Comments on: Remote Port Mirroring https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/ technology, networking, virtualization and IP telephony Sat, 30 Oct 2021 14:22:30 +0000 hourly 1 https://wordpress.org/?v=6.7.1 By: Ramkumar https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-22077 Mon, 20 Jan 2014 06:24:24 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-22077 In reply to Ramkumar.

Thanks

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-22068 Sun, 19 Jan 2014 20:25:35 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-22068 In reply to Ramkumar.

I believe they only support port based mirror ports.

Cheers!

]]>
By: Ramkumar https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-22029 Fri, 17 Jan 2014 02:40:41 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-22029 In reply to Michael McNamara.

Hey Mich ,

I found some where that (ERSPAN) encapsulated Remote SPAN as the name says, brings generic routing encapsulation (GRE) for all captured traffic and allows it to be extended across Layer 3 domains.

]]>
By: Ramkumar https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-22028 Fri, 17 Jan 2014 02:38:20 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-22028 In reply to Michael McNamara.

Thanks a ton Michael . One more question does ERS 5000 switches support , port mirroring based on vlan ?

Thanks in advance

]]>
By: Sheela https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-22027 Fri, 17 Jan 2014 02:35:45 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-22027 Hey Mick ,

You are doing a great job . I have a question .

Is vlan-based port mirroring supported in ERS switches

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-22024 Fri, 17 Jan 2014 02:24:50 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-22024 In reply to Ramkumar.

I believe ERSPAN is supported on the latest software release for the ERS 5000, I’m not sure about the 4000 but it’s probably supported on the 4800. I would suggest you check the release notes to find the answer. I believe both Avaya (formerly Nortel) and Cisco support remote span/mirror ports by encapsulating the traffic in a proprietary L2 frame so unless you are bridging on that Cisco router I don’t believe it will traverse routed links.

Good Luck!

]]>
By: Ramkumar https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-22023 Fri, 17 Jan 2014 01:36:04 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-22023 In reply to Ivannick.

Is ERSPAN supported in ERS 4000 and ERS 5000 switches . I have two ERS 5000 connected to a cisco router . Can i span traffic on ERS 5000 on one end to ERS 5000 on the other end when cisco router is in between ?

]]>
By: Ivannick https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-4188 Fri, 29 Apr 2011 12:00:58 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-4188 Hi Micheal,

Regarding your post where you said that the middle switch between two others switches on which port mirroring is enabled, What if the middel switch is also connected to other devices? Can the middle switch pass his own data as well as the data coming from the source switch to the destination switch on which is going to be monitored? Do i need to configure 2 port mirroring sessions on the destination switch? one for the middle switch and one for the source switch?

Thanks in advanced!

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-4149 Tue, 19 Apr 2011 17:19:52 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-4149 In reply to Ivannick.

Hi Ivannick,

It’s my understanding that all (valid) Ethernet frames should be mirrored regardless if they are an IP frame or an IPX/SPX frame or anything else.

Avaya has a technical configuration guide available here;
http://support.avaya.com/css/P8/documents/100123967

Good Luck!

]]>
By: Ivannick https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-4148 Tue, 19 Apr 2011 17:09:28 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-4148 Hi Michael,

Thanks for your response. It is clear that i need switches that support remote mirroring. I have another question if u dont mind. I red that local mirror captures ip packets and data packets. But remote mirroring only captures data packets. Is this true? what if i want to capture ip packets wth remote mirroring? can i enable both a local mirror port as a remote mirror port on the same switch? or do i have to connect another switch to the switch iam monitoring on? can u please advise me?

Thanks,

Ivannick

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-4143 Tue, 19 Apr 2011 17:03:49 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-4143 In reply to Ivannick.

Hi Ivannick,

You need switches at both ends that support Remote Port Mirroring, the switches in the middle just forward the encapsulated frames between the two endpoints. In the past I’ve setup a remote port mirror from one ERS 8600 to another ERS 8600 with a third ERS 8600 in the middle that didn’t have any configuration other than bridging the VLAN between the two switches. You need switches that support Remote Port Mirroring so they can encapsulate the Ethernet frame and then de-encapsulate the Ethernet frame at the far end before it hits your sniffer or whatever device you are mirroring the packets to.

Good Luck!

]]>
By: Ivannick https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-4142 Tue, 19 Apr 2011 15:07:55 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-4142 Hi there,

I have a questiom concerning remote port mirroring.

The following situation:

Core switch 1 ————> access switch 2 ————> access switch 3

if i send traffic from access switch 2 to access switch 3 is it possible to capture that traffic on core switch 1 with remote port mirroring? or do i have to set an extra core switch at access switch 2?
So is it generally possible to redirect outbound traffic from switch 2 to switch 1 if this traffic is destined for switch 3

Thanks in advanced!
Ivannick

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-3656 Thu, 10 Feb 2011 18:28:45 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-3656 In reply to Anish.

I could find no mention of remote port mirroring in any ERS 8300 documentation.

]]>
By: Anish https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-3654 Thu, 10 Feb 2011 16:00:49 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-3654 Dear Michael,
It is not clear in ERS 8300 Documentation. Also I dont find any specific documentation. Anyway I will try the commands in ERS 8300 and will reply. But why you specifically said “I don’t believe the ERS 8300 supports Remote Port Mirroring “

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-3651 Thu, 10 Feb 2011 04:44:10 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-3651 In reply to Anish.

I don’t believe the ERS 8300 supports Remote Port Mirroring as the ERS 8600 does although I could be wrong. If you don’t have the hardware in front of you I would suggest you review the documentation for the ERS 8300.

Good Luck!

]]>
By: Anish https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-3642 Wed, 09 Feb 2011 03:40:40 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-3642 Hi Michael,
My Box is still not installed. I am preparing the configuration document. If This not working, I have to find some other solution. Installation of ERS planned on Next Week. I need this for Integation with Websense V10000 Proxy Appliance.

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-3640 Tue, 08 Feb 2011 22:21:31 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-3640 In reply to Anish.

Hi Anish,

Have you tried the commands above on an ERS 8300?

Good Luck!

]]>
By: Anish https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-3637 Tue, 08 Feb 2011 10:08:01 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-3637 Is this possible in Nortel ERS 8300. Please help..

]]>
By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-129 Thu, 10 Jul 2008 00:47:56 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-129 Hi David,

Thanks for the reply. I actually decided to make my response a separate post. You can find that post here; http://blog.michaelfmcnamara.com/2008/07/port-mirroring-with-ers-8600/.

The only issue that continually causes me grief are the legacy non-E cards since they don’t support egress port mirroring. Unfortunately we were fairly early adopters of the ERS 8600 product and we’ve got quite a few non-E cards in our environment.

Cheers!

]]>
By: David Runciman https://blog.michaelfmcnamara.com/2007/12/remote-port-mirroring/comment-page-1/#comment-125 Tue, 08 Jul 2008 15:09:55 +0000 http://maddog.mlhs.org/blog/2007/12/remote-port-mirroring/#comment-125 Hi, i have a question about port mirroring in Passport 8600 and i was wondering if you can help me.
I want to know how many port mirrors can be configured and what are the limitations.
Hope you answer me soon.
Keep up the good work in your blog.

]]>