The switch/router configuration

• SPAN/mirror port configuration

  • SPAN/mirroring port session configuration (if you are using this deployment option)

  • We recommend configuring in advance or ensure the presence of a responsible network administrator

  • ATTENTION – SPAN/mirror port has to be configured to autonegotiation or to 1000Mb/s line speed (1000Mbps switch/router to 100Mb/s line speed)

  • SPAN/mirror port should be configured as a trunk port to forward VLAN tags. Some switches do not support this feature.

  • SPAN/mirror port should be configured as follows:

    • Either mirror RX/ingress traffic from all ports – otherwise duplicates will occur

    • Or mirror only Rx traffic from all VLANs – otherwise duplicates will occur

    • If the switch does not support mirroring from all ports, then mirror ingress and egress traffic from available ports – duplicates may occur in some cases

• Flowmon appliance management port connection

  • Use the correct VLAN for the management port of the Probe and Collector. The Probe must reach the Collector to send NetFlow to it.

Important notes

• There will be several seconds of drop out on the monitored line during TAP installation

  • The network administrator should be informed about the drop out. We recommend installing the TAP in advance (during planned downtime).

• Be aware of correct optical TAP connection

  • Light must go into the TAP’s Network IN port (on switch/router is connected to Tx)

  • Light goes out from the TAP’s Network OUT port (on switch/router is connected to Rx)

  • If the ports are swapped, the monitored link operates but the traffic is not mirrored. This situation can be fixed by correctly connecting of the TAP but the line drop out will happen again.

  • TAP’s Monitor OUT ports must be connected to the Probe’s monitor RX ports. Do not connect the TAP’s Monitor OUT port to the Probe’s monitor TX port. The monitored link will stop operating.

• It is good practice to request the necessary IP addresses in advance

  • IP address for the management port of the Probe/Collector, mask, gateway, 2x DNS server, and NTP server (when it is available)