RE: Foundry ServerIronXL Question

From: Lim Meng Koon <ccelimmk(at)nus.edu.sg>
Date: Fri Jun 27 2003 - 23:09:31 EDT

In Foundry terms, it's called "mirror"....

At the global config level, use "mirror-port <interface>" to configure the interface where you want to plug in your traffic analyser. To start sending traffic to this mirror-port from another interface, go to that interface config, and set "monitor <both|in|out>"

These are cmds that worked on the ServerIron 400, I think they should be similar to ServerIronXL.

Hope this helps.

Regards
mengkoon

-----Original Message-----
From: Robert Strain [mailto:Robert.Strain@guardent.com] Sent: Friday, June 27, 2003 9:12 AM
To: 'focus-ids@securityfocus.com'
Subject: Foundry ServerIronXL Question

Does Foundry's ServerIronXL support "remote span" (Cisco Term) like port mirroring? I've checked out Foundry's web site without success, but they might have another vernacular for the same feature.

Thanks in advance for the answer.

Bob

---

---

Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the
world's premier technical IT security event! 10 tracks, 15 training sessions,
1,800 delegates from 30 nations including all of the top experts, from CSO's to
"underground" security specialists. See for yourself what the buzz is
about!
Early-bird registration ends July 3. This event will sell out. www.blackhat.com

---

---

---

Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training sessions, 1,800 delegates from 30 nations including all of the top experts, from CSO's to
"underground" security specialists. See for yourself what the buzz is about!
Early-bird registration ends July 3. This event will sell out. www.blackhat.com

---

Received on Wed Jul 2 10:16:13 2003