Dell PowerConnect J-EX4200-24T Software Manual page 3329

analyzer employee-monitor {
loss-priority high;
input {
ingress {
}
egress {
}
}
output {
vlan {
}
}
}
}
Mirroring Employee-to-Web Traffic for Remote Analysis
To configure port mirroring for remote traffic analysis of employee to web traffic, perform
these tasks:
CLI Quick To quickly configure port mirroring to mirror employee traffic to the external Web, copy
Configuration the following commands and paste them into the terminal window:
[edit]
set ethernet-switching-options analyzer employee-web-monitor loss-priority high output vlan
999
set vlans remote-analyzer vlan-id 999
set interfaces ge-0/0/10 unit 0 family ethernet-switching port mode trunk
set interfaces ge-0/0/10 unit 0 family ethernet-switching vlan members 999
set firewall family ethernet-switching filter watch-employee term employee-to-corp from
destination-address 192.0.2.16/28
set firewall family ethernet-switching filter watch-employee term employee-to-corp from
source-address 192.0.2.16/28
set firewall family ethernet-switching filter watch-employee term employee-to-corp then accept
set firewall family ethernet-switching filter watch-employee term employee-to-web from
destination-port 80
set firewall family ethernet-switching filter watch-employee term employee-to-web then analyzer
employee–web-monitor
set ge-0/0/0 unit 0 family ethernet-switching filter input watch-employee
set interfaces ge-0/0/1 unit 0 family ethernet-switching filter input watch-employee
Step-by-Step To configure port mirroring of all traffic from the two ports connected to employee
Procedure computers to the
Configure the
1.
Configure the VLAN tag ID for the
2.
interface ge-0/0/0.0;
interface ge-0/0/1.0;
interface ge-0/0/0.0;
interface ge-0/0/1.0;
remote-analyzer;
remote-analyzer
employee-web-monitor
[edit ethernet-switching-options]
user@switch# set interfaces ge-0/0/10 unit 0 family ethernet-switching port mode
trunk
user@switch# set analyzer employee-web-monitor loss-priority high output vlan 999
[edit vlans]
VLAN for use from a remote monitoring station:
analyzer:
VLAN:
remote-analyzer
Chapter 126: Port Mirroring
3257