Switching > Port Mirroring

You can configure Port Mirroring on SonicOS to send a copy of network packets seen on one or more switch ports (or on a VLAN) to another switch port called the mirror port. By connecting to the mirror port, you can monitor the traffic passing through the mirrored port(s).

A VLAN trunk port can be mirrored, but cannot act as a mirror port itself.

The Switching > Port Mirroring page allows you to assign mirror ports to mirror ingress, egress or bidirectional packets coming from a group of ports.

Topics

Configuring a Port Mirroring Group

To create a new port mirroring group, perform the following steps:
1
On the Switching > Port Mirroring page, click the New Group button.
2
In the Edit Mirror Group dialog, type a descriptive name for the group into the Interface Group Name field.

3
For the Direction, select one of the following:
ingress – To monitor traffic arriving on the mirrored port(s).
egress – To monitor traffic being sent out on the mirrored port(s).
both – To monitor traffic in both directions on the mirrored port(s).
4
5
In the All Interfaces list, select the port to mirror the traffic to and click the top right-arrow button to move it to the Mirror Port field. You must use an unassigned port as the mirror port.
6
In the All Interfaces list, select one or more ports to be monitored, and click the lower right-arrow button to move it/them to the Mirrored Ports field. You will be able to monitor traffic on the mirrored port(s) by connecting to the mirror port.
7
Click OK.

Deleting a Port Mirroring Group

To remove a port mirroring group, perform the following steps:
1
On the Switching > Port Mirroring page, select the checkbox next to the port mirroring group that you want to delete.
2
Click the Ungroup button.
3
Click OK in the confirmation dialog box.