Print this pagePrint this page

Email this topicEmail this topic

View PDFView PDF

Download EPUBDownload EPUB

port

interface-ge-config commands

Enables port monitoring on the selected port. This allows the port to monitor specified ports and/or MAC address(es). When enabled, the switch sends a copy of the network packets seen on the specified switch port (or VLAN interface) to the monitoring switch port. These packets are analyzed and debugged to provide vital information, such as network performance, intrusion alerts, etc.

Supported in the following platforms:

  • Switches — EX3524, EX3548
  • Wireless Controllers — RFS4000
  • Service Platforms — NX7500, NX7510, NX7520, NX7530, NX9500, NX9510, NX9600

Syntax

port monitor [ethernet|ex3500-ext-access-list|ex3500-std-access-list|mac-access-list|mac-address|vlan]
port monitor ethernet 1 <1-52> {both|rx|tx}
port monitor [ex3500-ext-access-list|ex3500-std-access-list|mac-access-list] <ACL-NAME>
port monitor mac-address <MAC>
port monitor vlan <1-4094>

Parameters

port monitor ethernet 1 <1-52> {both|rx|tx}
port monitor ethernet 1 <1-52> Configures the characteristics of this GE port
  • monitor – Enables monitoring of another port
    • ethernet 1 – Selects Ethernet interface and configures the port identifier as 1
      • <1-52> – Configures the Ethernet unit number from 1 - 52
{both|rx|tx} After specifying the port, optionally configure the following:
  • both – Optional. Monitors both incoming and outgoing traffic
  • rx – Optional. Monitors only incoming traffic
  • tx – Optional. Monitors only outgoing traffic
 
port monitor [ex3500-ext-access-list|ex3500-std-access-list|mac-access-list] <ACL-NAME>
port monitor Configures the characteristics of this GE port
  • monitor – Enables monitoring of another port
[ex3500-ext-access-list|ex3500-std-access-list|mac-access-list] <ACL-NAME> After specifying the port, apply one of the following ACLs:
  • ex3500-ext-access-list – Applies a EX3500 extended ACL
  • ex3500-std-access-list – Applies a EX3500 standard ACL
  • mac-access-list – Applies a MAC ACL with EX3500 deny or permit rules
    • <ACL-NAME> – Specify the ACL name (should be existing and configured).
 
port monitor mac-address <MAC>
port monitor Configures the characteristics of this GE port
  • monitor – Enables monitoring of another port
mac-address <MAC> Configures the MAC address to monitor
  • <MAC> – Specify the MAC address in the AA-BB-CC-DD-EE-FF format.
 
port monitor vlan <1-4094>
port monitor Configures the characteristics of this GE port
  • monitor – Enables monitoring of another port
vlan <1-4094> Configures the VLAN interface to monitor
  • <1-4094> – Specify the VLAN ID from 1 - 4094.

Example

nx9500-6C8809(config-profile-testEX3524-if-ge1-20)#port monitor vlan 20

nx9500-6C8809(config-profile-testEX3524-if-ge1-20)#show context
 interface ge 1 20
  access-group ex3500-ext-access-list EX3500_ACL_EXT_1 in time-range EX3500_TimeRange_01
  port monitor vlan 20
nx9500-6C8809(config-profile-testEX3524-if-ge1-20)#

Related Commands

no Disables port monitoring on the selected port and removes the settings
Published April 2019prev | next

Email this topicEmail this topic

Print this pagePrint this page