Nortel Networks 2300 Series Set snoop map, WSS# set snoop snoop1 observer 10.10.30.2 snap-length

578Snoop Commands

History
Version 4.0	Command introduced
Version 5.0	New Boolean operators: lt (less than) and gt (greater than). The
	new options apply to src-mac, dest-mac, and host-mac.

Usage Traffic that matches a snoop filter is copied after it is decrypted. The decrypted (clear) version is sent to the observer.

For best results:

•Do not specify an observer that is associated with the AP where the snoop filter is running. This configuration causes an endless cycle of snoop traffic.

•If the snoop filter is running on a AP, and the AP used a DHCP server in its local subnet to configure its IP information, and the AP did not receive a default router (gateway) address as a result, the observer must also be in the same subnet. Without a default router, the AP cannot find the observer.

•The AP that is running a snoop filter forwards snooped packets directly to the observer. This is a one-way communication, from the AP to the observer. If the observer is not present, the AP still sends the snoop packets, which use bandwidth. If the observer is present but is not listening to TZSP traffic, the observer continuously sends ICMP error indications back to the AP. These ICMP messages can affect network and AP performance.

Examples The following command configures a snoop filter named snoop1 that matches on all traffic, and copies the traffic to the device that has IP address 10.10.30.2:

WSS# set snoop snoop1 observer 10.10.30.2 snap-length 100

The following command configures a snoop filter named snoop2 that matches on all data traffic between the device with MAC address aa:bb:cc:dd:ee:ff and the device with MAC address 11:22:33:44:55:66, and copies the traffic to the device that has IP address 10.10.30.3:

WSS# set snoop snoop2 frame-type eq data mac-pair aa:bb:cc:dd:ee:ff 11:22:33:44:55:66 observer 10.10.30.3 snap-length 100

See Also

•clear snoop on page 565

•set snoop map on page 568

•set snoop mode on page 569

•show snoop info on page 571

•show snoop stats on page 572

set snoop map

Maps a snoop filter to a radio on a AP. A snoop filter does take effect until you map it to a radio and enable the filter.

Examples set snoop map filter-nameap ap-numradio {1 2}

NN47250-100 (Version 02.51)