https://community.extremenetworks.com/t5/extremeswitching-exos-switch/port-mirror-with-complex-filter/m-p/34317#M6716 Have a common SMB deployment (300 users) where the firewall is at the "core" of the network, meaning that's the DFGW for LAN users, not a layer 3 VIP on the switched core. I need to mirror North/South traffic (LAN to INTERNET and vice versa) so I don't really want to mirror ALL traffic to the firewall interface (which could be destined for another LAN subnet, subinterface, etc.). I was thinking that it would be cool if I could combine some criteria like the destination MAC of the firewall and an IP not known to be local and build a mirror of just that traffic. Anyone run up against something like this? The firewall can mirror an interface but the whole interface (sub-interfaces too). I could move the gateway to a VIP and drop another subnet in front of the firewall but this environment is very sensitive to downtime and it'd be like pulling teeth. Any suggestions/ideas? Thanks in advance! Thu, 26 Jul 2018 05:29:00 GMT Eric_Burke 2018-07-26T05:29:00Z https://community.extremenetworks.com/t5/extremeswitching-exos-switch/port-mirror-with-complex-filter/m-p/34317#M6716 Have a common SMB deployment (300 users) where the firewall is at the "core" of the network, meaning that's the DFGW for LAN users, not a layer 3 VIP on the switched core. I need to mirror North/South traffic (LAN to INTERNET and vice versa) so I don't really want to mirror ALL traffic to the firewall interface (which could be destined for another LAN subnet, subinterface, etc.). I was thinking that it would be cool if I could combine some criteria like the destination MAC of the firewall and an IP not known to be local and build a mirror of just that traffic. Anyone run up against something like this? The firewall can mirror an interface but the whole interface (sub-interfaces too). I could move the gateway to a VIP and drop another subnet in front of the firewall but this environment is very sensitive to downtime and it'd be like pulling teeth. Any suggestions/ideas? Thanks in advance! Thu, 26 Jul 2018 05:29:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/port-mirror-with-complex-filter/m-p/34317#M6716 Eric_Burke 2018-07-26T05:29:00Z