Troubleshoot a spine-and-leaf datacenter network scenario involving servers and firewalls. Using the supplied network observations, identify servers with a missing, unknown, or non-operational leaf link, or with a denied required flow. Treat the highest-priority enabled matching firewall rule as authoritative; if no rule matches, treat the flow as denied.
hostname, leaf_device, link_status, blocked_flows, and diagnosis.| Column | Type | Description |
|---|---|---|
| server_idPK | INT | Server identifier |
| hostname | VARCHAR(100) | Server hostname |
| zone | VARCHAR(50) | Firewall source zone |
| required_service | VARCHAR(50) | Required service name |
| required_port | INT | Required destination port |
| Column | Type | Description |
|---|---|---|
| device_idPK | INT | Network device identifier |
| device_name | VARCHAR(100) | Device name |
| device_role | VARCHAR(30) | Spine, leaf, or firewall role |
| Column | Type | Description |
|---|---|---|
| link_idPK | INT | Link observation identifier |
| server_id | INT | Referenced server |
| leaf_id | INT | Referenced leaf device |
| link_status | VARCHAR(20) | Observed link status |
| observed_at | TIMESTAMP | Observation timestamp |
| Column | Type | Description |
|---|---|---|
| rule_idPK | INT | Firewall rule identifier |
| source_zone | VARCHAR(50) | Source security zone |
| destination_zone | VARCHAR(50) | Destination security zone |
| destination_port | INT | Destination port |
| action | VARCHAR(10) | Allow or deny action |
| priority | INT | Rule precedence |
| enabled | BOOLEAN | Whether the rule is active |
| Column | Type | Description |
|---|---|---|
| flow_idPK | INT | Flow observation identifier |
| server_id | INT | Originating server |
| destination_zone | VARCHAR(50) | Destination security zone |
| destination_port | INT | Destination port |
| observed_at | TIMESTAMP | Flow observation timestamp |