About Port Mirroring - Alcatel OmniAccess Wireless System 2.1 Product Manual

This configuration can be used, for example, to have all company clients log into the corporate WLAN,
and then have clients connect using different QoS, DHCP server, Layer 2 and Layer 3 Security Policies,
and Interface (which includes physical port, VLAN and ACL assignments) settings on a per-MAC Address
basis.
When Alcatel OmniAccess Wireless System operators configure MAC Filtering for a client, they can
assign a different VLAN to the MAC Address, which can be used to have Alcatel OmniAccess OS auto-
matically reroute the client to the
each of which have their own VLAN, ACL, DHCP server, and physical port assignments. This MAC
Filtering can be used as a coarse version of AAA Override, and normally takes precedence over any AAA
(RADIUS or other) Override.
However, when Allow AAA Override is enabled, the RADIUS (or other AAA) server can alternatively be
configured to return QoS and ACL on a per-MAC Address basis. Allow AAA Override gives the AAA
Override precedence over the MAC Filtering parameters set in the Alcatel OmniAccess Switch or Appli-
ance; if there are no AAA Overrides available for a given MAC Address, the Alcatel OmniAccess OS uses
the MAC Filtering parameters already in the Alcatel OmniAccess Switch or Appliance. This AAA (RADIUS
or other) Override can be used as a finer version of AAA Override, but only takes precedence over MAC
Filtering when Allow AAA Override is enabled.
Note that in all cases, the Override parameters (Operator-Defined Interface and QoS, for example)
must already be defined in the Alcatel OmniAccess Switch or Appliance configuration.
In all cases, the Alcatel OmniAccess OS will use QoS and ACL provided by the AAA server or MAC
Filtering regardless of the Layer 2 and/or Layer 3 authentication used.
Also note that the Alcatel OmniAccess OS will only move clients from the default Alcatel WLAN VLAN to
a different VLAN when configured for MAC filtering, 802.1X, and/or WPA Layer 2 authentication.
To configure the Alcatel WLANs, refer to

About Port Mirroring

For troubleshooting, the Alcatel OmniAccess Wireless System operator can Mirror a transmit and
receive data stream through a 4012 or 4024 Alcatel OmniAccess WLAN Switch client, OmniAccess AP
1200 or 1250, and/or Third-Party AP data stream to another physical port on a 4012 or 4024 Alcatel
OmniAccess WLAN Switch.
Note that the Standalone WPS Alcatel OmniAccess Wireless System described in
OmniAccess Wireless System
Step 1
Set up a Mirror Port on the Alcatel OmniAccess WLAN Switch.
•
In the Command Line Interface (CLI), use the
Mode for the physical front-panel port.
•
In the Alcatel OmniAccess Switch Web Interface, navigate to the
enable Mirror Mode for the physical front-panel port.
•
In the ACS Web Interface, navigate to the
enable Mirror Mode for the physical front-panel port.
All data to and from mirrored clients, OmniAccess AP Access Points, and/or Third-Party APs will now
appear on this port.
Step 2
Once you have set up a front-panel Mirror Port, configure one or more clients, OmniAccess AP Access
Points, and/or Third-Party APs to mirror data to the selected Mirror Port.
•
Mirror a client by enabling Mirror Mode:
11/5/04
90-100831-300 Rev 2Alcatel OmniAccess Wireless Access Point Quick Installation Guide 21
Management Interface
Configuring
Port Mirroring
does not support client or Third-Party AP port mirroring.
or any of the Operator-Defined
WLANs.
config mirror port
Monitor Switches > <IPaddr> > Ports > n
Port Mirroring
Interfaces,
About the Alcatel
command and enable Mirror
Port > Configure page and
page and