09-28-2007 04:12 AM - edited 03-05-2019 06:45 PM
I would like to monitor a multicast group on a VLAN. I have a snoop machine connected to an access-port on the VLAN. At the moment I can see the broadcasts, some non-IP 224.0.0.0/24 multicasts, and the occasional flooded unicast packet.
What I would like to do is generate an IGMP join so that I can see the particular multicast group. But my snoop machine cannot do that. Is there any way I can do it on the switchport, much in the same way as you would do ip igmp join-group on a layer 3 interface?
How about can I force my snooping port to be an IGMP-snooping router port but just for the group I am interested in? Would that disrupt my multicast traffic, and how do I do it on a 4506 platform?
Kevin Dorrell
Luxembourg
09-28-2007 06:07 AM
Hi Kevin,
If there is any other multicast receiver connected in that switch, you can create a span session with destination as your snoop machine port.
Or you can use the vlan itself as span source session to replicate traffic to your snoop machine.
Did you find any issues with this approach?
Thanks,
Nambi
09-28-2007 07:27 AM
I did consider using the VLAN as a span source, but I chickened out because the VLAN is carrying up to about 200 Mbps on this switch and the monitor port is 100 Mbps. (That shouldn't be blocking on a 4506 should it? And does the access-list filter actually work when the source is a VLAN? Can someone reassure me?)
Unfortunately there are not any multicast receivers on the switch. My permanent monitor port is on the distribution switch, which carries only downlink trunks to the access layer, the external connections, and a few management connections.
I guess I will have to find out where the multicast receivers are and go and monitor there.
Thanks for the suggestions anyway.
Kevin Dorrell
Luxembourg
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide