ICX 7150 Stack Port Mirroring

Question

I have a small stack of ICX-7150 switches running software version 10.0.0.10.

I am trying to setup the monitor and mirror pair of 1/2/2 to 3/1/21 - both ports are ethernet, 1 gig copper. I have succeeded in get it set up and working but I don’t seem to be able to block random multicast, ARP etc. bleeding in from other devices/ports. I want the mirror port (3/1/21) to simply be an absolute passive copy of the In and Out of 1/2/2  without anything generated by the stack or multicast and related from other ports.

Any suggestions?

BenBeck · Accepted Answer

You need to put the mirror port in an isolated vlan.

Port Mirror Example

ICX(config)#mirror-port ethernet 1/1/12 <---port connected to laptop. Ensure this port is in dummy vlan by itself to avoid unknown UC, MC, BC traffic
ICX(config)#int eth 1/1/11 <-----port that we want to monitor
ICX(config-if-e1000-1/1/11)#monitor ethernet 1/1/12 in/out/both <---define if we want ingress, egress, bidirectional traffic

GregNI · Accepted Answer

Thanks for this. I just spotted that I had that I had created my dummy VLAN with the port as tagged instead of untagged and now I have moved to untagged it works fine.

For anyone who's following up:

vlan 999 name dummy-monitor by port
 untagged ethe 3/1/21

mirror-port ethernet 3/1/21

interface ethernet 1/2/2
 monitor ethernet 3/1/21 both

GregNI · Accepted Answer

Hi,

The last command monitor ethernet both 1/1/1 both should be 1/1/2

ie. monitor ethernet 1/1/2 both

The 'monitor' command says where should I send the data which in this case is 1/1/2