05-15-2025 12:04 PM
I have a small stack of ICX-7150 switches running software version 10.0.0.10.
I am trying to setup the monitor and mirror pair of 1/2/2 to 3/1/21 - both ports are ethernet, 1 gig copper. I have succeeded in get it set up and working but I don’t seem to be able to block random multicast, ARP etc. bleeding in from other devices/ports. I want the mirror port (3/1/21) to simply be an absolute passive copy of the In and Out of 1/2/2 without anything generated by the stack or multicast and related from other ports.
Any suggestions?
Solved! Go to Solution.
05-15-2025 12:12 PM
You need to put the mirror port in an isolated vlan.
Port Mirror Example
ICX(config)#mirror-port ethernet 1/1/12 <---port connected to laptop. Ensure this port is in dummy vlan by itself to avoid unknown UC, MC, BC traffic
ICX(config)#int eth 1/1/11 <-----port that we want to monitor
ICX(config-if-e1000-1/1/11)#monitor ethernet 1/1/12 in/out/both <---define if we want ingress, egress, bidirectional traffic
05-15-2025 12:47 PM
Thanks for this. I just spotted that I had that I had created my dummy VLAN with the port as tagged instead of untagged and now I have moved to untagged it works fine.
For anyone who's following up:
vlan 999 name dummy-monitor by port
untagged ethe 3/1/21
mirror-port ethernet 3/1/21
interface ethernet 1/2/2
monitor ethernet 3/1/21 both
07-10-2025 01:10 PM
Hi,
The last command monitor ethernet both 1/1/1 both should be 1/1/2
ie. monitor ethernet 1/1/2 both
The 'monitor' command says where should I send the data which in this case is 1/1/2
