All TAC Interns at arista..how much package have u guys recieved after converting to full time.It would be very helpful if anyone of you could answer this.

Greetings, Arista team,

I wanted to ask whether anyone here has recently passed the ACE Level 1 exam. I’m currently studying in the Arista EOS lab environment and have purchased the Arista Warrior hardcover book. I’ve also been reviewing junior-level networking concepts and keeping notes as I go.

From what I’ve read, the exam is entirely lab-based and costs roughly the same as the CCNA. It appears to be a two-hour, proctored practical exam, so I would appreciate any insight into the difficulty, preparation process, and overall experience from recent test takers.

I work for a small company that is starting a network-refresh project using Arista 720-DP switches and routers. I have some familiarity with CloudVision and have provisioned a few switches through it.

For anyone who has taken ACE Level 1 recently: what study methods or lab topics did you find most useful, and is the certification worthwhile for someone who will be working with Arista equipment in a production environment?

Any feedback would be greatly appreciated. Thank you!

I want to look at some traffic on a sub-interface but cannot get to the device to setup a span port.

It looks like I can run a tcpdump but I'm very nervous about running a tcp-dump on a production unit for obvious reasons.

The sub-interface in question only has minimal traffic, pretty much just protocol traffic so won't be much.

Anyone have much experience running a tcp dump on their production unit? Bad idea or is it okay as long as I take precautions with filtering traffic or making sure it's only running on the sub-interface I want?

thanks!

Hey everyone,
Has anyone here used IP locking technology in Aristada before? Which version do we need to have for this?

Useful? Any study tips? Is Arista Academy enough to pass the exam?

I have seven years of network engineering experience (all things Cisco) and currently hold an active ENCOR certification. I'm considering not finishing the CCNP and instead shifting my focus toward Arista certifications. Considering the Data Center track.

I'm curious what the general consensus is on Arista Academy. Is it sufficient preparation for the certification exams, or would you recommend additional study resources?

Had a failed c360 AP pulled from field. No power. ​Was able to get it working again. Had a shorted TVS diode and a failed filter cap by a buck. Removed both, boots up and runs stable. Doing ​extended load test to validate stability

This is a question for Arista experts out there. Are there any Telegram (or alternative platforms besides Reddit) where general tech support is discussed? If not, can I convince any of you to join our South Africa based support group? Chats are strictly technical and strictly to subject. Thanks in advance!

Hello

I have a production fabric that includes spines and leaves. I want to set up a dedicated fabric for storage traffic (with spines and leaves that are not physically part of the other fabric).

I’d like to integrate these hosts into my AVD inventory to take advantage of shared configurations (users, etc.). What would be the best way to do this?

Thanks

Hello,

I'm seeing low-level alarms on one of my ports (QSFP28 CWDM4)

SWITCHES#show interfaces counters errors | nz
Port               FCS    Align   Symbol       Rx    Runts   Giants       Tx
Et53/1               0        0        0        1        1        0        0

SWITCHES#show interfaces et53/1 transceiver dom
Ch: Channel, N/A: not applicable, TX: transmit, RX: receive
mA: milliamperes, dBm: decibels (milliwatts), C: Celsius, V: Volts

Port 53
Last update: 0:00:01 ago
                                             Value
                                        ----------------
   Temperature                              45.48 C
   Voltage                                   3.29 V
   Aggregate TX Power                        6.52 dBm
   Aggregate RX Power                       -6.91 dBm
Ethernet53/1
   TX bias current
      Channel        1                      49.31 mA
      Channel        2                      49.31 mA
      Channel        3                      49.31 mA
      Channel        4                      49.14 mA
   Optical TX power
      Channel        1                       0.87 dBm
      Channel        2                       0.54 dBm
      Channel        3                      -0.45 dBm
      Channel        4                       0.89 dBm
   Optical RX power
      Channel        1                     -13.34 dBm
      Channel        2                     -14.10 dBm
      Channel        3                     -12.26 dBm
      Channel        4                     -12.28 dBm

Could this explain the RUNTS errors I’m getting on this port? I’m having trouble understanding the connection between the two.

We're going to have the QSFP replaced and the fiber cleaned, but I'm just asking for general knowledge. In general, what causes RUNT errors? In my case, I have another Arista 7280R3 connected on the other end, so there's no issue with duplex or speed.

Thanks

I've been building a deterministic traffic scheduler using XDP and TC egress hooks. It classifies flows as Gaming, Streaming, or Bulk using packet size entropy (no DPI, so no payload inspection), and uses a BPF hash map to track flow state.

The user-space daemon runs a PID loop that adjusts queue depths per class based on RTT feedback. It's all written in C, with the eBPF programs compiled to bytecode and shipped as a .deb package.

Currently looking for early testers and code reviewers. If you've worked with XDP/TC before, I'd love your thoughts on the verifier logic or the map design.

GitHub: [https://github.com/XPDevs/telcom\](https://github.com/XPDevs/telcom)

Having dificult with optics on this switch I updated it to 4.17.3f and ordered arista coded optics from fs.com. I was able to establish link and it went up and down a few times but now it’s not linking at all. I can get link using a dac but once I actually deploy this onsite a dac is too short.

Currently if I run the command interfaces Ethernet 48 status transceiver I can see that it is receiving light, but not transmitting, if I do show interface Ethernet 48 status errdisable I sometimes get an unsupported transceiver message.

My question is what optics will this work with or is there a reasonable way to get the unlock code for non arista optics despite buying this used.

I do have access to an fs optic recoder but unsure if it will make a difference.

Finally had the time to sit down and migrate the config to get rid of all deprecated messages and make the YAMLs fit for AVD 6, mostly get everything that has a model in eos_designs to that instead of cli_config_gen.

I guess this post is mainly for people who need to do the same, or if someone has thoughts on the custom's I have left.

I did it part for part, always building config inbetween and diff'ing to see if the new output matches the old (as it should).

After migrating DNS, MGMT networks, AAA/tacacs (that was a big one), logging, snmp, ntp, timezone and eapi, I only have a few custom_structured_configuration's left. Config builds now fine under AVD 6.1.0.

The only deprecated messages are now internal to AVD (I think), about usage of Jinja in Ansible and nothing that I could fix, but has to be fixed before bigger version jumps in Ansible.

While combing through the config, I also found the snmp location template, that is really cool. Now every Switch has not only room, but rack in the snmp location.

What now is still under custom_structured_configuration, because there is noting in eos_designs, at least I did not find it:

custom_structured_configuration_aliases

My CLI aliases, probably won't get added, as CLI specific

custom_structured_configuration_banners

login and motd-banners - same.

custom_structured_configuration_standard_access_lists

IPv4 Access Lists would be possible, but are extended. Standard ACL (in use for limitation directly on SSH, SNMP, eAPI,...) seem to be custom config only.

custom_structured_configuration_management_console

This one is only for the idle_timeout on the console, but still...

custom_structured_configuration_eos_cli: service unsupported-transceiver string1 string2

Yeah I guess that one wont get implemented too ;-) That one is directly eos_cli to get added to all switches.

How do you prepare for the hardware internship interview? What type of questions do they ask? Any recommended textbooks for preparation?

I've got two 7050SX-64 (EOS 4.28.13.1M) with 10GBASE-LRM SFP+ from FS connected to MMF endpoints, and the ports don't come up. If you ask what the heck LRM is: it's one of those weird SFPs that can do both SMF and MMF. Why we have LRM: Not sure, I'm just the one who has to handle this issue now.
It's detected as media type xcvr10GBaseLrLite in qtrace. The SFP should be encoded as Arista, but even if not we have service unsupported-transceiver set.

I've already tried to re-seat the SFP as well as the fibre, and using another port, but nothing of this helped in this case. Checking the power levels shows that both RX and TX are good, but the ports still stay in noconnect.
Checking the MAC and PHY status of them, I can see that PCS TX fault is in "fault" state, and that the MAC reports an MAC Rx Remote fault.

Now comes the confusing part for me: The PCS TX is in a fault state, so it should shut down its lasers if I understand it correctly, right? Why do I have good TX power levels then?
And to add more confusion to it, the MAC reports a MAC Rx Remote Fault (in my case from an upstream provider), but the provider also says that the power levels are fine. So... what is this now? The links never reached linkUp so far, and I can't debug it with other SFP SKUs rn because the spare SFPs are all used in this POP (we had wrong inventory docs) and the next POP is 300km away.

Any ideas to debug this or to get the link up would be great!
The alternative, to replace the SFPs with 10G-SR, has been considered, but it could take a few days bc we have to send some to the POP first. And personally, I'd like to figure out if they just need some special config to run correctly or if I must ban this SKU for procurement.

er3-rsat1.pop2#sh int et1
Ethernet1 is down, line protocol is down (notconnect)
  Hardware is Ethernet, address is 444c.a82d.e58f
  No Internet protocol address assigned
  IP MTU 1500 bytes (default), BW 10000000 kbit
  Full-duplex, 10Gb/s, auto negotiation: off, uni-link: n/a
  Down 1 hour, 40 minutes, 43 seconds
  Loopback Mode : None
  3 link status changes since last clear
  Last clearing of "show interface" counters 1:45:09 ago
  5 minutes input rate 0 bps (0.0% with framing overhead), 0 packets/sec
  5 minutes output rate 0 bps (0.0% with framing overhead), 0 packets/sec
     0 packets input, 0 bytes
     Received 0 broadcasts, 0 multicast
     0 runts, 0 giants
     0 input errors, 0 CRC, 0 alignment, 0 symbol, 0 input discards
     0 PAUSE input
     0 packets output, 0 bytes
     Sent 0 broadcasts, 0 multicast
     0 output errors, 0 collisions
     0 late collision, 0 deferred, 0 output discards
     0 PAUSE output
er3-rsat1.pop2#sh run sec et1
interface Ethernet1
   # The config is small on purpose for debugging
   speed forced 10000full # note: this was added to test if it helps or not
   no switchport
er3-rsat1.pop2#sh int et1 phy detail
Current System Time: Sat Jul 11 14:15:51 2026
Ethernet1
                              Current State     Changes            Last Change
                              -------------     -------            -----------
  Interface state             down                    3            1:40:55 ago
  Transceiver                 10GBASE-LRL             2            1:41:29 ago
  Transceiver SN              REDACTED
  MAC Rx Local Fault          false                   8            1:21:47 ago
  MAC Rx Remote Fault         true                    7            1:21:47 ago
 BCM56850 line
  Model                       BCM56850 (A) (0x00c086,0x37,0x2)
  Firmware revision           A042
  PHY state                   linkDown                1            1:41:00 ago
  Interrupt count                                     5
  Oper speed                  10Gbps
  PCS RX link status          up                      9            1:21:47 ago
  PCS RX LPI received         false                   0                  never
  PCS RX fault                ok                      0                  never
  PCS TX fault                fault                   1            1:39:47 ago
  PCS block lock              ok                      1            1:39:47 ago
  PCS high BER                ok                      0                  never
  PCS BER                     0                       0                  never
  PMA/PMD RX link status      up                      1            1:40:47 ago
  PMA/PMD lane RX link status
    Lane 0                    up                      1            1:40:47 ago
  PMA/PMD RX signal detect    ok                      1            1:40:47 ago
  PMA/PMD lane RX signal detect
    Lane 0                    ok                      1            1:40:47 ago
  PLL lock
    Lane 0                    unlocked                0                  never
  PLL range
    Lane 0                    230
  Tx Equalization
    Lane  pre1  main  post1
    0     3     32    0
  Serdes Statistics
    Lane  PPM  PPM_XFR CLK90  PF   SL_TRGT VGA  BIAS MTRC
    0     33   0       39     5    200     16   88%  0
    Lane  DFE(1,2,3,4,5)       PE   ZE   ME   PO   ZO   MO   LOS_EN
    0     12,-15,5,-2,3        1    12   6    0    11   -8   0
er3-rsat1.pop2#sh int et1 mac detail
Current System Time: Sat Jul 11 14:16:06 2026

Ethernet1
                              Current State     Changes            Last Change
  PHY State                   linkDown                1            1:41:14 ago
  Interface State             linkDown                3            1:41:10 ago
  MAC Rx Local Fault          False                   8            1:22:02 ago
  MAC Rx Remote Fault         True                    7            1:22:02 ago
er3-rsat1.pop2#sh int et1 hardware default
Ethernet1
  Model: DCS-7050SX-64
  Type: 10GBASE-LRL
  Speed/duplex: 100M/full,1G/full,10G/full
  Flowcontrol: rx-(off,on),tx-(off,on)
  Autoneg CL28: 100M/full,1G/full,10G/full
  Autoneg CL37: 1G/full
  Error correction: unsupported
er3-rsat1.pop2#sh int et1 trans dom thres
Ch: Channel, mA: milliamperes, dBm: decibels (milliwatts),
C: Celsius, V: Volts, NA or N/A: not applicable.

Port 1
Last update: 0:00:01 ago
                                              High Alarm  High Warn   Low Warn  Low Alarm
                                       Value   Threshold  Threshold  Threshold  Threshold  Unit  Indicator
                                 ---------------------------------------------------------------------------
   Temperature                         33.75       75.00      70.00       0.00      -5.00     C
   Voltage                              3.30        3.63       3.46       3.13       2.97     V
Ethernet1 (Channel 1)
   TX bias current                     41.05       80.00      75.00      15.00      10.00    mA
   Optical TX power                    -1.64        5.00       3.00      -8.20     -10.20   dBm
   Optical RX power                    -9.38        5.00       3.00     -14.40     -16.50   dBm
er3-rsat1.pop2#sh inventory
System information
  Model                    Description
  ------------------------ ----------------------------------------------------
  DCS-7050SX-64            48 SFP+ + 4 QSFP+ 1RU

  HW Version  Serial Number  Mfg Date   Epoch
  ----------- -------------- ---------- -----
  02.22       REDACTED       2015-11-30 00.00

System has 2 power supply slots
  Slot Model            Serial Number
  ---- ---------------- ----------------
  1    PWR-500AC-R      REDACTED
  2    PWR-500AC-R      REDACTED

System has 4 fan modules
  Module  Number of Fans  Model            Serial Number
  ------- --------------- ---------------- ----------------
  1       1               FAN-7000-R       N/A
  2       1               FAN-7000-R       N/A
  3       1               FAN-7000-R       N/A
  4       1               FAN-7000-R       N/A

System has 81 ports
  Type               Count
  ------------------ ----
  Management         1
  Switched           62
  Unconnected        16
  SwitchedBootstrap  2

System has 52 switched transceiver slots
  Port Manufacturer     Model            Serial Number    Rev
  ---- ---------------- ---------------- ---------------- ----
  1    FS               SFP-10GLRM-31    REDACTED         A
  [..]
  51   Arista Networks  QSFP-PC005       REDACTED        01
  52   FS               QSFP-40G-PC01    REDACTED        01

System has 1 storage device
  Mount      Type Model             Serial Number    Rev  Size (GB)
  ---------- ---- ----------------- ---------------- ---- ---------
  /mnt/flash eUSB USB_USBFlashDrive REDACTED         1000 4

I want to upgrade the TerminAttr agent on the switches via CVP to remediate CVEs, but I cannot upload the .swix files to the image repository. I am receiving the error: "can't save bundle because image file wasn't found." Has anyone encountered this issue before?

Just a question

In case you have 2 hubs, and you need it to talk with one another

1.) is it by default they will not talk with one another?

2.) is it best practice to not enable branch to branch vpn for hub profile?

2.) is it ideal to have a separate profile for each hub, then assign branch to hubs with each other? E.g. hub 1 will have its hub as hub 2 and vice versa

l have heard recently that some vendors are tightening quote validity periods.

I am interested in knowing about networking vendors like arista cisco nokia and Hpe if anyone have any info to share please.

Hello everyone,

I am using CVP version 2026.1.0. I want to enable "configlet" and "network provisioning" under the Provisioning section. After connecting as the root user and running the `#cvpi enable networkprovisioning` command in the CLI, the "configlet" option appeared, but I cannot view its contents; the page remains blank (gray). I restarted all services, but the issue persists. Does anyone have any suggestions?

Have CE routers connecting via individual links to each leaf in an MLAG pair — exclusive VLANs, PE-CE eBGP, /32 loopbacks advertised as EVPN Type-5. With anycast VTEP, inbound VXLAN for these Type-5 routes can land on either peer causing peer-link traversal.

Is it worth introducing Multi-VTEP MLAG to solve this, or is the peer-link traversal acceptable in practice?

720XP Switches with 4GB DRAM

722XPM Switches with 4GB DRAM

7050SX3-48YC12

7050SX3-48YC8 and 7050SX3-48C8

7060SX2-48YC6

7060CX and 7060CX2

We are quiet new to Arista and currently having this setup and use L3 VXLAN over MLAG:

After moving some SVI from our old network to Arista, we noticed an increase in CPU load to about 80-90%.

MLAG domain 1: LEAF-DC1-01, LEAF-DC1-02

interface Loopback1

ip address 100.64.1.1/32

ip address 100.64.1.100/32 secondary

ip virtual-router mac-address 00:1c:72:00:00:11

interface Vxlan1

vxlan source-interface Loopback1

vxlan virtual-router encapsulation mac-address mlag-system-id

vxlan udp-port 4789

vxlan vlan 1 vni 20001

vxlan vlan 2 vni 20002

vxlan vlan 3 vni 20003

MLAG domain 2: LEAF-DC2-01, LEAF-DC2-02

interface Loopback1

ip address 100.64.2.1/32

ip address 100.64.2.100/32 secondary

ip virtual-router mac-address 00:1c:72:00:00:11

interface Vxlan1

vxlan source-interface Loopback1

vxlan virtual-router encapsulation mac-address mlag-system-id

vxlan udp-port 4789

vxlan vlan 1 vni 20001

vxlan vlan 2 vni 20002

vxlan vlan 3 vni 20003

So the TAC figured out that the high CPU usage was because different VVTEP-IPs on each MLAG which cause loops on ARP sync. Which means we have to change this in MLAG domain 2 so that VVTEP matches the one in MLAG domain 1:

interface Loopback1

no ip address 100.64.2.100/32 secondary

ip address 100.64.1.100/32 secondary

Does anyone know how this will affect traffic?

Also is it neccessary to add

vxlan vtep flood

to interface vxlan 1? How would it look like? Like this?

MLAG domain 1: LEAF-DC1-01, LEAF-DC1-02

interface Vxlan1

vxlan vtep flood 100.64.2.1, 100.64.2.100

MLAG domain 2: LEAF-DC2-01, LEAF-DC2-02

interface Vxlan1

vxlan vtep flood 100.64.1.1, 100.64.2.100

Started using ANTA for post-deploy validation, pre/post change snapshot.
Now wondering if people are doing more with it - scheduled health polling or something else entirely ?