Any possible to do remote port mirroring on omniswitch?

Post Reply
zlinuxboy
Member
Posts: 24
Joined: 14 Jan 2025 20:40

Any possible to do remote port mirroring on omniswitch?

Post by zlinuxboy »

cisco and huawei support rspan or erspan.
Do os6900 support this feature, I can found these feature on official guide.

And I find there is an erspan0 port on os6860-24, might be 6860 support erspan?

Code: Select all

SHASTA #-> ip link ls erspan0
9: erspan0@NONE: <BROADCAST,MULTICAST> mtu 1450 qdisc noop qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
User avatar
Cristek
Member
Posts: 95
Joined: 08 Mar 2024 10:56

Re: Any possible to do remote port mirroring on omniswitch?

Post by Cristek »

Doesn't look like you can do it based on the Guide. I don't see anything there either.
zlinuxboy
Member
Posts: 24
Joined: 14 Jan 2025 20:40

Re: Any possible to do remote port mirroring on omniswitch?

Post by zlinuxboy »

Then could I capture packet/ethernet frame on os6900/6860?
I am trying to figure out the process of isis adjacent built by observ the hello pdu.
silvio
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 2076
Joined: 01 Jul 2008 10:51
Location: Germany

Re: Any possible to do remote port mirroring on omniswitch?

Post by silvio »

there are a lot possibilities f.e. debug ip packet, port-mirroring, port-monitoring, rpmir, qos log and tcpdump
zlinuxboy
Member
Posts: 24
Joined: 14 Jan 2025 20:40

Re: Any possible to do remote port mirroring on omniswitch?

Post by zlinuxboy »

@silvio
What do you mean of tcpdump? I have been tried tcpdump under su mode of omniswitch, but no isis traffic captured.
could you elaborate debug ip packet, isis is running on top of ethernet layer, so how to utilize it for observe isis traffic?
silvio
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 2076
Joined: 01 Jul 2008 10:51
Location: Germany

Re: Any possible to do remote port mirroring on omniswitch?

Post by silvio »

for tcpdump:
> tcpdump -D to see the interfaces
> tcpdump -i any to see traffic at all interfaces
I do not know at what point of the interface tcpdump is capturing. Maybe the spb-isis packets (with the ah-header) are created at the "more" outside.

you are correct: debug ip packet is for ip packets only.

But port-monitoring and -mirroring should work.
Post Reply

Return to “OmniSwitch 6900”