Mirror Path — Configure Port Mirroring (SPAN)

Brightwater Transit Authority · core distribution switch BWT-DSW-01
N10-009 · 2.3 APNET · U2 (provisional)

The security team just racked a new IDS sensor in the Brightwater Transit data center. Its capture interface is patched into the core switch BWT-DSW-01, but it can only inspect traffic if you mirror the WAN uplink to it. Your shift task: stage the analyzer port, build a monitor session that copies received traffic from the uplink to the sensor, and save the configuration so it survives a reboot.

Switch Console — BWT-DSW-01 10.20.4.9 · SSH
Username:
Mirror Path no active session
Gi1/0/4 WAN uplink BWT-DSW-01 session 1 Gi1/0/20 IDS sensor
Lab tasks0 / 4
  • ✓ Authenticate to the switch and enter privileged EXEC. Log in with the shift credentials, then enable.
  • ✓ Place the analyzer port Gi1/0/20 into access VLAN 90 (IDS-CAPTURE). Configure the interface as an access port on VLAN 90.
  • ✓ Build monitor session 1: source Gi1/0/4 (received), destination Gi1/0/20. Mirror traffic entering the uplink to the sensor port.
  • ✓ Save the running configuration to startup. Persist the change so it survives a reload.
Knowledge check0 / 3

Q1What is the generic industry term for copying frames from a monitored port to a separate analysis port?

Q2Which direction keyword captures only traffic entering the source port?

Q3To see the mirrored copy, the IDS sensor must be cabled to which port?

Submit completed labpseudonymous · no real names
Score 0 / 7