Chapter1010 – Port Mirroring and SetupSetup the ports for network speeds, performance as well as for monitoring….his section explains how individual characteristics of a port on the GarrettCom Magnum 6Kfamily of switches are setup. For monitoring a specific port, the traffic on a port can bemirrored on another port and viewed by protocol analyzers. Other setup includesautomatically setting up broadcast storm prevention thresholds.T PAhanort monitoring and mirroringn Ethernet switch sends traffic from one port to another port, unlike aub or a shared network device, where the traffic is “broadcast” on eachd every port. Capturing traffic for protocol analysis or intrusion analysiscan be impossible on a switch unless all the traffic for a specific port is“reflected” on another port, typically a monitoring port. The Magnum 6K family ofswitches can be instructed to repeat the traffic from one port onto another port. Thisprocess - when traffic from one port is reflecting to another port - is called port mirroring.The monitoring port is also called a “sniffing” port. Port monitoring becomes critical fortrouble shooting as well as for intrusion detection.jPort mirroringMonitoring a specific port can be done by port mirroring. Mirroring traffic from one portto another port allows analysis of the traffic on that port. The set of commands for portmirroring areSyntax show port-mirror – displays the status of port mirroringSyntax port-mirror - enter the port mirror configuration modeSyntax setport monitor= sniffer= -setup a prot mirrior portSyntax prtmr - enable and disable port mirroring122
