The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Traffic monitoring copies traffic, from one or more source ports, and sends it to a dedicated destination port for analysis by a network analyzer. This feature is also known as Switched Port Analyzer (SPAN).
For FC port channels on Cisco UCS 6200 Fabric Interconnects, you can monitor only egress traffic.
For FC port channels on Cisco UCS 6300 Fabric Interconnects, you can monitor only ingress traffic.
When you create a traffic monitoring session, you can choose either an Ethernet or Fibre Channel destination port to receive the traffic. The type of destination port determines the type of session, which in turn determines the types of available traffic sources. For an Ethernet traffic monitoring session, the destination port must be an unconfigured physical port. For a Fibre Channel traffic monitoring session, the destination port must be a Fibre Channel uplink port.
Note | For Cisco UCS 6300 Fabric Interconnects, the destination port must also be an unconfigured physical Ethernet port. For Cisco UCS 6332 and Cisco UCS 6332-16UP Fabric Interconnects, you cannot choose Fibre Channel destination ports, but can use unconfigured ethernet ports as a destination for FC traffic monitoring sessions. |
An Ethernet traffic monitoring session can monitor any of the following traffic source and destination ports:
Source Ports |
Destination Ports |
---|---|
You can monitor Fibre Channel traffic using either a Fibre Channel traffic analyzer or an Ethernet traffic analyzer. When Fibre Channel traffic is monitored with an Ethernet traffic monitoring session, the destination traffic is FCoE. The Cisco UCS 6300 Fabric Interconnect supports FC SPAN only on the ingress side. A Fibre Channel port on a Cisco Cisco UCS 6248 fabric interconnect cannot be configured as a source port.
A Fibre Channel traffic monitoring session can monitor any of the following traffic source and destination ports:
Source Ports |
Destination Ports |
---|---|
|
|
When configuring or activating traffic monitoring, consider the following guidelines:
Traffic Monitoring Sessions
A traffic monitoring session is disabled by default when created. To begin monitoring traffic, you must activate the session.
A traffic monitoring session must be unique on any fabric interconnect within the Cisco UCS pod.
You must create each monitoring session with a unique name and unique source.
To monitor traffic from a server, add all vNICs from the service profile corresponding to the server.
You must locate all traffic sources within the same switch as the destination port.
You cannot add the same source in multiple traffic monitoring sessions.
You cannot configure a port as a destination port and a source port.
You cannot configure a member port, of a port channel, individually as a source. If you configure the port channel as a source, all member ports are source ports.
Maximum Supported Active Traffic Monitoring Sessions
Note | Traffic monitoring can impose a significant load on your system resources. To minimize the load, select sources that carry as little unwanted traffic as possible and disable traffic monitoring when it is not needed. |
vNIC
Because a traffic monitoring destination is a single physical port, a traffic monitoring session can monitor only a single fabric. To monitor uninterrupted vNIC traffic across a fabric failover, create two sessions, one per fabric, and connect two analyzers. Add the vNIC as the traffic source using the exact same name for both sessions. If you change the port profile of a virtual machine, you must reconfigure the monitoring session. All associated vNICs used as source ports are removed from monitoring.
vHBA
You can use a vHBA as a source for either an Ethernet or Fibre Channel monitoring session, but it cannot be a source for both simultaneously. When a VHBA is set as the SPAN source, the SPAN destination only receives VN-Tagged frames. It does not receive direct FC frames.
Note | For Cisco UCS 6200 and 6324 FIs, you can only set the source mode to transmit for two sources per Cisco UCS domain. |
Source Ethernet SPAN ports are supported in the following configurations:
Source Type |
Source Mode | ||
---|---|---|---|
on Cisco UCS 6200 FI |
on Cisco UCS 6324 FI |
on Cisco UCS 6332 FI |
|
Ethernet Uplink |
Receive, Transmit, Both |
Receive, Transmit, Both |
Receive, Transmit, Both |
Ethernet Port-Channel |
Receive |
Receive |
Receive, Transmit, Both |
FCoE Uplink |
Receive, Transmit, Both |
Receive, Transmit, Both |
Receive, Transmit, Both |
FCoE Port-Channel |
Receive |
Receive |
Receive, Transmit, Both |
Appliance Port |
Receive, Transmit, Both |
Receive, Transmit, Both |
Receive, Transmit, Both |
FCoE Storage |
Receive, Transmit, Both |
Receive, Transmit, Both |
Receive, Transmit, Both |
Unified Ports |
Receive, Transmit, Both |
Receive, Transmit, Both |
Receive, Transmit, Both |
VLAN |
Receive |
Receive |
Receive |
Static vNIC |
Receive, Transmit, Both |
Receive, Transmit, Both |
Receive, Transmit, Both |
vHBA |
Receive, Transmit, Both |
Receive, Transmit, Both |
Receive, Transmit, Both |
Destination Ethernet SPAN ports are supported in the following configurations:
Session Type |
Admin Speed |
||
---|---|---|---|
on Cisco UCS 6200 FI |
on Cisco UCS 6324 FI |
on Cisco UCS 6332 FI |
|
Ethernet SPAN Ports |
Ethernet Unconfigured at 1 Gbps, 10 Gbps |
Ethernet Unconfigured at 1 Gbps, 10 Gbps |
Ethernet Unconfigured at 1Gbps, 10 Gbps, 40 Gbps |
Source FC SPAN ports are supported in the following configurations:
Source Type |
Source Mode | ||
---|---|---|---|
on Cisco UCS 6200 FI |
on Cisco UCS 6324 FI |
on Cisco UCS 6332 FI |
|
FC Uplink |
Transmit |
Not Supported |
Receive |
FC Port-Channel |
Transmit |
Not Supported |
Receive |
FC Storage |
Transmit |
Not Supported |
Receive |
VSAN |
Not Supported |
Not Supported |
Receive |
vHBA |
Receive, Transmit, Both |
Not Supported |
Receive, Transmit, Both |
Destination FC SPAN ports are supported in the following configurations:
Session Type |
Admin Speed |
||
---|---|---|---|
on Cisco UCS 6200 FI |
on Cisco UCS 6324 FI |
on Cisco UCS 6332 FI |
|
FC SPAN Ports |
FC Uplink at 1 Gbps, 2 Gbps, 4 Gbps, 8 Gbps, Auto |
Not Supported |
FC Unconfigured at 1 Gbps, 2 Gbps, 4 Gbps, 8 Gbps, 16 Gbps, Auto |
FC SPAN Ports |
FC Monitor at 1 Gbps, 2 Gbps, 4 Gbps, 8 Gbps, Auto |
Not Supported |
FC Monitor at 1 Gbps, 2 Gbps, 4 Gbps, 8 Gbps, 16 Gbps, Auto |
Before creating a traffic monitoring session in Cisco UCS Central, ensure that port configuration is set to Global on the Policy Resolution Control page for the Cisco UCS.
Existing traffic monitoring sessions can be activated or deactivated.
Step 1 | Click the Browse Tables icon and choose Fabric Interconnects. |
Step 2 | Choose the fabric interconnect where you want to update traffic monitoring. |
Step 3 | On the fabric interconnect page, click Traffic Monitoring. |
Step 4 | Click on the traffic monitoring session that you want to edit. |
Step 5 | Click the Edit icon. |
Step 6 | Modify the Admin State: |
Step 7 | Click Save. |
Step 1 | Click the Browse Tables icon and choose Fabric Interconnects. |
Step 2 | Choose the fabric interconnect where you want to update traffic monitoring. |
Step 3 | On the fabric interconnect page, click Traffic Monitoring. |
Step 4 | Click on the traffic monitoring session that you want to delete. |
Step 5 | Click the Delete icon. |