1. Home
  2. Cisco Systems
  3. mirror port 2621xm

mirror port 2621xm

Howdy,

I am trying to setup port mirroring on a Cisco 2621xm. i issue the standard command "monitor session 1 source interface fastethernet 0/1 both" - and the error i receive is: "% Invalid input detected at '^' marker." (the ^ pointer is at 'f' of fastethernet). Yes i have 2 fastethernet interfaces (please see below output). i have found no documentation stating that i am unable to setup port monitoring / port spanning on a cisco 2621.

Thanks in advance quinn

----------------------------------------------------------------------------------------------------------------------------------------------

gateway(config)#monitor session 1 source interface fastEthernet 0/1 both ^ % Invalid input detected at '^' marker.

---------------------------------------------------------------------------------------------------------------------------------------------- FastEthernet0/1 is up, line protocol is up Hardware is AmdFE, address is 0009.e850.7401 (bia 0009.e850.7401) Internet address is 192.168.1.4/24 MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX

FastEthernet0/0 is up, line protocol is up Hardware is AmdFE, address is 0009.e850.7400 (bia 0009.e850.7400) Internet address is 192.168.0.1/29 MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX

----------------------------------------------------------------------------------------------------------------------------------------------

Cisco IOS Software, C2600 Software (C2600-ADVSECURITYK9-M), Version

12.4(15)T8, RELEASE SOFTWARE (fc3) Technical Support:
formatting link
(c) 1986-2008 by Cisco Systems, Inc. Compiled Mon 01-Dec-08 14:23 by prod_rel_team

ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)

gateway uptime is 4 days, 2 hours, 53 minutes System returned to ROM by reload at 17:08:38 AEST Thu Jun 4 2009 System restarted at 17:12:09 AEST Thu Jun 4 2009 System image file is "flash:c2600-advsecurityk9-mz.124-15.T8.bin"

----------------------------------------------------------------------------------------------------------------------------------------------

Reply to
quinngrayson47
Loading thread data ...

Nope, you can't. Only on switch ports. FastEthernet 0/1 is a layer-3 router port, so no port mirroring.

Reply to
Doug McIntyre

thanks Doug.

Any other way to capture > snipped-for-privacy@gmail.com writes:

Reply to
quinngrayson47

The two traditional ways are if the traffic isn't too heavy, and you don't need the actual packets, to setup port ACL filters to watch for the traffic you want to detect and log it. Or Netflow.

Or, put in a sniffer upstream of it with a switch that can port mirror, or a hub.

Reply to
Doug McIntyre

You can of course debug ip packet [det]. Horrendous performance hit to the extent of losing management connectivity in some circumstances. Router might need power off to recover.

Worth noting that the latest, greatest 12.4T has integrated packet capture, can export to pcap file. Not tried it yet:-( Sounds a bit like pix and more.

Don't suppose it would run on 2621xm, but might be worth checking.

Reply to
bod43

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.