 0 entry: 1049 H:0 A: MI stat (id 597 val 0x0000000000000000) CPU Code 134783421

             unit:  0 pipe: 0 entry: 1051 H:0 A: MI stat (id 599 val 0x0000000000000000) CPU Code 134784670

             unit:  0 pipe: 0 entry: 1053 H:0 A: MI stat (id 601 val 0x0000000000000000) CPU Code 134784670

             unit:  0 pipe: 0 entry: 1055 H:0 A: MI stat (id 603 val 0x000000052A69AEF4) CPU Code 134784670

             unit:  0 pipe: 0 entry: 1057 H:0 A: MI stat (id 605 val 0x000000604214A5AF) CPU Code 134784670

             unit:  0 pipe: 0 entry: 1059 H:0 A: MI stat (id 607 val 0x000000240C997A81) CPU Code 134784670

             unit:  0 pipe: 1 entry: 1050 H:0 A: MI stat (id 598 val 0x0000000021416CA2) CPU Code 134783421

             unit:  0 pipe: 1 entry: 1052 H:0 A: MI stat (id 600 val 0x000000391794463B) CPU Code 134784670

             unit:  0 pipe: 1 entry: 1054 H:0 A: MI stat (id 602 val 0x000000381C51CE7F) CPU Code 134784670

             unit:  0 pipe: 1 entry: 1056 H:0 A: MI stat (id 604 val 0x0000000000000000) CPU Code 134784670

             unit:  0 pipe: 1 entry: 1058 H:0 A: MI stat (id 606 val 0x0000000000000000) CPU Code 134784670

             unit:  0 pipe: 1 entry: 1060 H:0 A: MI stat (id 608 val 0x0000000000000000) CPU Code 134784670

 

root@QFX5120-32C-SW_working:RE:0% cprod -A fpc0 -c "show filter hw all non_zero_only 0" target fpc0"

SENT: Ukern command: show filter hw all non_zero_only 0

F   8 U:  0 Pi: 1 G:18 E:    104 H:0 A:CCQ stat (id   94 val 0x00000027C4DA8BC2) P:7FFFFFFB I5: COSQ 20 -resolve
<Output truncated>
F 139 U:  0 Pi: 1 G:18 E:    490 H:0 A:SCC stat (id  412 val 0x00000000000291D9) P:40000000 I5: -riot-arp-copy-to-cpu
F 160 U:  0 Pi: 0 G:88 E:   1055 H:0 A: MI stat (id  603 val 0x00000004506D5841) P:7FFFFFFB I14: CPU Code 134784670 -analyzer_vxlan_vlan    <<<<<<<<<<<
F 160 U:  0 Pi: 0 G:88 E:   1057 H:0 A: MI stat (id  605 val 0x0000003E3B87B68D) P:7FFFFFFB I14: CPU Code 134784670 -analyzer_vxlan_vlan    <<<<<<<<<<<
F 160 U:  0 Pi: 0 G:88 E:   1059 H:0 A: MI stat (id  607 val 0x0000000FC3AD5579) P:7FFFFFFB I14: CPU Code 134784670 -analyzer_vxlan_vlan    <<<<<<<<<<<
F 160 U:  0 Pi: 1 G:89 E:   1050 H:0 A: MI stat (id  598 val 0x0000000000B32B2E) P:7FFFFFFB I14: CPU Code 134783421 -analyzer_vxlan_vlan    <<<<<<<<<<<
F 160 U:  0 Pi: 1 G:89 E:   1052 H:0 A: MI stat (id  600 val 0x000000264777C331) P:7FFFFFFB I14: CPU Code 134784670 -analyzer_vxlan_vlan    <<<<<<<<<<<
F 160 U:  0 Pi: 1 G:89 E:   1054 H:0 A: MI stat (id  602 val 0x000000276395E057) P:7FFFFFFB I14: CPU Code 134784670 -analyzer_vxlan_vlan    <<<<<<<<<<<
<Output truncated>
 

Modification History

Publish KB.