Community discussions

 
ashpri
newbie
Topic Author
Posts: 43
Joined: Sun Oct 14, 2018 3:11 am

ROMON Troubleshooting

Wed Feb 06, 2019 9:45 am

I have 2 kinds of MTIK devices behind my main MTIK router.

1. MTIK device that is in the default VLAN, ROMON works.
2. MTIK device that is in VLAN 03, ROMON does not work.

For device #2, mac-ping from TOOLS > ROMON results in timeout, but mac-ping from IP > NEIGHBORS works but shows a -200% packet loss (odd). See following image.

How would you attack this issue? Where do I begin to troubleshoot why devices in VL03 does not show up in ROMON. Could it be a firewall issue on the main router or in the device? Romon is enabled on all devices.

zz1.jpg
You do not have the required permissions to view the files attached to this post.
 
ashpri
newbie
Topic Author
Posts: 43
Joined: Sun Oct 14, 2018 3:11 am

Re: ROMON Troubleshooting  [SOLVED]

Thu Feb 14, 2019 2:16 am

Anyone? No one has ever had issues with not seeing devices in ROMON?

Researching further, it seems to be related to this thread
viewtopic.php?t=99208

And this thread in the ub forums
https://community.ubnt.com/t5/EdgeSwitc ... -p/1313979

"This is known issue caused by UBNT. They block frames with unusual ethernet frame type, which are being used by ROMON."
https://community.ubnt.com/t5/UniFi-Fea ... -p/1976558

Be forewarned, ubiquiti switches and ROMON does not seem to work together.
 
User avatar
vecernik87
Member
Member
Posts: 432
Joined: Fri Nov 10, 2017 8:19 am

Re: ROMON Troubleshooting

Thu Feb 14, 2019 3:43 am

That is true. ROMON frames are not forwarded by UNIFI.

In terms of your magical "-200% packet loss" i have really simple explanation:
You are pinging MAC address. Since you did not specify which interface you want to transmit, it will transmit on ALL interfaces. including bridged ethernets or vlans. (therefore one request gets actually transmitted multiple times)
In addition, anything what has this address will respond. If there are multiple interfaces or devices with the same mac address, they will respond at the same time.
In your case, it is clear that each Seq # is repeated 3 times. That means 3 replies are received per each request.
0 reply per each request = 100% loss
1 reply per each request = 0% loss
2 replies per each request = -100% loss
3 replies per each request = -200% loss
I know the number like this does not make sense, however, there is no other way to summarize packet loss based on amount of transmited requests and received replies.

I tested the same on couple of routers which all had Ether1 in Bridge1 (no VLANs/VRRP etc..) and all interfaces had different MAC. Therefore I had guarantee, that there is only one interface with destination MAC available. When I sent the request without specified source interface, I always received 2 replies. When I specified source interface, I always got only one reply (or none, if I intentionally selected interface which was not connected)
Due to that, I am sure that in my example, request was transmitted by Ether and also by Bridge, which was connected to Ether, so there were actually 2 request frames sent via Ether...
 
ashpri
newbie
Topic Author
Posts: 43
Joined: Sun Oct 14, 2018 3:11 am

Re: ROMON Troubleshooting

Thu Feb 14, 2019 12:41 pm

That means 3 replies are received per each request.
0 reply per each request = 100% loss
1 reply per each request = 0% loss
2 replies per each request = -100% loss
3 replies per each request = -200% loss
I know the number like this does not make sense, however, there is no other way to summarize packet loss based on amount of transmited requests and received replies.

I tested the same on couple of routers which all had Ether1 in Bridge1 (no VLANs/VRRP etc..) and all interfaces had different MAC. Therefore I had guarantee, that there is only one interface with destination MAC available. When I sent the request without specified source interface, I always received 2 replies. When I specified source interface, I always got only one reply (or none, if I intentionally selected interface which was not connected)
Due to that, I am sure that in my example, request was transmitted by Ether and also by Bridge, which was connected to Ether, so there were actually 2 request frames sent via Ether...

Thank you, that makes perfect sense and is indeed the case.

When I picked the physical interface for the mac ping, it is 0% loss (1 reply). In my case, I assume the 3 replies would come from the (1) physical interface, (2) bridge and (3) vlan interface.

Who is online

Users browsing this forum: No registered users and 8 guests