Forum Discussion

luyenntk50db_14's avatar
luyenntk50db_14
Icon for Nimbostratus rankNimbostratus
Aug 13, 2014

Configuration Interface mirroring in My network

My network topology as blow. I read in F5 KB about configure interface mirroring as below: link text

 

But I has some question: - don't config IP for interface destination? - from server want to get traffic mirroring in F5 by way?

 

My topology as blow. Pls guide me config Interface Mirroring to RUM Server Probe can get traffic mirroring.

 

2 Replies

  • IheartF5_45022's avatar
    IheartF5_45022
    Icon for Nacreous rankNacreous
    Aug 13, 2014

    A mirroring (destination) interface will have frame sent out with the original l2/l3 headers, so there needs to be a probe interface in promiscuous mode connected to it. You don't need an IP address on either the LTM interface or the probe interface. Your probe will have another interface which will have an IP (to allow access to the collected traffic from the RUM engine).

     

  • luyenntk50db's avatar
    luyenntk50db
    Icon for Nimbostratus rankNimbostratus
    Aug 14, 2014

    this topology has two ways to monitoring: 1) the 1st way, I config in F5 big IP: To configure interface mirroring: Destination Interface: 1.3 Mirrored Interfaces: 1.1; 1.2 and what must i configure in SW server or CP?

     

    2) the 2nd way, I congig direct in SW server to port monitor: ingress: interface connect to Big-IP egress: interface connect to Big-IP monitort to port: interface connect to RUM server?

     

    Pls guide me to config.