Page 1 of 1
port mirroring on 6850
Posted: 22 Oct 2010 02:58
by slixxboy
hi everyone, is it ok to config a whole port into port mirroring just to monitor the logs used for voice logger?
Posted: 22 Oct 2010 14:46
by cedric1
hello
if you enable port mirroring, source 1/1 and destination 1/2
all traffic you get on 1/1 will be sent or mirrored to 1/2
Cedric
Posted: 23 Oct 2010 05:37
by slixxboy
i know that but my question is, is it ok to set the source 1-47 to be port mirror and the destination is port 48. Is there any effect to the communication which the users has its own ip phone. They used this config just for a voice logger monitoring.
Posted: 24 Oct 2010 17:25
by cedric1
hello
yes you can do it
N-to-1 Mirroring Supported 128 to 1
No impact to communication
Regards
Cedric
Posted: 29 Oct 2010 06:05
by cedric1
hello
I see in doc you can use QOS cli config to mirror port and use condition for mirroring traffic.
Look in 6.4 Network Guide
Policy Based Mirroring
A mirroring policy sends a copy of ingress, egress, or both ingress and egress packets that match the
policy condition to a specific port. This type of policy may use any condition; the mirror policy action
determines the type of traffic to mirror and the port on which the mirrored traffic is received.
The policy action mirror command is used to configure mirror-to-port (MTP) action for the policy. For
example, the following policy mirrors ingress packets to port 1/10:
-> policy condition c1 source ip 192.168.20.1
-> policy action a1 mirror ingress 1/10
-> policy rule r1 condition c1 action a1
-> qos apply
When the above rule is activated, any flows coming into the switch from source IP address 192.168.20.1
are mirrored to port 1/10. It is also possible to combine the MTP action with other actions. For example:
-> policy condition c1 source ip 192.168.20.1
-> policy action a1 mirror ingress 1/10 disposition drop
-> policy rule r1 condition c1 action a1
-> qos apply
This policy rule example combines the MTP action with the drop action. As a result, this rule drops
ingress traffic with a source IP of 192.168.20.1, but the mirrored traffic from this source is not dropped
and is forwarded to port 1/10.
Posted: 07 Nov 2010 21:25
by slixxboy
so it means every port must assigned a specific address and config with a qos policy? this port mirroring is for ip phone and need to monitor for voice logger.
Posted: 08 Nov 2010 02:21
by cedric1
hi
this mean you can assign in your condiition what you want (see all condition possiblity in the doc in qos part)
Regards
Cedric
Re: port mirroring on 6850
Posted: 20 Nov 2011 20:28
by slixxboy
Is it possible to monitor the 1 port and the destination is in multiple port? We have a gadget or analyzer to be inserted one of the port in a switch and the other is a ordinary pc with a wireshark, and we want to compare the packets coming from the port to be mirrored. Please advise us if this is possible. Thanks in advanced.
Victor
Re: port mirroring on 6850
Posted: 26 Nov 2011 13:18
by cedric1
hello
in spec for 6.4.4 code we can make :
Mirroring Sessions Supported : Two sessions supported per standalone switch and stack.
N-to-1 Mirroring Supported : 128 to 1
So you can make 2 sessions but in your case port 1/1 as source or mirrored port can not send to 2 destinations port.
See attached picture.
You can test with qos port mirroring rule, and use 2 actions (one for port destionation X, and for port destination Y) and 2 rules to try to forward traffic from condition to 2 destinations port.
Regards
Cedric