Appendix A: Troubleshooting a WS Switch 591

The following command configures a snoop filter named snoop2 that matches on all data traffic between the device with MAC address aa:bb:cc:dd:ee:ff and the device with MAC address 11:22:33:44:55:66, and copies the traffic to the device that has IP address 10.10.30.3:

23x0# set snoop snoop2 frame-type eq data mac-pair aa:bb:cc:dd:ee:ff 11:22:33:44:55:66 observer 10.10.30.3 snap-length 100

Displaying Configured Snoop Filters

To display the snoop filters configured on the WSS switch, use the following command:

show snoop info [filter-name]

The following command shows the snoop filters configured in the examples above:

23x0# show snoop info snoop1:

observer 10.10.30.2 snap-length 100 all packets

snoop2:

observer 10.10.30.3 snap-length 100 frame-type eq data

mac-pair (aa:bb:cc:dd:ee:ff, 11:22:33:44:55:66)

Editing a Snoop Filter

To edit a snoop filter, you can use the show configuration area snoop command to display the filter’s configuration command, then use cut-and-paste to reconstruct the command.

Deleting a Snoop Filter

To delete a snoop filter, use the following command:

clear snoop filter-name

Mapping a Snoop Filter to a Radio

You can map a snoop filter to a radio on a Distributed AP. To map a snoop filter to a radio, use the following command:

set snoop map filter-namedap dap-numradio {1 2}

You can map the same filter to more than one radio. You can map up to eight filters to the same radio. If more than one filter has the same observer, the AP sends only one copy of a packet that matches a filter to the observer. After the first match, the AP sends the packet and stops comparing the packet against other filters for the same observer.

If the filter does not have an observer, the AP still maintains a counter of the number of packets that match the filter. (See “Displaying Remote Traffic Monitoring Statistics” on page 594.)

The following command maps snoop filter snoop1 to radio 2 on Distributed AP 3:

23x0# set snoop map snoop1 dap 3 radio 2

success: change accepted.

Nortel WLAN Security Switch 2300 Series Configuration Guide

Page 591
Image 591
Nortel Networks 2300 manual Mapping a Snoop Filter to a Radio, Displaying Configured Snoop Filters, Editing a Snoop Filter