Community discussions

MikroTik App
 
llamafilm
just joined
Topic Author
Posts: 2
Joined: Fri Nov 05, 2021 6:44 pm

Port mirror to ether1

Fri Nov 05, 2021 7:46 pm

Hello. I'm brand new to Microtik products, I've just received a hAP ac2. I want to mirror traffic from ether4 to ether1 for Wireshark analysis. Is this possible, since ether1 is a WAN port?

I read here that by default ether1 is included in the switch group, but that doesn't seem to be true here. By default a device on ether1 does not receive an IP address. I tried turning on switch-all-ports but this command doesn't seem to work:
[admin@MikroTik] /interface ethernet switch> set switch1 switch-all-ports=yes
[admin@MikroTik] /interface ethernet switch> print
Flags: I - invalid 
 #   NAME           TYPE             MIRROR-SOURCE         MIRROR-TARGET         SWITCH-ALL-PORTS
 0   switch1        Atheros-8327     none                  none                 
 
[admin@MikroTik] /interface ethernet switch> set switch1 switch-all-ports=no 
[admin@MikroTik] /interface ethernet switch> print
Flags: I - invalid 
 #   NAME           TYPE             MIRROR-SOURCE         MIRROR-TARGET         SWITCH-ALL-PORTS
 0   switch1        Atheros-8327     none      
 
llamafilm
just joined
Topic Author
Posts: 2
Joined: Fri Nov 05, 2021 6:44 pm

Re: Port mirror to ether1

Fri Nov 05, 2021 7:59 pm

In the meantime, I tried mirroring to port 2 instead, to avoid the LAN/WAN port issue. But this also isn't working. I used this command:
/interface ethernet switch> set switch1 mirror-source=ether4 mirror-target=ether3
Then I reconnected my Mac to port 3, and it still receives a DHCP address. It seems like port 3 is still functioning as a regular switch port, not received any traffic from port 4.

Who is online

Users browsing this forum: Bing [Bot], BioMax, GoogleOther [Bot], hatred, mtkvvv and 48 guests