Cisco port mirror/cisco 2950 - Revision history

WFilter at 02:45, 30 July 2014

2014-07-30T02:45:20Z

2014-07-18T06:33:47Z

‎Defining Port Mirroring

2014-07-18T06:32:24Z

2014-07-18T06:31:55Z

2014-07-18T06:31:24Z

2014-07-18T06:29:52Z

2014-07-18T06:28:45Z

2014-07-18T06:14:00Z

‎Introduction

2014-07-18T05:34:30Z

2014-07-18T05:30:14Z

← Older revision		Revision as of 02:45, 30 July 2014
Line 16:		Line 16:

	<p>Please notice, the mirroring port of cisco 2950 is recv-only by default. However WFilter shall be able to send packages for blocking purpose. So in this example, we add "ingress vlan 1" parameter to enable outgoing traffic on port 22. If your switch does not support "ingress" parameter, you need to add another NIC as the blocking adapter.</p>		<p>Please notice, the mirroring port of cisco 2950 is recv-only by default. However WFilter shall be able to send packages for blocking purpose. So in this example, we add "ingress vlan 1" parameter to enable outgoing traffic on port 22. If your switch does not support "ingress" parameter, you need to add another NIC as the blocking adapter.</p>
		+
		+	[[Category:Deployment]]
		+	[[Category:Cisco]]

@@ Line 6: / Line 6: @@
 <p>You need to setup a mirroring port in the cisco 2950 switch.</p>
 <p>In this example, internet router is connected to "Port 23", WFilter computer is connected to "Port 22". To monitor all internet traffic, we need to mirror "port 23" to "port 22".</p>
 <p> Mirroring commands: </p>
@@ Line 12: / Line 13: @@
 Set target port
   monitor session 1 destination interface Fa0/22 ingress vlan 1
 <p>Please notice, the mirroring port of cisco 2950 is recv-only by default. However WFilter shall be able to send packages for blocking purpose. So in this example, we add "ingress vlan 1" parameter to enable outgoing traffic on port 22. If your switch does not support "ingress" parameter, you need to add another NIC as the blocking adapter.</p>

@@ Line 7: / Line 7: @@
 <p>In this example, internet router is connected to "Port 23", WFilter computer is connected to "Port 22". To monitor all internet traffic, we need to mirror "port 23" to "port 22".</p>
-<p> Mirroring commands </p>
+<p> Mirroring commands: </p>
- Set source port
+Set source port
-monitor session 1 source interface Fa0/23
+ monitor session 1 source interface Fa0/23
- Set target port
+Set target port
-monitor session 1 destination interface Fa0/22 ingress vlan 1
+ monitor session 1 destination interface Fa0/22 ingress vlan 1
 <p>Please notice, the mirroring port of cisco 2950 is recv-only by default. However WFilter shall be able to send packages for blocking purpose. So in this example, we add "ingress vlan 1" parameter to enable outgoing traffic on port 22. If your switch does not support "ingress" parameter, you need to add another NIC as the blocking adapter.</p>

@@ Line 8: / Line 8: @@
 <p> Mirroring commands </p>
-Set source port
+ Set source port
 monitor session 1 source interface Fa0/23
   Set target port

@@ Line 8: / Line 8: @@
 <p> Mirroring commands </p>
-# Set source port
+Set source port
 monitor session 1 source interface Fa0/23
-# Set target port
+ Set target port
 monitor session 1 destination interface Fa0/22 ingress vlan 1
 <p>Please notice, the mirroring port of cisco 2950 is recv-only by default. However WFilter shall be able to send packages for blocking purpose. So in this example, we add "ingress vlan 1" parameter to enable outgoing traffic on port 22. If your switch does not support "ingress" parameter, you need to add another NIC as the blocking adapter.</p>

@@ Line 3: / Line 3: @@
 Cisco 2950 port mirroring setting
-== Introduction ==
+== Defining Port Mirroring ==
-<p>This document demonstrators how to deploy WFilter with a cisco 2950 switch. The network topology diagram:</p>[[image:Passby switch topology.png]]<br>
 <p>You need to setup a mirroring port in the cisco 2950 switch.</p>
 <p>In this example, internet router is connected to "Port 23", WFilter computer is connected to "Port 22". To monitor all internet traffic, we need to mirror "port 23" to "port 22".</p>
-== Mirroring commands ==
+<p> Mirroring commands </p>
-===Set source port===
+#Set source port#
 monitor session 1 source interface Fa0/23
-===Set target port===
+#Set target port#
 monitor session 1 destination interface Fa0/22 ingress vlan 1
 <p>Please notice, the mirroring port of cisco 2950 is recv-only by default. However WFilter shall be able to send packages for blocking purpose. So in this example, we add "ingress vlan 1" parameter to enable outgoing traffic on port 22. If your switch does not support "ingress" parameter, you need to add another NIC as the blocking adapter.</p>