Solved: Enterprise Agent Cisco Catalyst 9300

AnaCM · ‎11-24-2023

when the thousandeyes agent is installed on the Catalyst 9300 switch.

The tests carried out in thousandeyes with this agent (Cisco Catalyst) towards any target, will the display of the "path visualization" be from the "guest-ipaddress" (vlan 40 for example) ip that was configured on the switch?

That is, the display of any type of test for this agent will be just for the configured vlan (vlan40) or will a thousand eyes discover all the configurations/vlans that the switch has?

cpressle-te · ‎11-27-2023

Hi @AnaCM - I want to add to @balaji.bandi’s response to provide some additional context.

The initial question you asked was specifically if the ThousandEyes enterprise agent would discover all VLANs configured on a switch. Balaji’s reply rightfully points out that the firewall has to be configured to see the full path. However, to add to this: the path that is discovered by the visualization is a direct result of responses of the path that the packets take to reach the target IP address. The ThousandEyes product will only show the path that the probes actually take. We will not show any nodes that are not in the path.

The path that is chosen is based on the routing table of the devices performing the packet routing functions. Using your example, if the agent is configured with a guest-ip address on VLAN 40, then the path will only show the hops that the path takes from VLAN 40 to the target IP address.

If the routing table of the switch tells traffic to go to the upstream router, then it will route packets to the upstream router. If the routing table is configured to send packets to another VLAN, then we will show hops in the path for that VLAN.

The way path visualization works is very similar to traceroute, which increments the TTL value of the packets to discover the path. More information on the path visualization mechanism can be found in our docs here:

https://docs.thousandeyes.com/product-documentation/internet-and-wan-monitoring/tests/network-tests/network-tests-explained#path-visualization

View solution in original post

balaji.bandi · ‎11-24-2023

For path visualisation thousand IP should have added to FW if not that not show complete path as per my testing.

if you like to install thousand eye below blog help you :

https://www.balajibandi.com/?p=1621

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

cpressle-te · ‎11-27-2023

Hi @AnaCM - I want to add to @balaji.bandi’s response to provide some additional context.

The initial question you asked was specifically if the ThousandEyes enterprise agent would discover all VLANs configured on a switch. Balaji’s reply rightfully points out that the firewall has to be configured to see the full path. However, to add to this: the path that is discovered by the visualization is a direct result of responses of the path that the packets take to reach the target IP address. The ThousandEyes product will only show the path that the probes actually take. We will not show any nodes that are not in the path.

The path that is chosen is based on the routing table of the devices performing the packet routing functions. Using your example, if the agent is configured with a guest-ip address on VLAN 40, then the path will only show the hops that the path takes from VLAN 40 to the target IP address.

If the routing table of the switch tells traffic to go to the upstream router, then it will route packets to the upstream router. If the routing table is configured to send packets to another VLAN, then we will show hops in the path for that VLAN.

The way path visualization works is very similar to traceroute, which increments the TTL value of the packets to discover the path. More information on the path visualization mechanism can be found in our docs here:

https://docs.thousandeyes.com/product-documentation/internet-and-wan-monitoring/tests/network-tests/network-tests-explained#path-visualization