Configure Airwall Gateways to act as the Mirror Sources
You configure Mirror Source Airwall Gateways to send network information to the Mirror Destination Airwall Gateway.
CAUTION: If you capture traffic on all ports of the overlay port group, you
may set up a loop. To avoid this, in your configuration set a BPF filter of “ip
proto not 47” to exclude mirrored traffic. See BPF Settings for Port Mirroring.
If you use GRE Transparent Ethernet Bridging, ERSPAN type II or ERSPAN type III – You can use GRE key or Session ID to identify which source the packets arrived on.
Note: You can set up the Mirror Destination to also be a Mirror Source, to include that
Airwall Gateway's
traffic in the information sent to the packet analyzer. In this case, be sure to set
a BPF filter to exclude the mirrored traffic.
- On a Mirror Source Airwall Gateway, go to .
- Select Edit Settings.
- Next to Configurations, select the + to add a mirroring configuration.
-
In your new configuration:
- Select Update Settings.
Note: You can set up different configurations for a Mirror Source Airwall Gateway to
send traffic to different Mirror Destinations.