Port Mirroring

On switches on the path from the source port to the remote destination, egress tagging has to be enabled on potential egress ports for the mirror VLAN.

With the introduction of remote port mirroring:

Configured mirror destination ports will NOT lose their switching or routing properties as they do on SecureStack A2, B2, or C2 products.

On switches where the mirror VLAN has been configured, any traffic on that VLAN will be flooded on the VLAN. It will never be unicast, even if the source address of the traffic as been learned on the switch.

Configuring SMON MIB Port Mirroring

Overview

SMON port mirroring support allows you to redirect traffic on ports remotely using SMON MIBs. This is useful for troubleshooting or problem solving when network management through the console port, telnet, or SSH is not feasible.

Procedures

Perform the following steps to configure and monitor port mirroring using SMON MIB objects.

To c reate and enable a port mirroring instance:

1.Open a MIB browser, such as Netsight MIB Tools

2.In the MIB directory tree, navigate to the portCopyEntry folder and expand it.

3.Select the portCopyStatus MIB.

4.Enter a desired source and target port in the Instance field using the format source.target.

For example, 3.2 would create a relationship where source port ge.1.3 would be mirrored to target port ge.1.2.

Note: In order to configure a port mirroring relationship, both source and destination interfaces must be enabled and operational (up).

5.Enter MIB option 4 (createAndGo) and perform an SNMP Set operation.

6.(Optional) Use the CLI to verify the port mirroring instance has been created and enabled as shown in the following example:

C3(su)->show port mirroring

Port Mirroring

==============

= ge.1.3

Source Port

Target Port

= ge.1.2

Frames Mirrored

= Rx and Tx

Port Mirroring status enabled

To create a port mirroring instance without automatically enabling it:

1.Complete steps 1‐4 above.

2.Enter MIB option 5 (createAndWait) and perform an SNMP Set operation.

3.(Optional) Use the CLI to verify the port mirroring instance has been created set to disabled mode as shown in the following example:

C3(su)->show port mirroring

SecureStack C3 Configuration Guide 7-37

Page 205
Image 205
Enterasys Networks 9034313-07 manual Configuring Smon MIB Port Mirroring, Overview, Procedures