06-28-2021 12:00 PM
Hello Team,
I was able to load switches of different types (ERS-Series, EXOS-Series, VSP-Series) in XIQ-SE Analytytics, but no values for Application Response Time or Network Response Time are displayed and evaluated in the Application Flows. All switches have current firmware and the configuration on the switches with regard to application telemetry is also available. Does anyone here have the same phenomenon and/or is there already a solution or workaround for this?
Thanks - Matthias
Solved! Go to Solution.
06-30-2021 01:11 PM
Thanks for your patience here while I looked in to this for you. The missing application/network response times is usually a condition where netflow is being sent to analytics but not the tunneled client traffic.
In order for analytics to make calculations on the delay between certain client traffic it needs to be given that client traffic.
With ERS, EXOS, VSP I think they’re supposed to be using app telemetry which encapsulates the client traffic in an erspan tunnel. Looks like port 6343 if I’m looking at the right one.
This article might be able to help:
https://extremeportal.force.com/ExtrArticleDetail?an=000082115
07-05-2021 12:39 PM
Voila: GTAC Case Number: 02413743
Thanx - Matthias
06-30-2021 02:24 PM
Hi Sam,
“tcpdump -i eth0 port 6343” on analytics appliance is showing sFlowv5 data as expected of all configured devices.
“ tcpdump -i eth0 proto 47“ on analytics appliance is showing nothing.
Most of all relevant devices were onboarded as described and are showing the right ERSPAN-IP and/or Exporter-IP.
Thanx - Matthias
06-30-2021 01:11 PM
Thanks for your patience here while I looked in to this for you. The missing application/network response times is usually a condition where netflow is being sent to analytics but not the tunneled client traffic.
In order for analytics to make calculations on the delay between certain client traffic it needs to be given that client traffic.
With ERS, EXOS, VSP I think they’re supposed to be using app telemetry which encapsulates the client traffic in an erspan tunnel. Looks like port 6343 if I’m looking at the right one.
This article might be able to help:
https://extremeportal.force.com/ExtrArticleDetail?an=000082115
06-29-2021 05:20 AM
Hi Sam, thanks for your reply. The XIQ runs in a pure Lab environment and therefore has no support contract. However, exactly this is asked for immediately if I would open a case in the GTAC, which I can do with pleasure, but will certainly not lead to any success because of the missing contract. How should I proceed in this case?
Thanx - Matthias