Hello there.
First of all, please note that my English is not good so I use Google Translate. ;D
I am using MDS9222i.
Recently, it was reported that "4TB of traffic occurred in the firewall for about 2 hours, and as a result of IP verification, it was generated from Gigabitether1/1 and 1/2 of MDS9222i."
However, since I limited the bandwidth of the interface to 20Mb/s, a situation was created that I could not understand with common sense.
========================================================================
Switch# show fcip summary
-------------------------------------------------------------------------------
Tun prof Eth-if peer-ip Status T W T Enc Comp Bandwidth rtt
E A A max/min (us)
-------------------------------------------------------------------------------
71 71 GE1/1 x.x.x.x TRNK Y N N N A 20M/18M 1000
72 72 GE1/1 x.x.x.x TRNK Y N N N A 20M/18M 1000
81 81 GE1/2 x.x.x.x TRNK Y N N N A 20M/18M 1000
82 82 GE1/2 x.x.x.x TRNK Y N N N A 20M/18M 1000
* show running-config
fcip profile 71
ip address x.x.x.x
tcp max-bandwidth-mbps 20 min-available-bandwidth-mbps 18 round-trip-time-ms 1
fcip profile 72
port 3226
ip address x.x.x.x
tcp max-bandwidth-mbps 20 min-available-bandwidth-mbps 18 round-trip-time-ms 1
fcip profile 81
ip address x.x.x.x
tcp max-bandwidth-mbps 20 min-available-bandwidth-mbps 18 round-trip-time-ms 1
fcip profile 82
port 3226
ip address x.x.x.x
tcp max-bandwidth-mbps 20 min-available-bandwidth-mbps 18 round-trip-time-ms 1
========================================================================
The situation has already occurred, and it was thought to be an incident that occurred while moving the network, and was treated as 'unknown' after several meetings. However, since the business network was paralyzed at the time, we are looking for ways to prevent it from happening again.
What I want to ask here is this.
I know that the Gigabitether 1/1 and 1/2 that I am using can only check the average traffic of the last 5 minutes.
However, it is difficult to monitor because it is viewed in a CLI environment.
Is it possible to check traffic in real time through 'Fabric manager' or 'SNMP'?
Thank you.
