Port Mirroring Commands; Monitor Session - Ubiquiti EDGESWITCH ES-24-250W Command Reference Manual

EdgeSwitch CLI Command Reference

Port Mirroring Commands

Port mirroring, which is also known as port monitoring, selects network traffic that you can analyze with a
network analyzer, such as a SwitchProbe device or other Remote Monitoring (RMON) probe .

monitor session

This command configures a probe port and a monitored port for monitor session (port monitoring) . Use the
source interface slot/port
tx
ingress packets, or use
destination port monitors both ingress and egress packets .
A VLAN can be configured as the source to a session (all member ports of that VLAN are monitored) . Remote port
mirroring is configured by adding the RSPAN VLAN ID . At the source switch, the destination is configured as the
RSPAN VLAN and at the destination switch, the source is configured as the RSPAN VLAN .
Note: The source and destination cannot be configured as remote on the same device .
reflector-port
The
traffic towards the destination switch .
Note: This port must be configured with RSPAN VLAN membership .
An IP/MAC ACL can be attached to a session by giving the access list number/name .
destination interface slot/port
Use
mode
Use the parameter to enable the administrative mode of the session . If enabled, the probe port monitors
all the traffic received and transmitted on the physical monitored port .
filter
Use the parameter to filter a specified access group either by IP address or MAC address .
monitor session session-id {
Format
source {interface slot/port | vlan vlan-id | remote vlan vlan-id} [rx|tx] |
destination {interface slot/port | remote vlan vlan-id reflector-port slot/port} |
mode | filter {ip access-group {acl-id|acl-name} | mac access-group acl-name} }
Mode Global Config
Example: To configure the RSPAN VLAN source:
monitor session session-id source {interface slot/port | vlan vlan-id | remote vlan vlan-id}
[rx|tx]
Example: To the configure RSPAN VLAN destination:
monitor session session-id destination {interface slot/port | remote vlan vlan-id reflector-port
slot/port}
Example: To attach an ACL:
monitor session session-id filter {ip access-group acl-id/acl-name | mac access-group acl-name}
Ubiquiti Networks, Inc.
parameter to specify the interface to monitor . Use
to monitor only egress packets . If you do not specify an
is configured at the source switch . The
to specify the interface to receive the monitored traffic .
Switching Commands
rx
{rx|tx}
reflector-port
forwards the mirrored
to monitor only
option, the
269