Hi i have a very specific use case which requires my monitoring tool to receive captured data including vlan headers
i've tried several different methods of VDS port mirroring and im getting mixed results
some of the methods i'm trying remove the vlans tags and some preserve them
here are the methods I've tested:
Port mirroring legacy with source mirror and destination as the same portgroup - removes vlan tags
Port mirroring legacy with source mirror and destination as the diffrent portgroup - removes vlan tags
Distributed port mirroring (via web client) with source mirror and destination as the same portgroup - removes vlan tags
Distributed port mirroring (via web client) with source mirror and destination as the different port group - preserves vlan tags
I've ruled out the fact that the monitored machines are in the same broadcast domain by conducting a ping using machine in the same broadcast domain
as well as a machine on a different vlan (going through a virtual router) results were the same
also i made sure the "Preserver original vlan" checkbox was marked
(i've also made sure that the destination port group is in trunking mode and has Forged transmits and mac address changes in accept
i'vee checked using wireshark)
my point is that instead of performing a trail an error experiment here i would like to know if there is an official answer on how to configre port mirroring in a way that i can see the vlan tags in the captured destination
in addition, i'm using Gammon Appliances, which create automatically a port mirroring session in the form of Legacy port mirroring (the version that is available in vSphere client) so i would also like to know if it is possible to preserver the vlan tagges using legacy port mirroring
thanks