This sends mirrored traffic from the switch IP address 10.100.0.254 to the remote mirroring station at 10.30.1.45 using UDP port 9999. To configure a remote mirror session, you will need to specify the source IP address, UDP encapsulation port (used to receive and/or decapsulate mirrored traffic at the destination), and remote station IP address: However, Wireshark includes a plugin for decoding HP ERM protocol packets, so instead of setting the remote mirroring destination as another switch, you can set it to a system running Wireshark instead.
You can configure up to 4 local mirror sessions, with one mirror destination port and any number of source ports per session (with the obvious caveat that any monitored traffic in excess of available bandwidth on the destination port will be dropped).Īs for remote mirroring: ArubaOS-Switch utilizes the HP Encapsulated Remote Mirroring (HP ERM) protocol, which is intended to send mirrored packets to another ArubaOS-Switch or ProVision OS device for decapsulation and forwarding to the capture station. Switch(config)# interface 1-4 monitor all out mirror 1
Then, choose one or more interfaces to monitor, the direction of traffic to be monitored (inbound, outbound, or both), and the destination mirror session: I just took a look at the section in question, and yep, we definitely need to put better examples in there - thanks for the heads-up!Ĭonfiguring port mirroring is actually fairly simple - with the correct syntax - and is deployed as you would expect.įirst, create the local mirror session and assign it to a port (in this case, port 23):
0 kommentar(er)
