topic Re: Mirroring in ExtremeSwitching (EXOS/Switch Engine)

Mirroring

gorn — Fri, 27 Nov 2020 15:14:34 GMT

Hello!

I was not sure that the data from the vlans was mirrored, since the increase in traffic on the ports was insignificant, and I wanted to create a separate instance for a separate port as a test.

“Error: Filter vlan conflicts with filter vlan of enabled DefaultMirror mirror.”, - does this mean that I cannot use the same sources in different instances?

I already mirror to 4 ports from 2 ports (ingress-and-egress) and 8 vlan(ingress).
How to set up mirroring in another instance from the same vlans(ingress) to another 1 port?

Re: Mirroring

Miguel-Angel_RO — Fri, 27 Nov 2020 15:42:11 GMT

Gorn,

You should share more info:

show config mirror

show mirror

Mig

Re: Mirroring

gorn — Fri, 27 Nov 2020 16:12:09 GMT

# show mirror

DefaultMirror   (Enabled)
   Description:    Default Mirror Instance, created automatically
   Mirror to ports: 1-4 loopback port: 5
   Source filter instances used : 10
       Port 10, all vlans, ingress and egress
       Port 11, all vlans, ingress and egress
       All ports, vlan vlan_2, ingress only
       All ports, vlan vlan_3, ingress only
       All ports, vlan vlan_4, ingress only
All ports, vlan vlan_5, ingress only
All ports, vlan vlan_6, ingress only
All ports, vlan vlan_7, ingress only
All ports, vlan vlan_8, ingress only
All ports, vlan vlan_9, ingress only
TEST-WIFI-MIRROR   (Disabled)
   Description:
   Mirror to port: 6
   Source filters configured :
       All ports, vlan vlan_2, ingress only
   All ports, vlan vlan_3, ingress only
   All ports, vlan vlan_4, ingress only
All ports, vlan vlan_5, ingress only
All ports, vlan vlan_6, ingress only
All ports, vlan vlan_7, ingress only
All ports, vlan vlan_8, ingress only
All ports, vlan vlan_9, ingress only
Mirrors defined:          2
Mirrors enabled:          1 (Maximum 4)
HW filter instances used: 10 (Maximum 128)
HW mirror instances used: 1 ingress, 1 egress (Maximum 4 total, 2 egress)

# show config | i mirror

configure mirror DefaultMirror to port-list 1-4 loopback-port 5
enable mirror DefaultMirror
create mirror "TEST-WIFI-MIRROR"
configure mirror TEST-WIFI-MIRROR to port 6
configure mirror DefaultMirror add port 10 ingress-and-egress
configure mirror DefaultMirror add port 11 ingress-and-egress
configure mirror DefaultMirror add vlan vlan_2 ingress
configure mirror DefaultMirror add vlan vlan_3 ingress
configure mirror DefaultMirror add vlan vlan_4 ingress
configure mirror DefaultMirror add vlan vlan_5 ingress
configure mirror DefaultMirror add vlan vlan_6 ingress
configure mirror DefaultMirror add vlan vlan_7 ingress
configure mirror DefaultMirror add vlan vlan_8 ingress
configure mirror DefaultMirror add vlan vlan_9 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_2 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_3 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_4 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_5 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_6 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_7 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_8 ingress
configure mirror TEST-WIFI-MIRROR add vlan vlan_9 ingress

Re: Mirroring

Miguel-Angel_RO — Fri, 27 Nov 2020 16:28:44 GMT

gorn,

There should be some misunderstanding on what you want to achieve.

Can you :

disable the mirroring instances
remove the following configs:
1. configure mirror DefaultMirror add vlan vlan_2 ingress
  configure mirror DefaultMirror add vlan vlan_3 ingress
  configure mirror DefaultMirror add vlan vlan_4 ingress
  configure mirror DefaultMirror add vlan vlan_5 ingress
  configure mirror DefaultMirror add vlan vlan_6 ingress
  configure mirror DefaultMirror add vlan vlan_7 ingress
  configure mirror DefaultMirror add vlan vlan_8 ingress
  configure mirror DefaultMirror add vlan vlan_9 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_2 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_3 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_4 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_5 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_6 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_7 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_8 ingress
  configure mirror TEST-WIFI-MIRROR add vlan vlan_9 ingress
enable the mirroring instances
test the output

Mig

Re: Mirroring

gorn — Fri, 27 Nov 2020 16:37:57 GMT

Sadly, I can't turn off the default instance, it's in production.
I want traffic from these vlans, as well as from ports 10 and 11, to be sent to ports 1-4.
..and try to send traffic from the same vlans to port 6. For this, vlans should probably be added as a source.

Re: Mirroring

Miguel-Angel_RO — Fri, 27 Nov 2020 16:43:34 GMT

Delete the test instance and create it as this:

create mirror "TEST-WIFI-MIRROR" configure mirror TEST-WIFI-MIRROR to port 6 configure mirror DefaultMirror add port 10 ingress-and-egress configure mirror DefaultMirror add port 11 ingress-and-egress

enable mirror TEST-WIFI-MIRROR

You cannot use the port 5 as it is used as loopback port in your config “configure mirror DefaultMirror to port-list 1-4 loopback-port 5” (read here: https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-mirror-to-multiple-ports and https://gtacknowledge.extremenetworks.com/articles/Q_A/Why-must-a-physical-loopback-port-be-used-for-one-to-many-mirroring )

Mig

Re: Mirroring

gorn — Fri, 27 Nov 2020 16:51:47 GMT

I do not really understand what can then be seen on port 6, if the source is not indicated.

Re: Mirroring

Miguel-Angel_RO — Fri, 27 Nov 2020 16:55:33 GMT

source is port 10 and 11 but I have a doubt now.

I’m not sure they can appear in two mirroring instances.

Mig

Re: Mirroring

gorn — Fri, 27 Nov 2020 17:09:19 GMT

configure mirror DefaultMirror to port-list 1-4 loopback-port 5
enable mirror DefaultMirror
configure mirror DefaultMirror add port 10 ingress-and-egress
configure mirror DefaultMirror add port 11 ingress-and-egress
- it already works.

I added vlans to the DefaultMirror, but there are doubts that traffic from them is on ports 1-4. This is my difficulty.
I am trying to somehow verify this by mirroring vlan-traffic to another port. In the course of this research, I received the message "Error: Filter vlan conflicts with filter vlan of enabled DefaultMirror mirror", which suggests the limitations of mirroring on the switch.

Re: Mirroring

Miguel-Angel_RO — Fri, 27 Nov 2020 17:16:19 GMT

gorn,

Have a look at the point 10 from this screenshot of the doc:

Did you enabled jumbo frames?

Mig

Re: Mirroring

gorn — Fri, 27 Nov 2020 17:51:38 GMT

Yes.

Re: Mirroring

Miguel-Angel_RO — Fri, 27 Nov 2020 17:57:10 GMT

gorn,

Then I don’t see many options.

To be sure and avoid impacting the config you’ll have to check on the other side of the cables on ports 1 to 4 and sniff the traffic

Mig