Port Mirroring
Port Mirroring
This chapter contains information on how to configure layer 2 port mirroring.
Configuring a Port Mirror
Using the web-based manager:
1.
Go to Switch > Port > Mirror.
2. Enter a name for the mirror.
3.
Set the Status Enable check box to set the mirror to active.
4. Select a Destination Port.
5. Select available ports to be used for Ingress Monitoring and Egress Monitoring.
6.
Enable the Packet switching functionality when mirroring option if the destination port is not a dedicated
port. For example, enable this option if you connect a laptop to the switch and you are running a packet sniffer
along with the management GUIon the laptop.
Using the CLI:
config switch mirror
edit "m1"
set dst "port5"
set src-egress "port2" "port3"
set src-ingress "port2" "port4"
set status active
set switching-packet enable
end
Multiple Mirror Destination Ports (MTP)
With some FortiSwitch models, you can configure multiple mirror destination ports. However, note the following
guidelines and restrictions:
l Always set the destination port before setting the src-ingress or src-egress ports
l Any port configured as a src-ingress or src-egress port in one mirror cannot be configured as a destination port in
another mirror.
l For switch models FS-1024D, FS-1048D, and FS--3032D:
l You can configure a maximum of four mirror destination ports.
l You can configure a maximum of four ingress/egress ports.
l The same ingress/egress port can be mirrored to more than one destination port.
l For switch models FS-108D-POE and FS-224D-POE:
l You can configure up to seven port mirrors, each with a different destination port.
35
FortiSwitchOS-3.2.0
