Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > mirror port 2621xm

Reply
Thread Tools

mirror port 2621xm

 
 
quinngrayson47@gmail.com
Guest
Posts: n/a
 
      06-08-2009
Howdy,

I am trying to setup port mirroring on a Cisco 2621xm. i issue the
standard command "monitor session 1 source interface fastethernet 0/1
both" - and the error i receive is: "% Invalid input detected at '^'
marker." (the ^ pointer is at 'f' of fastethernet). Yes i have 2
fastethernet interfaces (please see below output). i have found no
documentation stating that i am unable to setup port monitoring / port
spanning on a cisco 2621.

Thanks in advance
quinn

----------------------------------------------------------------------------------------------------------------------------------------------

gateway(config)#monitor session 1 source interface fastEthernet 0/1
both
^
% Invalid input detected at '^' marker.

----------------------------------------------------------------------------------------------------------------------------------------------
FastEthernet0/1 is up, line protocol is up
Hardware is AmdFE, address is 0009.e850.7401 (bia 0009.e850.7401)
Internet address is 192.168.1.4/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX

FastEthernet0/0 is up, line protocol is up
Hardware is AmdFE, address is 0009.e850.7400 (bia 0009.e850.7400)
Internet address is 192.168.0.1/29
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
----------------------------------------------------------------------------------------------------------------------------------------------

Cisco IOS Software, C2600 Software (C2600-ADVSECURITYK9-M), Version
12.4(15)T8, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Mon 01-Dec-08 14:23 by prod_rel_team

ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE
(fc1)

gateway uptime is 4 days, 2 hours, 53 minutes
System returned to ROM by reload at 17:08:38 AEST Thu Jun 4 2009
System restarted at 17:12:09 AEST Thu Jun 4 2009
System image file is "flash:c2600-advsecurityk9-mz.124-15.T8.bin"

----------------------------------------------------------------------------------------------------------------------------------------------







 
Reply With Quote
 
 
 
 
cutetplt cutetplt is offline
Junior Member
Join Date: Jan 2009
Location: Bangkon, Thailand
Posts: 11
 
      06-08-2009
Hi mate!

Command for using at Cisco 2600 is a little bit different from Multilayer switch such as C6500 series. Anyway, you are able to put following command below at the interface that you wanna monitor:

Interface FaseEthernet0/10
port monitor FastEthernet0/1
!


Tony
 
Reply With Quote
 
 
 
 
Doug McIntyre
Guest
Posts: n/a
 
      06-08-2009
http://www.velocityreviews.com/forums/(E-Mail Removed) writes:
>I am trying to setup port mirroring on a Cisco 2621xm. i issue the
>standard command "monitor session 1 source interface fastethernet 0/1
>both" - and the error i receive is: "% Invalid input detected at '^'
>marker." (the ^ pointer is at 'f' of fastethernet). Yes i have 2
>fastethernet interfaces (please see below output). i have found no
>documentation stating that i am unable to setup port monitoring / port
>spanning on a cisco 2621.


Nope, you can't. Only on switch ports.
FastEthernet 0/1 is a layer-3 router port, so no port mirroring.
 
Reply With Quote
 
quinngrayson47@gmail.com
Guest
Posts: n/a
 
      06-08-2009
thanks Doug.

Any other way to capture information on the "other side" for network
analysis / security purposes?

Doug McIntyre wrote:
> (E-Mail Removed) writes:
> >I am trying to setup port mirroring on a Cisco 2621xm. i issue the
> >standard command "monitor session 1 source interface fastethernet 0/1
> >both" - and the error i receive is: "% Invalid input detected at '^'
> >marker." (the ^ pointer is at 'f' of fastethernet). Yes i have 2
> >fastethernet interfaces (please see below output). i have found no
> >documentation stating that i am unable to setup port monitoring / port
> >spanning on a cisco 2621.

>
> Nope, you can't. Only on switch ports.
> FastEthernet 0/1 is a layer-3 router port, so no port mirroring.

 
Reply With Quote
 
Doug McIntyre
Guest
Posts: n/a
 
      06-08-2009
(E-Mail Removed) writes:
>Any other way to capture information on the "other side" for network
>analysis / security purposes?


The two traditional ways are if the traffic isn't too heavy, and you
don't need the actual packets, to setup port ACL filters to watch
for the traffic you want to detect and log it. Or Netflow.

Or, put in a sniffer upstream of it with a switch that can port
mirror, or a hub.

 
Reply With Quote
 
bod43
Guest
Posts: n/a
 
      06-11-2009
On 8 June, 23:41, Doug McIntyre <(E-Mail Removed)> wrote:
> (E-Mail Removed) writes:
> >Any other way to capture information on the "other side" for network
> >analysis / security purposes?

>
> The two traditional ways are if the traffic isn't too heavy, and you
> don't need the actual packets, to setup port ACL filters to watch
> for the traffic you want to detect and log it. Or Netflow.
>
> Or, put in a sniffer upstream of it with a switch that can port
> mirror, or a hub.


You can of course debug ip packet [det]. Horrendous performance hit
to the extent of losing management connectivity in some
circumstances. Router might need power off to recover.

Worth noting that the latest, greatest 12.4T has integrated packet
capture,
can export to pcap file. Not tried it yet Sounds a bit like pix
and more.

Don't suppose it would run on 2621xm, but might be worth checking.

 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
2621xm with nm-16a and LOW speeds A. Andrews Cisco 3 01-16-2004 12:45 PM
2621XM Frame Relay stats not add up Rocl LI Cisco 0 01-15-2004 06:39 AM
Receving IDSN incoming calls on a 2621XM Stephan Cohen Cisco 0 10-23-2003 08:18 AM
Re: ISDN BRI unwanted deconnections on a CIsco 2621XM Stephan Cohen Cisco 0 10-16-2003 03:33 PM
Re: ISDN BRI unwanted deconnections on a CIsco 2621XM Aaron Leonard Cisco 3 10-16-2003 05:22 AM



Advertisments