Is there logging with a distributed switch in 6.7

[jkoelker]

I'm working on traffic filtering rules in my 6.7 environment with my distributed switches. I would like to know where to find logging (if there is any) of denies for traffic that is being blocked. Can anyone point me in the right direction? Thanks.

[crmercado · Accepted solution]

Hi!

In the following document you can find how to Capture and Trace Network Packets by Using the pktcap-uw Utility

https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-networking/GUID-5CE50870-81A9-457E-BE56-C3FCEE...

By default the dvs does not filter or block traffic. What type of configuration are you doing?

[jkoelker]

Thanks for the information. I was initially trying to allow based on IP and port for a number of items but I was running into issues with doing it so I'm wanting to know if there is any logging similar to a firewall that could lead me in the right direction for certain packets that were getting blocked. I'll give that document a look through, thanks again!!

[crmercado]

With your dvs you can only configure this at the security level.

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.networking.doc/GUID-E9A41435-4081-4...

Do you have NSX in your environment?

[lalefi]

hi, did you manage to solve the problem?