Allows the Network Security appliance to mirror the traffic that has been seen on the appliance to a third-party device through a TAP or SPAN port.
You can also enable port mirroring for all traffic types (including SSL encrypted traffic) on the monitoring interface by using the policymgr interface <interfacePair> mirror enable . For details about how to enable port mirroring for all traffic types, see the "Configuring Threat Management" chapter of the Network Security User Guide.
Note
If the appliance is deployed in inline block mode, blocked traffic is also forwarded.
For more information, see the Network Security System Administration Guide.
Syntax
policymgr interface <interfacePair> mirror port <portName>
Parameters
<interfacePair>
The interface pair from which traffic will be forwarded.
<portName>
The port that will receive the mirrored traffic, such as pether5 or pether6.
Examples
The following example configures pether6 as the mirror port for the monitoring traffic on Interface A, and displays the results.
hostname (config) # policymgr interface A mirror port pether6 hostname (config) # show policymgr interfaces Policy enabled: yes Interface A Active : yes op mode : block (enforcing) fail-safe : close policy : mixed tolerance : 1 Ports : pether3 pether4 QinQ : no QinQ-evet : 0x88a8 Mirror: Non-SSL : no SSL : no Port : pether6 .........
The following example configures pether6 as the mirror port for Interface A and pether9 as the mirror port for Interface C.
hostname (config) # policymgr interface A mirror port pether6 hostname (config) # policymgr interface C mirror port pether9
The following example configures pether6 as the mirror port for both Interface A and Interface D.
hostname (config) # policymgr interface A mirror port pether6 hostname (config) # policymgr interface D mirror port pether6
The following example configures pether10 as the mirror port for Interface D, which is in tap mode.
hostname (config) # policymgr interface D mirror port pether10
User role
Admin or Operator
Command mode
Config
Supported appliances
Network Security: Release 7.7