Mirror paort of Nortel ERS 8300

I am facing a very strange problem with Nortel ERS 8300 Switch. I am using this command

diag mirror-by-port 2 create in-port 2/46 out-port 2/43 mode both  ( 2/46 is mirrored port and 2/43 is monitor port)

When I am connecting to 2/43 to take tcp dump,  I am getting VLAN ID :4094 in each packet. I found some artcles describing it as security purpose. But I have to disable this.  

Help..

Thanks,
Peter
LVL 1
anishpeterAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rick_O_ShayCommented:
I believe that is the default value used if you don't specifically set the
mirroring-vlan parameter to match the source VLAN. I don't know if there is any way to set it to none.
0
anishpeterAuthor Commented:
Hi Rick,
       I have mostly Cisco Experience and VLAN in SPAN port is irrevelent.  But I am not sure in Nortel.
And I am mirrorring a Port, Not a VLAN.
Please explain more

0
Rick_O_ShayCommented:
If you put the mirroring port in the same VLAN as the mirrored port I think you should be all set. I believe the 4094 is being assigned if the mirroring port is not in the same VLAN.  

You don't want to set the mirroring VLAN in your case.
0
Become a Leader in Data Analytics

Gain the power to turn raw data into better business decisions and outcomes in your industry. Transform your career future by earning your MS in Data Analytics. WGU’s MSDA program curriculum features IT certifications from Oracle and SAS.  

anishpeterAuthor Commented:
I tried putting the mirroring port and mirrored port in same VLAN. Again I am getting VLAN ID in my mirrored packet. Any idea
0
anishpeterAuthor Commented:
Hi..
    I found a solution myself. I think this is the property of Nortel 8300 Passport Switches. When I am getting mirrored traffic, each packet will be having the VLAN ID of the actual packets destination address. Let say, If I am getting packet from Internet to one of my internal IP address, 192.168.21.199 ( in VLAN 21 - User VLAN) the  mirror packet will contain VLAN ID 21. This property is irresepective of the port I am mirroring. Here the Port is part of my Firewall VLAn ( VLAN 105). If I am sending a packet to Internet, Then the destination packet is not part of Any VLAN, then VLAN ID:4094 will be attached to the packet.

Then comes to my solution - I am now using one of the SFP ports in my SF CPU module and this port is not having this character.  

Thanks,
Peter
0
Rick_O_ShayCommented:
Thanks for the update.
0
anishpeterAuthor Commented:
I found the solution and closing the case now
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
anishpeterAuthor Commented:
I have done the workaround as explained in the case notes
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.