This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SophosXG v19.0: how to config PortC for specific VLAN for mirrored port?

Hi, all! Installed XG v19.0 under VMware 7 platform; currently mirroring single VLAN (verified traffic on Procurve switch port). TAP set up on PortC. Trying to understand how PortC is assigned to the dedicated NIC we installed in the VMware host for this purpose. PortC is clearly not getting any of the traffic that I've verified is coming though the switch port (mirror). Something is clearly not lashed up correctly.

Are there any tools on the XG firewall that'll let me observe the traffic coming across PortC (ala Wireshark)? I don't see anything in the docs to indicate how to "connect" PortC to be used.

Suggestions for COHERENT documentation welcome (not vague blogs that don't contain real info).

Thanks.

SteveB

This thread was automatically locked due to age.

Top Replies

VinyV over 2 years ago +1

Hi Steve, You can use the option 5-3 from the console and run ifconfig PortC, if RX is increasing based you your I/O traffic then it's all set. You can also do a tcpdump -ni PortC to listen only…

Parents

0 Steve Bottoms over 2 years ago

Also, any way to PREVENT PortA and PortB traffic from being reported on-screen? Filtering this out of exports just to see if it's working is getting annoying. Thx.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Steve Bottoms over 2 years ago

Also, any way to PREVENT PortA and PortB traffic from being reported on-screen? Filtering this out of exports just to see if it's working is getting annoying. Thx.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rfcat_vk over 2 years ago in reply to Steve Bottoms

You can also use logviewer filtered on the IP address of the port.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 VinyV over 2 years ago in reply to rfcat_vk

That's true for non-tap interfaces. TAP interfaces don't have an IP address, they also can't be changed at GUI anymore.
Cancel
Vote Up 0 Vote Down

Cancel