NSX supports the monitoring of network traffic within Projects for debugging or troubleshooting purposes. You can also view alarms raised for a Project.
The enterprise administrator can view alarms within the default space and across all projects while the project administrator can only view project-specifc alarms.
The enterprise administrator and the project administrator can use the Traceflow tool to inspect the path of a packet. While the enterprise administrator can run a trace across the default space and across all projects, the project administrator can perform a trace only within a project. Traceflow can be run on VMs and ports that are a part of the same Local Manager site.
To run a trace across projects as an enterprise administrator, ensure that you select All Projects from the project switcher menu. The UI workflow for performing a Traceflow in a project remains the same as it currently exists for the Default view (default space) of your NSX deployment.
For more information on Traceflow, see Perform a Traceflow.
To perform a trace as a project administrator, navigate toin your project space.
Specify the source and destination information according to the traffic type and click Trace. The output includes a table listing the observed packets. Details of entities that belong to the default project and encountered during the trace, are hidden from view in the Traceflow output for the project.
Only the Enterprise Admin can configure port mirroring from the default space for VMs in a project. This feature is currently unavailable to the Project Admin and only the Enterprise Admin can view the results in the default space.
To configure port mirroring for a project, create appropriate Groups in the default space and add your tagged VMs from the project to these groups.
Navigate to Source and Destination., select the session type, and set the groups as
For more information on Port Mirroring, see Add a Port Mirroring Session.
Only the Enterprise Admin can configure IPFIX from the default space for VMs in a project. This feature is currently unavailable to the Project Admin and only the Enterprise Admin can view the results in the default space.
To configure IPFIX for a project, create appropriate Groups in the default space and add your tagged VMs from the project to these groups.
Navigate to Applied To for your IPFIX profile., select the appropriate group under
For more information on IPFIX, see Network Monitoring.
does not support creating port mirroring profiles. However, the org administrator can view the port mirorring profiles that are created on NSX Local Manager sites in read-only mode. The profiles are visible only in the default project. The org administrator can modify the profiles only on the NSX Local Manager.