1 Rookie
•
6 Posts
0
29
November 14th, 2024 16:55
Difference in monitoring session sources, vlan vs individual ports
MY question would be is there any difference between the network traffic that is being passed when I use vlans as the source versus all connected ports as a session source?
example say int gig1/16 is tagged in vlan 5 and tagged in vlan 1
and int gig 1/10 is tagged in vlan 1
if i did "
"source gig 1/16 destination gig 1/17 direction both
source gig 1/10 destination gig 1/17 direction both"
would that traffic being mirrored be the same as this traffic:
"source vlan 1 destination gig 1/17 direction both
source vlan 5 destination gig 1/17 direction both"
No Events found!
DELL-Charles R
Moderator
•
4.5K Posts
1
November 14th, 2024 21:44
Hello,
When you set the source as a VLAN, you're capturing traffic from all ports that are members of that VLAN, including trunk ports that carry the VLAN. This means that if you have a port like gig 1/16 that's tagged with VLAN 1 and VLAN 5, it will be included in the mirrored traffic for source vlan 1 but not for source vlan 5 if you set the source as vlan 5 individually.
When you set the source as individual ports, you're capturing traffic from those specific ports only. So this means that traffic from other ports, even if they're tagged with the same VLAN, will not be included in the mirrored traffic.
DELL-Chris H
Moderator
•
9.5K Posts
1
November 19th, 2024 18:29
If you were to configure every port as a source then it should transfer the same traffic, but through the specific ports.
emg0485
1 Rookie
•
6 Posts
0
November 19th, 2024 18:17
@DELL-Charles R Thank you for your response, to clarify if i configure every port 1/1-24 as a source will it still transmit the same traffic as if i used vlan 1 and vlan 5 as the source?
(edited)