1 Rookie
•
2 Posts
0
136
April 17th, 2025 08:25
Port mirroring of port channel S4148T
Hello everyone,
I'd like to mirror a port of a port-channel on a 4148T switch (SW1) to int Eth1/1/3.
Is it possible to configure the monitor session as follows:
SW1# configure terminal
SW1(config)# monitor session 1
SW1(conf-mon-local-1)# source interface ethernet 1/1/2
SW1(conf-mon-local-1)# destination interface ethernet 1/1/3
SW1(conf-mon-local-1)# no shutdown
SW1(conf-mon-local-1)# exit
Or do I have to include the transport interface port-channel 2 somewhere?
Thank you
No Events found!
DELL-Young E
Moderator
•
5.2K Posts
0
May 15th, 2025 03:11
Just adding a few in case anyone else comes across this-
SPAN (Switch Port Analyzer) and RSPAN (Remote SPAN) are used for traffic mirroring in Dell OS10 switches. SPAN captures traffic locally, while RSPAN allows traffic to be mirrored across multiple switches using a dedicated VLAN.
SPAN Configuration (Local Mirroring)
SPAN mirrors traffic from a source port to a destination port on the same switch.
1. Define a SPAN Session
monitor session 1 source interface ethernet1/1/1 rx
monitor session 1 destination interface ethernet1/1/2
- source interface ethernet1/1/1 rx: Captures received (rx) traffic on port 1/1/1.
- destination interface ethernet1/1/2: Sends mirrored traffic to port 1/1/2.
2. Verify SPAN Configuration
show monitor session 1
RSPAN Configuration (Remote Mirroring)
RSPAN mirrors traffic across multiple switches using a dedicated VLAN.
1. Create an RSPAN VLAN
vlan 100
remote-span
- Defines VLAN 100 as an RSPAN VLAN.
2. Configure Source Switch (Capturing Traffic)
monitor session 1 source interface ethernet1/1/1 rx
monitor session 1 destination remote vlan 100
- Captures rx traffic on port 1/1/1 and sends it to VLAN 100.
3. Configure Destination Switch (Receiving Traffic)
monitor session 1 source remote vlan 100
monitor session 1 destination interface ethernet1/1/2
- Receives mirrored traffic from VLAN 100 and forwards it to port 1/1/2.
4. Verify RSPAN Configuration
show monitor session 1
RSPAN Configuration (Remote Mirroring)
RSPAN mirrors traffic across multiple switches using a dedicated VLAN.
1. Create an RSPAN VLAN
vlan 100
remote-span
- Defines VLAN 100 as an RSPAN VLAN.
2. Configure Source Switch (Capturing Traffic)
monitor session 1 source interface ethernet1/1/1 rx
monitor session 1 destination remote vlan 100
- Captures rx traffic on port 1/1/1 and sends it to VLAN 100.
3. Configure Destination Switch (Receiving Traffic)
monitor session 1 source remote vlan 100
monitor session 1 destination interface ethernet1/1/2
- Receives mirrored traffic from VLAN 100 and forwards it to port 1/1/2.
4. Verify RSPAN Configuration
show monitor session 1
RSPAN Configuration (Remote Mirroring)
RSPAN mirrors traffic across multiple switches using a dedicated VLAN.
1. Create an RSPAN VLAN
vlan 100
remote-span
- Defines VLAN 100 as an RSPAN VLAN.
2. Configure Source Switch (Capturing Traffic)
monitor session 1 source interface ethernet1/1/1 rx
monitor session 1 destination remote vlan 100
- Captures rx traffic on port 1/1/1 and sends it to VLAN 100.
3. Configure Destination Switch (Receiving Traffic)
monitor session 1 source remote vlan 100
monitor session 1 destination interface ethernet1/1/2
- Receives mirrored traffic from VLAN 100 and forwards it to port 1/1/2.
4. Verify RSPAN Configuration
show monitor session 1
RSPAN Configuration (Remote Mirroring)
RSPAN mirrors traffic across multiple switches using a dedicated VLAN.
1. Create an RSPAN VLAN
vlan 100
remote-span
- Defines VLAN 100 as an RSPAN VLAN.
2. Configure Source Switch (Capturing Traffic
monitor session 1 source interface ethernet1/1/1 rx
monitor session 1 destination remote vlan 100
- Captures rx traffic on port 1/1/1 and sends it to VLAN 100.
3. Configure Destination Switch (Receiving Traffic
monitor session 1 source remote vlan 100
monitor session 1 destination interface ethernet1/1/2
- Receives mirrored traffic from VLAN 100 and forwards it to port 1/1/2.
4. Verify RSPAN Configuration
show monitor session 1
This is the method to configure SPAN/RSPAN in OS10. This is an example configuration and users can modify the configuration according to their needs. VLAN is important to in this case due to VLT domain.
https://www.dell.com/support/manuals/en-us/dell-emc-smartfabric-os10/smartfabric-os-user-guide-10-5-2-6/example-configure-rspan-in-vlt-network?guid=guid-122d8b3a-d8fc-44d8-bde5-ae5ef0664723&lang=en-us
Single switch does not require VLAN but with 2 switches t VLAN configuration in mirroring is needed.
Dell EMC Networking OS6 How to Configure RSPAN/Capture Packet Remotely or Port Mirroring in N Series Switches | Dell Singapore
DELL-Charles R
Moderator
•
4.5K Posts
0
April 17th, 2025 14:17
Hello,
You can have port-channel 2 as a source interface in the port mirror session like that:
SW1# configure terminal
SW1(config)# monitor session 1
SW1(conf-mon-local-1)# source interface port-channel 2
SW1(conf-mon-local-1)# destination interface ethernet 1/1/3
SW1(conf-mon-local-1)# no shutdown
SW1(conf-mon-local-1)# exit
Or you can have the physical interface 1/1/2 as a source interface. However, you need to have a separate local port mirroring session on the other switch SW2, and have a separate packet analyzer on SW2 and a separate interface 1/1/3 on SW2.
If you want a “combined” port mirroring, SW2 cannot simply forward its packets across the VLTi ports.
You will have to have a setup like on page 808 of the User guide, section “Remote port monitoring on VLT”
https://dl.dell.com/content/manual30589693-dell-smartfabric-os10-user-guide-release-10-5-5.pdf?language=en-us
JR_036
1 Rookie
•
2 Posts
0
May 14th, 2025 12:23
Hello DELL-Charles R,
thank you, I appreciate your support.
Merging files in packet analyzer software was possible.