OS10 port mirroring via 2 VLT stacks

Hi Antoine,

Did you follow the steps on page 520? https://dell.to/3jG7kiQ

Hi,

I did but it doesn't work or I misunderstood something. 

I don't know what needs to be settle. 

Do I have to config each switch or only the ones involved for destination and source ?

“If the packet analyzer directly connects to the VLT peer where the source session is configured, use local port monitoring instead of RPM.” Is it directly connected?

Is it not receiving any mirrored data? If you run show monitoring session does it show it?

No it is not directly connected,

Please see the schema at the beginning of the post.

Hi,

I will first try to test local mirroring.
I'll keep you in touch.

Thanks

Hi,

Ok, local port mirroring is working as expected.

But my goal is to monitor one or more ports as source and receive all involved trafic on a remote port (as described on my first post).

Could you help me to do this, step by step ?

Thanks

Hi,

Here is the only documentation I found related to this topic : https://www.dell.com/support/manuals/en-us/dell-emc-smartfabric-os10/smartfabric-os-user-guide-10-5-1/remote-port-monitoring-on-vlt?guid=guid-1b47f530-ad76-45e8-bd73-7de7eb5cfffc&lang=en-us

If you need help with this step-by-step configuration, this is part of a paid service. I invite you to contact your pre-sales engineer to define the scope with him.

Best regards,

Thanks,

I read this. But it doesn't say if we need to configure involved switchs (hosting the source/destination ports) or all of them...

Ok so I let this topic open if community had a similar experience and found solutions.

Have a good day !

Maybe I do it wrong from my topology, what I did

Switch 2 (S5224F-ON 2) :

!interface vlan 901
no shutdown
remote-span
!

!mac access-list rpm
seq 10 permit any any capture session
10 vlan 901
!
interface ethernet 1/1/22:1
no shutdown
switchport access vlan 601
mac access-group rpm in
!

=> applying "mac access-group rpm in" makes something bad - devices on that port are not able to communicate with other devices on same vlan (601) - icmp KO

After removing "mac access-group rpm in" port works again as expected...

I can't go further...

Have you configured that list, but default it is going to block all traffic not in the mac address list, so if the list doesn’t have mac addresses all traffic will be blocked. Page 914 https://dell.to/3c9wLXR

Thanks, that's a good start

So what needs to be done in order to make it work ?

Hello,

at page 933 you can see some example about how to permit trafic.

As Stephane said we cannot go ahead about this configuration as is a paid service.

I hope it helps.

Thanks

Marco

Thanks.

Thus, what is the purpose of creating and applying a mac access-list for a remote port mirroring ?