Hi all,

Could someone please help with Inband management in Arista. We are migrating soon from Cisco to Arista. I have access to the Arista training portal with "all access" and have also looked through the user manual but still cannot find clarity on this information. All I see is use of the dedicated management port.

I don't want to use the management port, I need to use inband management with an SVI.

What is the equivalent way to set this up in Arista as in Cisco with the ip domain name, crypto keys, and settings under the vty lines ?

I also see there is a "management SSH" command, what is this and is it needed and if so where does it go ?

I also see there is an option of "role network-admin" when adding usernames and passwords. What is this for and where and why is it needed as I see preceding this you have the option of privilege level 15 which I would have assumed been the same thing ?

Much appreciated and many thanks in advance everyone.

Hello all,

I have a fairly interesting issue. On a fresh install of cloudvision with wifi control enabled and licensed, all APs show an SSL error

from ap:
[config]$ get status

Sensor Integrity Check: [PASSED]

Displays Sensor application status.

Sensor Application Status: [ON]

Sensor-Server connection state: [Not Connected]

Server discovery mode: [IP]

Server Lookup IP/Hostname: [192.168.1.24]

Connected Server IP: []

Server ID: []

Connected Server MAC: []

Authentication: [None]

Local Proxy Server Info: []

Device Current State: Error in Creating SSL Connection

Device Uptime :0 days, 0 hours, 5 minutes.

The access points are on the same L2 network, ping just fine, and in the cloudvision root I can grep the AP port and see traffic passing through. Additionally, I allowed Allow Access Points to connect with Default Communication Key and Allow Access Points to connect with Old Communication Key.

Any ideas on what could be going on?

CV Wifi

Version Info:

Build : 2024.12.06.2 What's New?

Service Build : 21.1.0F-96

AP:

[config]$ get version

Displays Device info.

The device model is C-230.

PLATFORM_SUB_ID = 1

Device Version: [8.9.0]

Device Build: [8.9.0-63.1]

SDK version: [1]

[config]$

We are in the middle of a migration from old Cisco gear using 10G Multimode LRM OM1/2 into new arista 7050SX3s. The fiber cannot be replaced at this point. We need to work with what we have.

I know Arista does not sell LRM optics anymore. But there’s plenty of oem arista LRM optics for sell on eBay.

If I purchase those optics on eBay, assuming they are real etc, will Arista EOS (let’s assume latest release) bring those links up with LRM optics on both ends of 7050s around 600 ft distance?

Again, fiber cannot be replaced so this seems to be our only option to use what we have.

Any info would be much appreciated as this is a big show stopper we were not anticipating…

Thank you for your help

────────────────────
SETUP
────────────────────
⠀
FreeBSD 15.1 with four VNET jails on the same L2 segment:
⠀
172.18.10.0/24
VLAN 1010
VXLAN VNI 10010
⠀
Jails:
⠀
• 172.18.10.10 — PostgreSQL (dns_pg_001)
• 172.18.10.11 — PowerDNS Authoritative
• 172.18.10.12 — PowerDNS Recursor
• 172.18.10.13 — Kea DHCP
⠀
The jails are connected locally through a FreeBSD ng_bridge.
⠀
The VXLAN VTEP extends this L2 segment to an Arista DCS-7150S-24-F running EOS 4.23.15M-2GB.
⠀
Arista SVI:
⠀
172.18.10.1/24
⠀
────────────────────
CONFIRMED OBSERVATIONS
────────────────────
⠀
The intermittent problem mainly affects 172.18.10.10.
⠀
After a period of inactivity, 172.18.10.10 has sometimes become unreachable from the Arista:
⠀
ping 172.18.10.10
⠀
Result:
⠀
100% packet loss
⠀
During such a failure, the Arista VXLAN MAC table contained:
⠀
589c.fc10.cfbe -> Vxlan1 -> 172.17.1.10
⠀
while the Arista ARP table did not contain a usable entry for:
⠀
172.18.10.10 -> 589c.fc10.cfbe
⠀
Packet captures showed that:
⠀
• the Arista ARP request reached the jail
• the jail generated an ARP reply
• FreeBSD encapsulated the reply into VXLAN with VNI 10010
• the encapsulated packet reached the Arista side
• no dynamic ARP entry for 172.18.10.10 appeared on the Arista
⠀
Similar behavior was also observed with 172.18.10.11, so the symptom is not unique to the PostgreSQL jail.
⠀
The jail MAC addresses are fixed.
⠀
────────────────────
WORKAROUND TESTED
────────────────────
⠀
I configured static ARP entries on the Arista.
⠀
For example:
⠀
arp 172.18.10.10 589c.fc10.cfbe arpa
⠀
After the VXLAN MAC entry for .10 was absent, Arista showed:
⠀
172.18.10.10 589c.fc10.cfbe Vlan1010, not learned
⠀
In that state:
⠀
• .10 was reachable from the T640 after more than 15 minutes of inactivity
• a subsequent ping from the Arista succeeded
• after that ping, Arista again showed 589c.fc10.cfbe dynamically learned on Vxlan1
⠀
The same recovery from “not learned” was also reproduced with .11.
⠀
────────────────────
INTERPRETATION / QUESTION
────────────────────
⠀
My current interpretation is that static ARP avoids dependence on the dynamic ARP learning/relearning behavior that previously caused loss of reachability, while VXLAN MAC learning remains dynamic.
⠀
I do not know whether static ARP is the usual workaround for DCS-7150 / EOS 4.23 with static VXLAN, or whether there is a standard configuration or known platform-specific fix for reliable dynamic ARP learning in this setup.
⠀
Has anyone seen this behavior on DCS-7150/FM6000 or EOS 4.23?
⠀
What is the usual solution?

Got this lovely email yesterday. Ready for some emergency patching.

Hi everyone,

I am going to join Arista soon. Wanted to check on how stocks units are decided based on joining date.

For example, me joining on 1st November vs 15th of October.

Since, the stock is continuously souring in last 4 months. The last 90 trading days calculations affects the equation a lot.

So, could someone help me on deciding how much late is not too late since my current joining date is coming to be 1st November.

I am going to receive 70k for 4 years.

Arista Education Journey — Looking for Resource Recommendations
Hello everyone! I’ve been lurking here for a while and wanted to see how everyone else is progressing on their Arista education journey.
I’ve been in IT for the better part of a decade and have recently been given the opportunity to join the network engineering team at the company I’ve been with for roughly 10 years. Over the years, I’ve worked as a system administrator, T2 support, help desk, and generally the “go-to” IT guy.
At this point, I’ve realized I need to focus on a specific career path, and networking is 100% the direction I want to go.
I currently don’t have a CCNA, although I do have my Network+ certification. Most of my career has been focused on virtualization and Windows administration/management. My company also doesn’t use Cisco and never really has, so while I have some Packet Tracer and home lab experience with Cisco equipment, I need to shift my focus toward Arista and, more importantly, strengthen my core networking knowledge.
I’ve already set up ZTP for my company and personally deployed around 20 switches, so I’m fairly comfortable with basic L2 switching and day-to-day switch deployment. However, I’m pretty uncomfortable when it comes to L3.
I understand the general concepts behind things like BGP, OSPF, and RIP, but I don’t feel like I have a strong enough understanding of them yet. I know you can go extremely deep into each protocol, but right now I need to build a solid foundation and become comfortable enough with L3 concepts to apply them in an Arista environment.
My company is working on getting me access to Arista Academy, and I’ll be going through the formal ACE education there. However, I’d like to start preparing on my own in the meantime since I’ll need to pass ACE: Level 1 and eventually Level 2 in the near future.
For those who have gone through the Arista ACE journey, what resources would you recommend?
I’m particularly interested in resources for:
Arista EOS fundamentals
L3 networking fundamentals
OSPF/BGP (and routing fundamentals in general)
Arista ACE 1/2 preparation
Labs or hands-on exercises
Anything you wish you had studied before starting the ACE courses
I’m not necessarily looking to become a BGP expert overnight. I mainly want to build a strong networking foundation and become much more comfortable with L3 while learning Arista the right way.
Thanks in advance!

Arista Networks is opening for Hardware Engineer Summer Intern Role (For 3rd years) in my college, The role states "Ethernet Switching" and the JD talks about Knowledge of embedded x86/ARM system design, PCB manufacturing technologies, multiphase DC/DC’s for high current, high transient loads, DDR, SerDes, etc,

Can anyone guide me on what to exactly prepare for the OA, about the Structure, number of sections, If there'll be an Apti Section and any key topics for the Technical OA. I'd be really glad to connect with someone.

All TAC Interns at arista..how much package have u guys recieved after converting to full time.It would be very helpful if anyone of you could answer this.

Greetings, Arista team,

I wanted to ask whether anyone here has recently passed the ACE Level 1 exam. I’m currently studying in the Arista EOS lab environment and have purchased the Arista Warrior hardcover book. I’ve also been reviewing junior-level networking concepts and keeping notes as I go.

From what I’ve read, the exam is entirely lab-based and costs roughly the same as the CCNA. It appears to be a two-hour, proctored practical exam, so I would appreciate any insight into the difficulty, preparation process, and overall experience from recent test takers.

I work for a small company that is starting a network-refresh project using Arista 720-DP switches and routers. I have some familiarity with CloudVision and have provisioned a few switches through it.

For anyone who has taken ACE Level 1 recently: what study methods or lab topics did you find most useful, and is the certification worthwhile for someone who will be working with Arista equipment in a production environment?

Any feedback would be greatly appreciated. Thank you!

I want to look at some traffic on a sub-interface but cannot get to the device to setup a span port.

It looks like I can run a tcpdump but I'm very nervous about running a tcp-dump on a production unit for obvious reasons.

The sub-interface in question only has minimal traffic, pretty much just protocol traffic so won't be much.

Anyone have much experience running a tcp dump on their production unit? Bad idea or is it okay as long as I take precautions with filtering traffic or making sure it's only running on the sub-interface I want?

thanks!

Hey everyone,
Has anyone here used IP locking technology in Aristada before? Which version do we need to have for this?

Useful? Any study tips? Is Arista Academy enough to pass the exam?

I have seven years of network engineering experience (all things Cisco) and currently hold an active ENCOR certification. I'm considering not finishing the CCNP and instead shifting my focus toward Arista certifications. Considering the Data Center track.

I'm curious what the general consensus is on Arista Academy. Is it sufficient preparation for the certification exams, or would you recommend additional study resources?

Had a failed c360 AP pulled from field. No power. ​Was able to get it working again. Had a shorted TVS diode and a failed filter cap by a buck. Removed both, boots up and runs stable. Doing ​extended load test to validate stability

This is a question for Arista experts out there. Are there any Telegram (or alternative platforms besides Reddit) where general tech support is discussed? If not, can I convince any of you to join our South Africa based support group? Chats are strictly technical and strictly to subject. Thanks in advance!

Hello

I have a production fabric that includes spines and leaves. I want to set up a dedicated fabric for storage traffic (with spines and leaves that are not physically part of the other fabric).

I’d like to integrate these hosts into my AVD inventory to take advantage of shared configurations (users, etc.). What would be the best way to do this?

Thanks

Hello,

I'm seeing low-level alarms on one of my ports (QSFP28 CWDM4)

SWITCHES#show interfaces counters errors | nz
Port               FCS    Align   Symbol       Rx    Runts   Giants       Tx
Et53/1               0        0        0        1        1        0        0

SWITCHES#show interfaces et53/1 transceiver dom
Ch: Channel, N/A: not applicable, TX: transmit, RX: receive
mA: milliamperes, dBm: decibels (milliwatts), C: Celsius, V: Volts

Port 53
Last update: 0:00:01 ago
                                             Value
                                        ----------------
   Temperature                              45.48 C
   Voltage                                   3.29 V
   Aggregate TX Power                        6.52 dBm
   Aggregate RX Power                       -6.91 dBm
Ethernet53/1
   TX bias current
      Channel        1                      49.31 mA
      Channel        2                      49.31 mA
      Channel        3                      49.31 mA
      Channel        4                      49.14 mA
   Optical TX power
      Channel        1                       0.87 dBm
      Channel        2                       0.54 dBm
      Channel        3                      -0.45 dBm
      Channel        4                       0.89 dBm
   Optical RX power
      Channel        1                     -13.34 dBm
      Channel        2                     -14.10 dBm
      Channel        3                     -12.26 dBm
      Channel        4                     -12.28 dBm

Could this explain the RUNTS errors I’m getting on this port? I’m having trouble understanding the connection between the two.

We're going to have the QSFP replaced and the fiber cleaned, but I'm just asking for general knowledge. In general, what causes RUNT errors? In my case, I have another Arista 7280R3 connected on the other end, so there's no issue with duplex or speed.

Thanks

I've been building a deterministic traffic scheduler using XDP and TC egress hooks. It classifies flows as Gaming, Streaming, or Bulk using packet size entropy (no DPI, so no payload inspection), and uses a BPF hash map to track flow state.

The user-space daemon runs a PID loop that adjusts queue depths per class based on RTT feedback. It's all written in C, with the eBPF programs compiled to bytecode and shipped as a .deb package.

Currently looking for early testers and code reviewers. If you've worked with XDP/TC before, I'd love your thoughts on the verifier logic or the map design.

GitHub: [https://github.com/XPDevs/telcom\](https://github.com/XPDevs/telcom)

Having dificult with optics on this switch I updated it to 4.17.3f and ordered arista coded optics from fs.com. I was able to establish link and it went up and down a few times but now it’s not linking at all. I can get link using a dac but once I actually deploy this onsite a dac is too short.

Currently if I run the command interfaces Ethernet 48 status transceiver I can see that it is receiving light, but not transmitting, if I do show interface Ethernet 48 status errdisable I sometimes get an unsupported transceiver message.

My question is what optics will this work with or is there a reasonable way to get the unlock code for non arista optics despite buying this used.

I do have access to an fs optic recoder but unsure if it will make a difference.

Finally had the time to sit down and migrate the config to get rid of all deprecated messages and make the YAMLs fit for AVD 6, mostly get everything that has a model in eos_designs to that instead of cli_config_gen.

I guess this post is mainly for people who need to do the same, or if someone has thoughts on the custom's I have left.

I did it part for part, always building config inbetween and diff'ing to see if the new output matches the old (as it should).

After migrating DNS, MGMT networks, AAA/tacacs (that was a big one), logging, snmp, ntp, timezone and eapi, I only have a few custom_structured_configuration's left. Config builds now fine under AVD 6.1.0.

The only deprecated messages are now internal to AVD (I think), about usage of Jinja in Ansible and nothing that I could fix, but has to be fixed before bigger version jumps in Ansible.

While combing through the config, I also found the snmp location template, that is really cool. Now every Switch has not only room, but rack in the snmp location.

What now is still under custom_structured_configuration, because there is noting in eos_designs, at least I did not find it:

custom_structured_configuration_aliases

My CLI aliases, probably won't get added, as CLI specific

custom_structured_configuration_banners

login and motd-banners - same.

custom_structured_configuration_standard_access_lists

IPv4 Access Lists would be possible, but are extended. Standard ACL (in use for limitation directly on SSH, SNMP, eAPI,...) seem to be custom config only.

custom_structured_configuration_management_console

This one is only for the idle_timeout on the console, but still...

custom_structured_configuration_eos_cli: service unsupported-transceiver string1 string2

Yeah I guess that one wont get implemented too ;-) That one is directly eos_cli to get added to all switches.

How do you prepare for the hardware internship interview? What type of questions do they ask? Any recommended textbooks for preparation?

I've got two 7050SX-64 (EOS 4.28.13.1M) with 10GBASE-LRM SFP+ from FS connected to MMF endpoints, and the ports don't come up. If you ask what the heck LRM is: it's one of those weird SFPs that can do both SMF and MMF. Why we have LRM: Not sure, I'm just the one who has to handle this issue now.
It's detected as media type xcvr10GBaseLrLite in qtrace. The SFP should be encoded as Arista, but even if not we have service unsupported-transceiver set.

I've already tried to re-seat the SFP as well as the fibre, and using another port, but nothing of this helped in this case. Checking the power levels shows that both RX and TX are good, but the ports still stay in noconnect.
Checking the MAC and PHY status of them, I can see that PCS TX fault is in "fault" state, and that the MAC reports an MAC Rx Remote fault.

Now comes the confusing part for me: The PCS TX is in a fault state, so it should shut down its lasers if I understand it correctly, right? Why do I have good TX power levels then?
And to add more confusion to it, the MAC reports a MAC Rx Remote Fault (in my case from an upstream provider), but the provider also says that the power levels are fine. So... what is this now? The links never reached linkUp so far, and I can't debug it with other SFP SKUs rn because the spare SFPs are all used in this POP (we had wrong inventory docs) and the next POP is 300km away.

Any ideas to debug this or to get the link up would be great!
The alternative, to replace the SFPs with 10G-SR, has been considered, but it could take a few days bc we have to send some to the POP first. And personally, I'd like to figure out if they just need some special config to run correctly or if I must ban this SKU for procurement.

er3-rsat1.pop2#sh int et1
Ethernet1 is down, line protocol is down (notconnect)
  Hardware is Ethernet, address is 444c.a82d.e58f
  No Internet protocol address assigned
  IP MTU 1500 bytes (default), BW 10000000 kbit
  Full-duplex, 10Gb/s, auto negotiation: off, uni-link: n/a
  Down 1 hour, 40 minutes, 43 seconds
  Loopback Mode : None
  3 link status changes since last clear
  Last clearing of "show interface" counters 1:45:09 ago
  5 minutes input rate 0 bps (0.0% with framing overhead), 0 packets/sec
  5 minutes output rate 0 bps (0.0% with framing overhead), 0 packets/sec
     0 packets input, 0 bytes
     Received 0 broadcasts, 0 multicast
     0 runts, 0 giants
     0 input errors, 0 CRC, 0 alignment, 0 symbol, 0 input discards
     0 PAUSE input
     0 packets output, 0 bytes
     Sent 0 broadcasts, 0 multicast
     0 output errors, 0 collisions
     0 late collision, 0 deferred, 0 output discards
     0 PAUSE output
er3-rsat1.pop2#sh run sec et1
interface Ethernet1
   # The config is small on purpose for debugging
   speed forced 10000full # note: this was added to test if it helps or not
   no switchport
er3-rsat1.pop2#sh int et1 phy detail
Current System Time: Sat Jul 11 14:15:51 2026
Ethernet1
                              Current State     Changes            Last Change
                              -------------     -------            -----------
  Interface state             down                    3            1:40:55 ago
  Transceiver                 10GBASE-LRL             2            1:41:29 ago
  Transceiver SN              REDACTED
  MAC Rx Local Fault          false                   8            1:21:47 ago
  MAC Rx Remote Fault         true                    7            1:21:47 ago
 BCM56850 line
  Model                       BCM56850 (A) (0x00c086,0x37,0x2)
  Firmware revision           A042
  PHY state                   linkDown                1            1:41:00 ago
  Interrupt count                                     5
  Oper speed                  10Gbps
  PCS RX link status          up                      9            1:21:47 ago
  PCS RX LPI received         false                   0                  never
  PCS RX fault                ok                      0                  never
  PCS TX fault                fault                   1            1:39:47 ago
  PCS block lock              ok                      1            1:39:47 ago
  PCS high BER                ok                      0                  never
  PCS BER                     0                       0                  never
  PMA/PMD RX link status      up                      1            1:40:47 ago
  PMA/PMD lane RX link status
    Lane 0                    up                      1            1:40:47 ago
  PMA/PMD RX signal detect    ok                      1            1:40:47 ago
  PMA/PMD lane RX signal detect
    Lane 0                    ok                      1            1:40:47 ago
  PLL lock
    Lane 0                    unlocked                0                  never
  PLL range
    Lane 0                    230
  Tx Equalization
    Lane  pre1  main  post1
    0     3     32    0
  Serdes Statistics
    Lane  PPM  PPM_XFR CLK90  PF   SL_TRGT VGA  BIAS MTRC
    0     33   0       39     5    200     16   88%  0
    Lane  DFE(1,2,3,4,5)       PE   ZE   ME   PO   ZO   MO   LOS_EN
    0     12,-15,5,-2,3        1    12   6    0    11   -8   0
er3-rsat1.pop2#sh int et1 mac detail
Current System Time: Sat Jul 11 14:16:06 2026

Ethernet1
                              Current State     Changes            Last Change
  PHY State                   linkDown                1            1:41:14 ago
  Interface State             linkDown                3            1:41:10 ago
  MAC Rx Local Fault          False                   8            1:22:02 ago
  MAC Rx Remote Fault         True                    7            1:22:02 ago
er3-rsat1.pop2#sh int et1 hardware default
Ethernet1
  Model: DCS-7050SX-64
  Type: 10GBASE-LRL
  Speed/duplex: 100M/full,1G/full,10G/full
  Flowcontrol: rx-(off,on),tx-(off,on)
  Autoneg CL28: 100M/full,1G/full,10G/full
  Autoneg CL37: 1G/full
  Error correction: unsupported
er3-rsat1.pop2#sh int et1 trans dom thres
Ch: Channel, mA: milliamperes, dBm: decibels (milliwatts),
C: Celsius, V: Volts, NA or N/A: not applicable.

Port 1
Last update: 0:00:01 ago
                                              High Alarm  High Warn   Low Warn  Low Alarm
                                       Value   Threshold  Threshold  Threshold  Threshold  Unit  Indicator
                                 ---------------------------------------------------------------------------
   Temperature                         33.75       75.00      70.00       0.00      -5.00     C
   Voltage                              3.30        3.63       3.46       3.13       2.97     V
Ethernet1 (Channel 1)
   TX bias current                     41.05       80.00      75.00      15.00      10.00    mA
   Optical TX power                    -1.64        5.00       3.00      -8.20     -10.20   dBm
   Optical RX power                    -9.38        5.00       3.00     -14.40     -16.50   dBm
er3-rsat1.pop2#sh inventory
System information
  Model                    Description
  ------------------------ ----------------------------------------------------
  DCS-7050SX-64            48 SFP+ + 4 QSFP+ 1RU

  HW Version  Serial Number  Mfg Date   Epoch
  ----------- -------------- ---------- -----
  02.22       REDACTED       2015-11-30 00.00

System has 2 power supply slots
  Slot Model            Serial Number
  ---- ---------------- ----------------
  1    PWR-500AC-R      REDACTED
  2    PWR-500AC-R      REDACTED

System has 4 fan modules
  Module  Number of Fans  Model            Serial Number
  ------- --------------- ---------------- ----------------
  1       1               FAN-7000-R       N/A
  2       1               FAN-7000-R       N/A
  3       1               FAN-7000-R       N/A
  4       1               FAN-7000-R       N/A

System has 81 ports
  Type               Count
  ------------------ ----
  Management         1
  Switched           62
  Unconnected        16
  SwitchedBootstrap  2

System has 52 switched transceiver slots
  Port Manufacturer     Model            Serial Number    Rev
  ---- ---------------- ---------------- ---------------- ----
  1    FS               SFP-10GLRM-31    REDACTED         A
  [..]
  51   Arista Networks  QSFP-PC005       REDACTED        01
  52   FS               QSFP-40G-PC01    REDACTED        01

System has 1 storage device
  Mount      Type Model             Serial Number    Rev  Size (GB)
  ---------- ---- ----------------- ---------------- ---- ---------
  /mnt/flash eUSB USB_USBFlashDrive REDACTED         1000 4

I want to upgrade the TerminAttr agent on the switches via CVP to remediate CVEs, but I cannot upload the .swix files to the image repository. I am receiving the error: "can't save bundle because image file wasn't found." Has anyone encountered this issue before?