mini鵝的天地

1.Cisco 2950/2960/3550/3750
對指定多个端口fa0/5及fa0/6做雙向的監控，並將監控封包傳送給fa0/9

(config)#monitor session 1 source int fa0/5 - 6 both

(config)#monitor session 1 destination int fa0/9

查看 mirror 狀態
#show monitor session 1

※可對端口設置傳送(tx)、接收(rx)、雙向(both)流向的監控
※Fa0/9只做接收mirror的封包，無法ping別人及別人也無法ping他
※ session 代號，可為 1 - 66

Vlan Mirror 方式如下

(config)# monitor session 1 source vlan 3 both

2.Cisco 2924/2900XL/3500XL
對指定端口fa0/5封包mirror至fa0/9

(config)#int fa 0/9
(config-if)#port monitor f0/5

monitor session session source {{interface type} | {{vlan vlan-id} [rx | tx | both]} | {remote vlan rspan-vlan-id}}

monitor session session destination {{interface type} | {vlan vlan-id} | {remote vlan vlan-id} | {analysis-module slot-number} | {data-port port-number}}

monitor session session-number filter vlan vlan-range

monitor session servicemodule mod-list

monitor session session-number type {erspan-source | erspan-destination}