Mac Monitor Analytics Report

This topic provides an overview of the MAC Monitor Analytics report you can generate in the GUI. To learn how to generate this report, see Generate Analytics Report.

Overview of EVPN Type-2 Route Distribution

This topic analyzes EVPN Type-2 MAC address activity across the network. It highlights patterns in active and missing MAC address routes and their changes over time.

Active MAC Address Distribution

The Active MAC Address Distribution section shows how MAC addresses are distributed by Routing Zones (RZs) and Virtual Networks (VNs), offering an intuitive view of how MAC addresses are organized within the network fabric.

Figure 1 displays two sunburst charts: one for start time and another for end time. The charts show three routing zones: red (RZ-A), orange (RZ-B), and yellow (RZ-C). The inner ring shows the number of MAC addresses per routing zone, while the outer ring shows the number of MAC addresses per virtual network (VN). For example, Routing Zone: RZ-A has 48 MAC addresses at start time and 50 MAC addresses at end time. PRODUCTION_VLAN10 has 8 MAC addresses at start time and 9 MAC addresses at end time.

Figure 1: Active Mac Address Sunburst Chart Comparison of two sunburst charts showing the distribution of MAC addresses across VLANs and zones at Start Time and End Time. Each segment represents a VLAN or zone, with size corresponding to MAC address count. Key changes include an increase in MAC addresses for Production_VLAN10 from 8 to 9 and RZ-A from 48 to 50.

Virtual Growth Over Time for Top 25 Virtual Networks

This section tracks MAC address changes across Routing Zones (RZs) and helps you identify expanding or contracting virtual networks based on MAC activity. The line chart in Figure 2 illustrates the virtual network's growth over time. This example highlights the top 25 networks based on MAC address count.

Figure 2: Virtual Growth Over Time Report Line graph showing active MAC addresses from February 11 2026 to February 12 2026 across multiple categories with counts changing or remaining constant over time.

Virtual Networks Size Comparison by Routing Zone

This section compares MAC address counts between each virtual network for each routing zone.

  • The bar chart in Figure 3 shows MAC address counts for VN: PRODUCTION_VLAN10, beginning with 48 active MAC addresses and ending with 50.

  • The histogram in Figure 4 shows MAC address count distribution across all virtual networks in RZ-A and the number of networks in various count ranges. At both start and end times, 6 virtual networks had MAC address counts in the 10-15 range.

This example uses Routing Zone: A, however the process applies to all routing zones

Figure 3: Active MAC Address Counts (RZ-A) Bar chart comparing active MAC addresses at start and end times across VLANs, showing similar counts with slight variations.
Figure 4: Example: Histogram for RZ-A Two bar charts comparing active MAC address counts across virtual networks at start and end times. Most common range is 10-15 MAC addresses in 6 networks, with uniform distribution.

Active MAC Address Distribution Across Devices (Top 3 VN)

This section explains the distribution of active MAC addresses across the top 3 VNs and devices. A histogram illustrates this distribution for the selected routing zone and virtual network.

  • The x-axis shows the number of active MAC addresses learned on a device.

  • The y-axis indicates how many devices fall into each MAC address count range.

The Top 3 VNs are chosen based on the highest nonzero active MAC address count at the user-selected time.

For example: Figure 5 shows a histogram for Routing Zone: A. Production_VLAN10 has 17 MAC addresses in two devices at end time. Database_VLAN20 has 15 MAC addresses in two devices at end time.

Figure 5: Example: Active MAC Address Distribution (RZ-A) Bar chart showing the distribution of active MAC address counts across devices in Production_VLAN10. Two devices had the most common count of 17 active MAC addresses. Bar chart showing active MAC address counts in Database_VLAN20. Two devices had 0 MAC addresses, and two devices had 15 MAC addresses. Most common count was 15.

Missing MAC Count Observation

This section tracks virtual networks with missing MAC addresses and their progression over time. It highlights the top five virtual networks with the most missing MAC entries. Figure 6 shows an example. You can hover over the chart to see the details for each VLAN. The second line chart shows the virtual network where the most recent missing MAC was found.

Figure 6: Missing MAC Addresses Two line charts analyzing missing MAC addresses over time for VLANs. Top chart shows trends for top 5 VLANs, highlighting a jump at 23:00 on February 11, 2026. Bottom chart provides most recent counts for the same VLANs, aligned with top chart. Tooltip at 2026-02-12 06:00 shows missing MAC counts per VLAN.

Active and Missing MAC Address Counts

This section identifies devices with possible MAC address propagation issues. A heatmap shows missing MAC proportions between device pairs for the top 5 virtual networks. Each cell shows the fraction of missing MACs relative to the total expected MAC count for the source device. Higher values indicate more missing MACs. The heatmap uses the first snapshot data available after the user-defined start time.

Figure 7 shows a heatmap for Production_VLAN10. In this example, 17 MAC addresses are missing on leaf2 (destination) from leaf1, leaf3, leaf4 and leaf5 (source leaf devices). This pattern indicates a potential MAC propagation issue on leaf2 in Production_VLAN10. Communication between other device pairs remains largely green, indicating healthy MAC distribution.

Figure 7: Example: Missing MAC Heatmap (Production_VLAN10) Heatmap titled Missing MAC Heatmap for Production_VLAN10 showing severity of missing MAC addresses between source devices leaf1 to leaf5 and destination devices leaf1 to leaf5. Green indicates no missing MACs, red indicates higher severity, with a color bar scale on the right. Tooltip highlights 17 MACs missing on leaf2 from leaf1.