Reference Guide

Port monitoring
Port monitoring enables monitoring of ingress or egress traffic of one port to another for analysis. A monitoring port (MG) or
destination port, is the port where the monitored traffic is sent for analysis. A monitored port (MD) is the source interface
which is monitored for traffic analysis, also called source port.
Depending on the location of the destination interface, port monitoring is performed as follows:
● Local port monitoring — The port monitoring is performed in the same switch. The switch forwards a copy of incoming
and outgoing traffic from one port to another port for further analysis.
● Remote port monitoring (RPM) — The port monitoring is performed on traffic running across a remote device in the
same network. The monitored traffic is carried over the L2 network.
● Encapsulated remote port monitoring (ERPM) — The port monitoring is performed on an L3 network. The traffic from
the source port is encapsulated and forwarded to the destination port in another switch.
Local port monitoring
The local port monitoring monitors traffic from one or more ports from the switch to one or more ports on the same switch. For
local port monitoring, the monitored source and monitoring destination ports are on the same device.
Configure local monitoring session
1. Verify that the intended monitoring port has no configuration other than no shutdown and no switchport.
show running-configuration
2. Create a monitoring session in CONFIGURATION mode.
monitor session session-id [local]
3. Enter the source and direction of monitored traffic in MONITOR-SESSION mode.
source interface interface-type {both | rx | tx}
4. Enter the destination of traffic in MONITOR-SESSION mode.
destination interface interface-type
Create monitoring session
OS10(config)# monitor session 1
OS10(conf-mon-local-1)#
Configure source and destination port, and traffic direction
OS10(conf-mon-local-1)# source interface ethernet 1/1/7-1/1/8 rx
OS10(conf-mon-local-1)# destination interface ethernet1/1/1
OS10(conf-mon-local-1)# no shut
View configured monitoring sessions
In the State field, true indicates that the port is enabled. In the Reason field, Is UP indicates that hardware resources are
allocated.
OS10# show monitor session all
S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason
----------------------------------------------------------------------
1 ethernet1/1/7 ethernet1/1/1 rx N/A N/A N/A N/A true Is UP
Layer 2
243