Forum Discussion

Aspirant

Nov 29, 2017

Solved

GS110TP port mirroring not working

Hi Team, Port mirroring not working not workign on gs110TP switch.As i mentioned in the screen shot , port 6 data wants to be mirrored to port 5. but as soon as i enable it , PC that connect to Po...

Firmware

Software & Apps

njc
Dec 14, 2017
Thanks Eriz , Hopchecn for your support.

My issue is resolved . issue was because my PC (where i used to capture the packet) dropps the vlan packets and netgear send mirrored packets with vlan tagged.
Now i used another PC where it can accpet vlan packets and able to capture mirrored tx and RX packets.

thanks again for your support
(suggestion : pls send plane packets with vlan tag removed else people may see issue with mirrored ports)

njc

Aspirant

Dec 12, 2017

Hopchen wrote:
Hi again,

So, if I understand correctly this is the problem:
njc >> yes below comment from 1, 2 ,3 is correct
1. If you enable TX only in the port mirror settings. That works OK?
2. If you enable RX only in the port mirror settings. That does not work, you see nothing in the capture?
3. If you enable both RX and TX in the port mirror settings. That does not work, you see nothing in the capture or only TX traffic?

What is important to remember is that mirrored RX means received - from the switch point of view. Incoming to the switch - so, actually TX packets from the source device. Is the source device (in port 6) generating any traffic during the packet capture?
njc >>yes traffic is from PC
Ping 8.8.8.8, or something like that, from the source PC in port 6 - to generate traffic and you see that as RX traffic in the capture.
njc >> nothign captured in the mirror port
Cheers

Hopchen

Prodigy

Dec 12, 2017

Hi again,

I just checked my lab here and don't actually have a GS110TP to test with. I would encourage you to reach out to support and let them have a look. If there is a general issue, we need that logged. I can confirm that it works fine on other models I have, but it might be good if support help do a test on the GS110TP model.

You can log a case by signing into https://my.netgear.com/registration/login.aspx and raise a case under this product. If you have any issues with this, send me a PM and I will look into it.

Cheers

Retired_Member
Dec 14, 2017
Hi njc,

Welcome to the community!

I have one GS110TP switch in my Lab, and I tried the Mirror function, looks like it work normally. In mirror port, I can capture both RX and TX packet.

1. Topo:

Router---------(port2)GS110TP(port1/7)=======PC1/PC2

2. Test Step:

a. The Router IP is 192.168.1.1, the GS110TP IP is 192.168.1.108, the PC1 IP is 192.168.1.101;

b. GS110TP port2 connect to Router, port1 connect to PC1, port7 connect to PC2;

c. Config Port Mirror, Source port is port2, Destination port is port7, Direction is 'TX and RX';

d. From PC1 ping Router;

e. From PC2 open wireshark to caputure packet, we can see both RX(ICMP Request) and TX(ICMP Reply) packet.

So please check your GS110TP image, is it latest version(v5.4.2.30). If not, please upgrade first, then do factory default, config Port Mirror and try again. If it's latest version, please check your Port Mirror, is it same like my step?

Hope it helps!

Regards,

EricZ
NETGEAR employee
njc
Aspirant
Dec 14, 2017
Thanks Eriz , Hopchecn for your support.

My issue is resolved . issue was because my PC (where i used to capture the packet) dropps the vlan packets and netgear send mirrored packets with vlan tagged.
Now i used another PC where it can accpet vlan packets and able to capture mirrored tx and RX packets.

thanks again for your support
(suggestion : pls send plane packets with vlan tag removed else people may see issue with mirrored ports)
Hopchen
Prodigy
Dec 14, 2017
Hi njc

We would want to keep the VLAN tag intact due to troubleshooting reasons, in multiple VLAN setups. In any case, any PC should be able to capture VLAN packets anyway, you just need to ensure that your NIC (on the PC you are capturing with) is set to Promiscuous Mode. Wireshark should do that per default, but else just enable it in Wireshark: "Capture" > "Options"

Cheers