Unsolved
1 Rookie
•
2 Posts
0
5
Difference in monitoring session sources, vlan vs individual ports
MY question would be is there any difference between the network traffic that is being passed when I use vlans as the source versus all connected ports as a session source?
example say int gig1/16 is tagged in vlan 5 and tagged in vlan 1
and int gig 1/10 is tagged in vlan 1
if i did "
"source gig 1/16 destination gig 1/17 direction both
source gig 1/10 destination gig 1/17 direction both"
would that traffic being mirrored be the same as this traffic:
"source vlan 1 destination gig 1/17 direction both
source vlan 5 destination gig 1/17 direction both"
DELL-Charles R
Moderator
Moderator
•
3.8K Posts
0
November 14th, 2024 21:44
Hello,
When you set the source as a VLAN, you're capturing traffic from all ports that are members of that VLAN, including trunk ports that carry the VLAN. This means that if you have a port like gig 1/16 that's tagged with VLAN 1 and VLAN 5, it will be included in the mirrored traffic for source vlan 1 but not for source vlan 5 if you set the source as vlan 5 individually.
When you set the source as individual ports, you're capturing traffic from those specific ports only. So this means that traffic from other ports, even if they're tagged with the same VLAN, will not be included in the mirrored traffic.