Port mirroring Cisco switches

To mirror a port i.e. pass traffic to another port so that it can be analised is different per Cisco switch but the basis is

Create a monitoring group

Tell one or more of the ports that it is the source

Tell one port that it is the destination.

Becareful here as this can increase load on the switch.

 

The command are as follows:

Cisco 2950

monitor session 1 source interface x/x both
monitor session 1 destination interface x/x

 


This puts the switch into monitoring mode, you can have more than 1 session also

To show what is being monitored

show monitor

To stop monitoring of 1 session or turn off completley

no monitor session x

no monitor

 


Cisco Switch Admin

General Cisco Commands

To see what the network switch is doing

sh interface

can be combined with

| inc xxxx

e.g. sh interface | inc error

To show more details

sh controllers ethernet-controller card_type port_number

e.g.

sh controllers ethernet-controller fastEthernet 0/42




Follow

Get every new post delivered to your Inbox.