Could Nokia sniff LLDP packet?

[plawansai]

Could Nokia sniff LLDP packet

Thank you very much.

[mivens]

Have a look at the section "Port MIrroring" in the 7750 SR OS OAM and Diagnostics Guide.

[plawansai]

Could you please narrow down to the commands like this

Code: Select all

configure filter log 140 create destination memory 4000
configure filter ip-filter 40 create entry 10 create match protocol ip
back
log 140
action forward
back
entry 20 create match protocol icmp
back
log 140
action forward

Thank you very much.

[mivens]

Are you asking how you can match an LLDP frame?
It's not an IP packet so you can't explicitly match it in an IP filter.
You could try a mac-filter, something like:

          mac-filter "100"
              entry 10 create
                  match
                      etype "0x88cc"
                  exit
                  action
                     forward
                 exit
             exit
         exit

[plawansai]

Great!
But It says:

Code: Select all

>config>filter>mac-filter>entry# match etype "0x88cc"
MINOR: FILTER #1521 Invalid frame type - E-type cannot be configured/changed.

How should I do

Thank you very much.

[mivens]

Sorry, I forgot the frame-type is mandatory. Try this instead:

configure filter mac-filter "100" create
  entry 10 create
    match frame-type ethernet_II  etype "0x88cc"
    action  forward

[plawansai]

How to apply to the network port

Thank you very much.

[mivens]

You need to first define a destination for the mirrored traffic then with a debug command, start the mirroring. The simplest is to send the mirrored traffic out of another local port.

For example, to mirror the ingress traffic matching mac-filter 100 entry 10 on source port is 1/1/1 to destination port 2/2/2:

 configure
     mirror
         mirror-dest "1" create
             sap "2/2/2" create
             exit
            no shutdown
         exit
     exit
 exit
debug
    mirror-source 1
        port 1/1/1 ingress
        mac-filter 100 entry 10
        no shutdown
    exit
exit

[plawansai]

Could it destination to the log or storage Which I can upload over the VPN to my laptop.

[mivens]

It's not a debug command. I do not believe there is an lldp debug command available.

This is copying the raw packets and sending therm out of another port on the 7750.
You would need to connect a laptop running Wireshark (or another packet capture application) to the destination port.

It is also possible to send the mirrored packets over the network to a remote 7750, but this is obviously a bit more complicated to set up.