sstv20 Omnwiteh CLI Reference Gude OmniSwitch CLI Reference Guide 42 Port Mirroring and Monitoring Commands The Port Mirroring and Port Monitoring features are primarily used as diagnostic tools. The Port Mirroring feature allows you to have all the inbound and outbound traffic of an Ethernet port sent to another port on the switch. When you enable port mirroring, the active, or “mirrored,” port transmits and receives network traffic normally and the “mirroring” port receives a copy of all transmit and receive traffic to the active port. You can connect an RMON probe or network analysis device to the mirroring port to see an exact duplication of traffic on the mirrored port without disrupting network traffic to and from the mirrored port. The Port Monitoring feature allows you to capture and examine the data traffic to and from a monitored Ethernet port MIB information for the Port Mirroring commands is as follows: Filename: AleatelINDIportMirMon.mib Module: ALCATEL-IND1-PORT-MIRRORING- MONITORING-MIB The following table summarizes the available commands: Port Mirroring Commands __port-mirroring source destination port-mirroring show port-mirroring status joring Commands port-monitoring source port-monitoring show port-monitoring status show_port-monitoring file port-mirroring source destination Defines the port to mirror and the port that is to receive data from the mirrored port. Also, enables or disables remote port mirroring port-mirroring port_mirror_sessionid source {[chassis_id/J/slot/port|-port2] |[chassis_id/J/slot/port|- port] destination /chassis_id/J/slot(port [rpmir-vlan vlan_id] [bi [unblocked vlan_id| enable | disable] irectional jinport joutport] port-mirroring port_mirror_sessionid no source {[chassis_id/J/slot/port{-port2| [chassis id/f/slot/portl-port3}...] Syntax Definitions hipsertrprise alcatellucent.comincladestuserquides/OmniSwitch- CLL elerece- GuidelSSLIMUtisereen_HTMLSidesktopos_clie_pmmle_pmm.tim 2sstv20 Omnwiteh CLI Reference Gude port_mirror. sionid Mirroring session identifier. source Specifies source port, or range of ports desired to be mirrored. no source Removes a port or range of ports from a port mirroring, session. destination Specifies the destination port, that receives all the mirrored packets. chassis_id The chassis identifier when running in virtual chassis mode. slot/port Enter a port number. [slot/port|-port2 Enter a range of port numbers rpmir-vlan vian_id Specifies a reserved VLAN to carry the mirroring traffic. bi ectional Specifies bidirectional port mirroring. inport Specifi s incoming unidirectional port mirroring outport Specifies outgoing unidirectional port mirroring, unblocked vian_id Specifies the VLAN that is to be protected from Spanning Tree changes when port mitroring is active, Ports in this VLAN remain unblocked. enable Enables port mirroring status. disable Disables port mirroring status, Defaults parameter default bidirectional | inport | bidirectional outport enable | disable disable Platforms Supported OmniSwitch 10K, 6900 Usage Guidelines + You can configure a port mirroring and a port monitoring session on the same network interface module in an OmniSwitch 10K, 6900. + A mirroring port can not be assigned to a tagged VLAN port. + When a port is configured as a mirroring port, it does not belong to any VLAN. Inbound traffic to the mirroring port is dropped since it does not belong to any VLAN. + Spanning tree is disabled by default on a mirroring port. Port mirroring is not supported on logical link aggregate ports. However, it is supported on individual ports that are members of a link aggregate. cute the port mirroring source destination command to define the mirrored port and enable port mirroring status. Use the port mirroring command to enable the port mirroring session. + Specify the vlan_id number of the mirroring port that is to remain unblocked when the command is executed. The unblocked VLAN becomes the default VLAN for the mirroring port. This VLAN handles the inbound traffic for the mirroring port. Spanning tree remains hipsertrprise alcatellucent.comincladestuserquides/OmniSwitch- CLL elerence- GuidelSSLIMUtisereen_ HTMLSidesktopog_clie_pmmle_pmm.im 242sstv20 hipsertrprise alcatellucent.comincladestuserquides/OmniSwitch- CLL Omnwiteh CLI Reference Gude disabled on the unblocked VLAN. Usage Guidelines - Remote Port Mirroring + Remote port mirroring is supported only on OmniSwitch 10K, 6900 switches. + Use the rpmir-vian parameter and VLAN ID with this command to configure remote port mirroring and to assign the VLAN ID for remote port mirroring + The VLAN ID assigned for remote port mirroring cannot be assigned to a general port mirroring port. + There must not be any physical loop present in the remote port mirroring VLAN. + Source learning must be disabled or overridden on the ports belonging to the remote port mirroring VLAN on intermediate and destination switches. + On OmniSwitch 10K, 6900 switches the QoS redirect feature can be used to override source learning, + The mac-learning command can also be used to disable learning on the RPMIR VLAN ID. Examples rroring rroring 8 source 1/7 bidirectional e 1/7 roring 8 no se mizroring 9 source 1/23 inport nirroring 9 destinati mirroring 9 disable Release History Release 7.1.1; command introduced. Related Commands port-mirroring Enables, disables, or deletes a port mirroring session. show port-mirroring status Displays the status of mirrored ports. This value may be enabled or disabled, MIB Objects mirrorTable mirroritirroring! Sindex orDirection Sess0per: rTaggedVLAN elerence- GuidelSSLIMUtisereen_ HTMLSidesktopog_clie_pmmle_pmm.im 312sstv20 port-mirroring Omnwiteh CLI Reference Gude Enables, disables, or deletes a port mirroring session. port-mirroring port_mirror_sessionid {enable | disable} no port-mirroring port_mirror.sessionid Syntax Definitions port_mirror_sessionid Mirroring session identifier. enable Enables port mirroring. disable Disables port mirroring. Defaults default parameter disable enable | disable Platforms Supported OmniSwitch 10K, 6900 Usage Guidelines + Use the no form of this command to delete a port mirroring session. + Use the port-mirroring source destination command to specify the mirrored ports and destination port. before using this command to enable or disable port mirroring activity for the particular port mirroring session, Examples -> portem => por -> no p mirroring 6 t-mizzoring 6 Release History rroring § enable is Release 7.1.1; command introduced, Related Commands port-mirroring source destination show port-mirroring status MIB Objects mirrorTable mirroriti rroring findex mirrorTaggedVLAN hipsertrprise alcatel-lucent.comiincladesluserquides/OmniSwitch- CLL Defines a port to mirror and the port that is to receive data from the mirrored port, and enables or disables port mirroring status Displays the status of mirrored ports, This value may be enabled or disabled. anasstv20 Omnwiteh CLI Reference Gude port-monitoring source Configures a port monitoring. session. port-monitoring port_monitor_sessionid source [chassis_id/j/slot/port [{no file | file filename |size filesize] | [overwrite {on | off}]}] linport | outport | bidirectional] [timeout seconds] [enable | disable] [capture-type {full | brief}] Syntax Definitions port_monitor_sessionid Monitoring session identifier. chassisid The chassis identifier when running in virtual chassis mode, slot/port Enter the slot number for the module and the physical port number on that module (for example, 3/1 specifies port 1 on slot 3) file filename Specifies a file name and pathname for capturing information related to the monitoring session (for example, /flash/port2.enc), filesize Specifies the size of the file in 64K byte increments. For example, a value of 3 would specify a size of (3 x 64K) bytes. no file This option is not supported at this time. overwrite on Specifies that capturing of data packets into the port monitoring file continues and old information is overwritten if the total data exceeds the specified file size. overwrite off Specifies that capturing of data packets into the port monitoring file is stopped when the maximum file size is reached. inport Specifies incoming unidirectional port monitoring. outport Specifies outgoing unidirectional port monitoring, seconds Specifies the number of seconds after which the session is disabled. enable Enables the port monitoring status. disable Disables the port monitoring status full Captures port monitoring information in detail. brief Captures only the concise port monitori g data transmitted. Defaults parameter default filesize 1 on | off on bidirectional | inport | bidirectional outport seconds 0 enable | disable disable capture-type brief hipsertrprise alcatellucent.comincladestuserquides/OmniSwitch- CLL elerence- GuidelSSLIMUtiseean_ HTMLSidesktopos_clie_pmmle_pmm.im S12sstv20 hipsertrprise alcatellucent.comincladestuserquides/OmniSwitch- CLL Omnwiteh CLI Reference Gude Platforms Supported OmniSwitch 10K, 6900 Usage Guidelines + You can configure a port mirroring and a port monitoring session on the same NI module in an OmniSwitch 10K, 6900. + If the port monitoring capture-type is set to brief, the first 64 bytes of the traffic is captured, If the port-monitoring capture-type s set to full, the entire packet is captured. + By default, a file called pmonitor.ene is created in the /flash directory when you configure and enable a port monitoring session, Use the file option to create a user-specified file. + The /Mlash directory is the default and the only directory used to capture the port monitoring files + The format of the file created is compliant with the ENC file format (Network General Sniffer Network Analyzer Format). + By default, the recent frames overwrite the older frames in a port monitoring file if the total data exceeds the specified file size. Use the overwrite off option to prevent this from oceurring. Examples source 2/3 source 2/3 file /flash/usex_port size 2 enable source 2/3 file /flash/user_port capture-type fu Release History Release 7.1.1; command introduced Related Commands port-monitoring Disables, pauses, resumes, or deletes a port monitoring session, show port-monitoring status Displays the port monitoring status. show port-monitoring file Displays the port monitoring data. MIB Objects itorTable monitor monitor nonitorTt monitorFiles! monitorFileName monitorSczeenstatus monitorScreenbine monitorCaptureType nonitorTeafficType nonitorstatus monitorFi leoverWy: nonitorDirection nonitorTimeot olerence- GuidellSSLIMUliseeon_HTMLSIdosktopios_clit_pmmle_pmm him anesstv20 Omnwiteh CLI Reference Gude port-monitoring Disables, pauses, resume, or deletes an existing port monitoring session. port-monitoring port_monitor_sessionid {disable | pause | resume} no port-monitoring port_monitor_sessionid Syntax Definitions port_monitor_sessionid Monitoring session identifier. disable Disables the port monitoring session. pause Pauses the port monitoring session. resumes Resum: es the port monitoring session. Defaults NIA Platforms Supported OmniSwitch 10K, 6900 Usage Guidelines Use the no form of this command to delete a port monitoring session. Examples 6 pause 6 disable 6 resume > no port-monitoring 6 Release History Release 7.1.1; command introduced, Related Commands port-monitoring Configures a port monitoring session. show port-monitoring status Displays the port monitoring status. MIB Objects monitorTable monitorSessionNunber monitorScreenstatus show port-mirroring status Displays the status of mirrored ports. show port-mirroring status [port_mirror_sessionid| hpsertrprise alcatel-lucentcomncladeslsserqudes/Omni Switch CL-Relerence-GuidellSSLIMulisereen HTMLSesktopi_clle_pmmic_pmm.tim 7/12sstv20 Omnwiteh CLI Reference Gude port_mirror_sessionid Mirroring session identifier. Defaults NIA Platforms Supported OmniSwitch 10K, 6900 Usage Guidelines If a port mirroring session identifier is not specified with this command, then all port mirroring sessions are displayed, Examples show port-mirroring status Session Mirror Mirror Unblocked config oper Destination Dizection vlan st status - Now Enable ort ort ore ort ort, ore ore ore ore ort, ore ore output definitions Session ‘The port mirroring session identifier. Mirror Destination The location of the mirrored port Mirror ‘The direction of the mirroring or mirrored port, which can be bidirectional (the default), inport, or outport. Unblocked VLAN The mirroring VLAN ID number. Config Status ‘The configuration status of the session. Oper Status The current status of the mirroring or mirrored port. Mirror Source ‘The location of the mirroring port On OmniSwitch 10K, 6900 series switches: show port-irroring status session Mirror Mirror Unblocked oper Destination Dizeesion vi status 6 asa - NONE Enable or hpserterprise alcatel-lucentcomncladestuserqudes/Omni Switch CL-Reference-GuidellSSLIMulisereen HTMLSdesktopi_lle_pmmic_pmm.tim a2sstv20 Omnwiteh CLI Reference Gude Mirror 6. (20 bidi rec ort 6. a2 bidizee oft 6. 122 ore 6. 1/23 oft 6 124 ore 6 Ps ort 6. 1/26 oft 6 127 > ore 6 (28 bidizes ore 6. 1/23 bidiree oft 6 130 ore ‘output definitions Session ‘The port mirroring session identifier. Mirror Destination The location of the mirrored port Mirror Direction ‘The direction of the mirroring or mirrored port, which can be bidirectional (the default), inport, or outport Unblocked VLAN The mirroring VLAN ID number. Config Status ‘The configuration status of the session. Oper Status ‘The current status of the mirroring or mirrored port. Mirror Source The location of the mirroring port Release History Release 7.1.1; command introduced. Related Commands port-mirroring Enables, disables, or deletes a port mirroring session, port-mirroring source Defines a port to mirror and a port that receives data destination from the mirrored port, and enables or disables port mirroring status, MIB Objects orstatus rSessionNunber essOperstatus orsrestatus ecDirection ‘orSreRowStatus eSrcOperstatus InblockedVLAN show port-monitoring status hpserterprise alcatel-lucentcomincladesluserqudes/OmniSwitch- CL-Relerence-GuidellSSLIMulisereen HTMLSdesktopi_lle_pmmic_pmm.tim 92sstv20 hipsertrprise alcatl-lucent.comiincladesluserquides/OmniSwitch- CLL Omnwiteh CLI Reference Gude Displays port monitoring status show port-monitoring status [port_monitor_sessionid| Syntax Definitions port_monitor_sessionid Monitoring session identifier. Defaults NIA Platforms Supported OmniSwitch 10K, 6900 Usage Guidelines If a port monitoring session identifier is not specified with this command, then all port monitoring sessions are displayed. Examples status how port-mon: Admin cap Max. File Type Size Name Sess Mon. Mon. Over Dir ow 1. 1/2 Out OFF Brief 64K /flash/pm.e! ‘output definitions Sess Session - The port monitoring session identifier. Mon. Sre Monitor Source - The source ports that are monitored. Mon Dir Monitor Direction - The direction of the monitoring session, which can be bidirectional (the default), inport, or outport. Overwrite Whether files created by a port monitoring session can be overwritten. The default is ON. Oper Stat Operating Status - The current operating status of the port monitoring session (on/off). Admin Stat Admin Status - The current administrative status of the port monitoring session (on/off). Capt Type Capture type - Brief - captures only 64 bytes of data per traffic data packet. Full - captures the entire packet. Max Size Maximum Size - The maximum size of the port monitoring file. File Name The name of the port monitoring file Release History Release 7.1.1; command introduced. Related Commands port-monitoring source Configures a port monitoring session. oleence- GuidelSSLIMliscreen_HTMLSideshopios_lit_pmnve_pmm.im 10/12sstv20 Omnwiteh CLI Reference Gude port-monitoring Disables, pauses, resumes, or deletes a port monitoring session. show port-monitoring file Displays port monitoring data. MIB Objects monitorTable monitorsessionNunber monitor nonitorstatus monitorFilestatus nonitorFileName ndex monitorScreenstatus monitorScreenbine nonitorTrafficTyp monitorDireetie: nonitorTimeou! monitorCapturelype nonitorFileov: show port-monitoring Displays port monitoring data, show port-monitoring file port_monitor_sessionid Syntax Definitions port_monitor_sessionid Monitoring session identifier. Defaults A single line from the captured packet is displayed. Platforms Supported OmniSwitch 10K, 6900 Usage Guidelines Only a single line from the captured packet is displayed, even though the full packet is captured.To view the entire packet, download the file and view it using compatible network analyzer tool. Examples > show port-mon 1 ce 42 : Hl 89 | upp 00:00: 6:F#:4A:40:00 189:F6 | 8a | upp 00:00: 6B:CF:89:40:00 19B:76 | 08:00: 3:89 | UDP 00:00: 6B:CP:85:40:00 289:F6 | 08:00: 83 | upp 00:00: 6B:CF:8A:40:00 :9B76 | 08:00: 289) UDP 0:00: 6B:CF286:40:00 00:20:DA:A3:89:F6 | 08:00:20: 289 | UDP 08:00:45:00:00:6B:CF:8B:40:00 hpserterprise alcatel-lucentcomincladesluserqudes/Omni Switch CL-Relerence-GuidellSSLIMulisereen HTMLSdesktopi_lle_pmmic_pmm.tim 19/12sstv20 09:00:00 | PDAIBF:SB:76 | ‘output definitions Omnwiteh CLI Reference Gude 6 | appu | 00:26:42: 3:89 | UDP 08: 00:4 03:00:00:00:00:00 100:00:65:0F: 87:40:00 Destination Source Type Data The destination MAC address of the packet. The source MAC address of the packet The type of packet. ‘The packet displayed in hexadecimal format Release History Release 7.1.1; command introduced. Related Commands port-monitoring source port-monitoring hi -monitoring st MIB Objects monitorTable monitorSessionNunber monitorT#index nonitorTrafficType monitorFilestatus nonitorFileame monitorFilesize monitor atus hipsertrprise alcatel-lucent.comncladestuserqudes/Omni Switch CL-Relerence-GuidellSSLIMulisereen_ HTMLSdesktopis_lile_pmmic_pmm.rim Configures a port monitoring session. Disables, pauses, resumes, or deletes a port monitoring session, Displays the port monitoring status. wana