Port Mirroring.

[Hboogie]

Okay, I'd like to get the official 3com stance on how to properly configure port mirroring on the 5500g-EI switches.

Lets look at the following scenario:

Fw(default gateway) - 2/0/24

Ntop/Wireshark machine - 3/0/12

What configuration do i need to set on each port in order for the ntop/wireshark machine to view all the FW traffic ?

I know that 3com employs mirroring groups, but i'm unclear on how to use them to my advantage.

I'm assuming that i'd have to MONITOR the FW port and set the NTOP/Wireshark to mirroring-port both ?

Thanks all.

 

[cknipe]

actually you have it backwards

The mirror port should be your firewall, the mornitor port should be your wireshark port

The first part is to define the mirror group

it if your not familiar with the command line it will be easier to configure through the gui of the switch