fvalcho

Basic Port Mirroring on Ciena switches

Discussion created by fvalcho on Sep 27, 2017
Latest reply on Oct 3, 2017 by fvalcho

The basics of mirroring traffic is fairly straight forward. It is similar to Cisco's SPAN command technique.

I am using SAOS saos-06-15-00-0331 loaded on a CN3930.

 

6 commands are available to 'set' mirroring.

    port set port egress-mirror
    port set port ingress-mirror
    port set port mirror-encap <none|vlan-tag>
    port set port mirror-encap-tpid <8100|9100|88A8>
    port set port mirror-encap-vid
    port set port mirror-port <on|off>

To unset, the opposite applies:

    port unset port egress-mirror
    port unset port ingress-mirror
    port unset port mirror-encap
    port unset port mirror-encap-vid
    port unset port mirror-encap-tpid

 

The user can set several parameters as they see fit, i.e. MAX packet size, or ingress only packets, or egress only packets, etc.

 

These commands will send all ingress and egress traffic from/to the (RG) port (port-1) to the mirror-port (sniffer)(port-2).

NOTE: If sniffer ports are copper, be sure to set the port Mode to RJ45!!

command setup:
==============
Port 2 is the mirror-port.
Port 1 in the RG port

Verify settings perform ‘port show port #’

Example:
========
port set port 2 max-frame-size 9130 mirror-port on
port set port 1 max-frame-size 9130 ingress-mirror 2 egress-mirror 2 description nni-1
    Wireshark <--> port-2 - 3960 - Port-1 <--> NNI (IPAG)

 

Topology example:
=================
  pc/wireshark eth0 <---> port-2 sniffer port - 3930/Port-1 <-->  User Traffic                                      P9,10 -- NNI port(s) (AGG)
                                   \\{---- User Traffic ---}
                                    \\
                                  (network) <--> far-end device <--> User Traffic

port show port 1

+-------------------------------- PORT 1 INFO ---------------------------------+
| Field                    | Admin                   | Oper                    |
+--------------------------+-------------------------+-------------------------+

........................

| Mirror-port              | Off                     | Off                     | <<-- not set
| Mirroring Encapsulation  | none                    |                         |
| Mirror Encap VID         | 1                       |                         |
| Mirror Encap TPID        | 8100                    |                         |
| Ingress-mirror           | 2                       | 2                       | <<-- ingress mirror
| Egress-mirror            | 2                       | 2                       | <<--- egress mirr

 

port show port 2

+-------------------------------- PORT 2 INFO ---------------------------------+
| Field                    | Admin                   | Oper                    |
+--------------------------+-------------------------+-------------------------+

.........................

| Mirror-port              | On                      | On                      | <<-- set
| Mirroring Encapsulation  | none                    | none                    |
| Mirror Encap VID         | 1                       |                         |
| Mirror Encap TPID        | 8100                    |                         |
| Ingress-mirror           |                         |                         |
| Egress-mirror            |                         |                         |

Outcomes