port mirroring

[TECH-JEFF]

Hi, just want to ask how do you verify if 2 ports were successfully configured as port mirroring?

We've setup 2 ports in our 3750 L3 switch by typing in the command below:

monitor session 1 source interface gigabitethernet Gi0/16

monitor session 1 source interface gigabitethernet Gi0/17

So how do we verify if both ports aree doing mirror already?

The reason why we did this mirroring is because we purchased a network management Sangfor. Where do we connected this? source? or destination?

Regards,

Jeff

[johnlloyd_13 · Accepted solution]

hi,

use show monitor session 1 to verify port mirroring.

you can use the both keyword if you want to SPAN ingress and egress traffic:

monitor session 1 source interface gigabitethernet Gi0/16 both

monitor session 1 source interface gigabitethernet Gi0/17 both

you should have a SPAN destination port using the command monitor session 1 destination interface g0/x. this is where your NMS (sangfor) should be connected.

[TECH-JEFF]

actually I've saw that command in an article but after I type in that command it shows;

Type : Local Session
Source Ports :
Both : Gi1/0/16
Destination Ports : Gi1/0/17
Encapsulation : Native
Ingress : Disabled

Do I need to do additional commands to enable ingress?

The command I type in to configure both ports are:

monitor session 1 source interface Gi1/0/16
monitor session 1 destination interface Gi1/0/17

Am I still missing something?

Thanks

Jeff

[johnlloyd_13]

hi,

this output is normal. the 'both' keyword is also the default, so SPAN replicates both ingress and egress traffic.

the source and destination SPAN config is all you need.