5.1

Perform Broadcast Test
You can perform a broadcast test to resolve MAC addresses. A single host sends a broadcast message to all
other devices on the same network segment.
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
3 Click the Network Virtualization tab.
4 Click the Networks tab.
5 In the Name column, click the virtual wire that you want to test.
6 Click the Hosts tab.
7 Select a host.
8
Click the More Actions (
) icon and select Test Connectivity.
9 In the Test Connectivity Between Hosts in the Network dialog box, click Broadcast
The host you selected in step 7 appears in the Source host field. Select Browse to select a different source
host.
10 Select the size of the test packet.
VXLAN standard size is 1550 bytes (should match the physical infrastructure MTU) without
fragmentation. This allows vShield to check connectivity and verify that the infrastructure is prepared for
VXLAN traffic.
Minimum packet size allows fragmentation. Hence, vShield can check infrastructure connectivity but not
whether the infrastructure is ready for the larger frame size.
11 Click Start Test.
The broadcast test results are displayed.
Viewing Flow Monitoring Data for a VXLAN Virtual Wire
Flow Monitoring is a traffic analysis tool that provides a detailed view of the traffic on your VXLAN virtual
wire that passed through a vShield App. The Flow Monitoring output defines which machines are exchanging
data and over which application. This data includes the number of sessions, packets, and bytes transmitted
per session. Session details include sources, destinations, direction of sessions, applications, and ports being
used. Session details can be used to create firewall allow or block rules.
You can use Flow Monitoring as a forensic tool to detect rogue services and examine outbound sessions. Flow
monitoring data is available for two weeks.
Flow monitoring data is available only if you have vShield App installed on the hosts in the VXLAN virtual
wire clusters.
For more information, see Chapter 12, “vShield App Flow Monitoring,” on page 155.
Working with Firewall Rules for VXLAN Virtual Wires
vShield App provides firewall protection to your VXLAN virtual wires through access policy enforcement.
For more information, see Chapter 13, “vShield App Firewall Management,” on page 161.
Chapter 8 VXLAN Virtual Wires Management
VMware, Inc. 53