Port Mirroring Masterclass

From RZWiki

Port mirroring is a function or feature available with numerous vendor's network devices, (typically on 'business class' products rather than home networking or personal products.) It allows for the traffic on one interface to be duplicated or mirrored to a second interface on the device for the purposes of troubleshooting; normally in the form of attaching a device to the second interface that will be used to perform a packet capture or provide traffic analysis.

In all cases configuring port mirroring typically involves two commands; one to specify the source of the traffic to be mirrored, one to specify the destination the traffic is to be mirrored to.

For more detailed command structure and syntax information, simply click on the command names shown below.

Cisco

Cisco refer to port mirroring as monitoring or Switch Port ANalyser (SPAN)

Configure the source interface or vlan: monitor session 1 source interface FastEthernet1/1 or monitor session 1 source vlan 1

Configure the destination interface: monitor session 1 destination interface FastEthernet2/2

Confirm your configuration and monitoring status using the show monitor command

Extreme

Configure the source port or vlan: configure mirroring add port 1:1 or configure mirroring add vlan VLAN_TEST

Configure the destination port: enable mirroring to port 2:2 untagged

The specified destination port must not be configured in a vlan if you specify untagged.

Annoyingly, the destination port must be active (up) when this command is entered.

Confirm your configuration and mirroring status using the show mirroring command

F5 BigIP

Confirm your configuration and mirroring status using the bigpipe mirror show command

Nokia IPSO

Related Articles

We really do appreciate all feedback so please do send your comments, suggestions or corrections to sjiveson#routerzone.eu (replacing the # with an @)