Netmon Docs · Device Configuration Guide

Dell PowerSwitch OS10v7.0.20

Set up local monitor sessions and sFlow export on Dell PowerSwitch and PowerEdge MX switches running SmartFabric OS10 so Netmon can see the traffic crossing them.

Covers Dell PowerSwitch (S-series / Z-series) and PowerEdge MX switch modules running SmartFabric OS10 (this page follows the 10.5.6 CLI; the same syntax applies across the 10.5.x line). Commands are entered from the OS10 CLI in CONFIGURATION mode.

Mirror traffic (SPAN)

OS10 calls port mirroring a “monitor session.” A local monitoring session copies traffic from one or more source interfaces to a destination interface, where Netmon’s sniffer NIC is cabled. (OS10 also supports remote variants — RPM/ERPM — and ACL-filtered flow-based monitoring, but for feeding a directly attached Netmon collector a local session is what you want.)

Cable the Netmon sniffer NIC to the switch port you will use as the destination, then:

Confirm the intended destination port has no configuration other than no shutdown / no switchport.
```
OS10# show running-configuration
```
Create a local monitoring session. This drops you into MONITOR-SESSION mode.
```
OS10(config)# monitor session 1
OS10(conf-mon-local-1)#
```

Add the source interface(s) and the direction to capture (both, rx, or tx).

OS10(conf-mon-local-1)# source interface <source-interface> {both | rx | tx}

Set the destination interface (the port cabled to the Netmon sniffer NIC) and bring the session up.

OS10(conf-mon-local-1)# destination interface <destination-interface>
OS10(conf-mon-local-1)# no shut

Worked example — mirror ingress traffic from Eth1/1/1 out to Eth1/1/2:

OS10(config)# monitor session 1
OS10(conf-mon-local-1)# source interface Eth1/1/1 rx
OS10(conf-mon-local-1)# destination interface Eth1/1/2
OS10(conf-mon-local-1)# no shut

Verify the session. In the State column, true means the port is enabled; Is UP in Reason means hardware resources are allocated.
```
OS10# show monitor session all
```

Note

Use both to capture bidirectional traffic from a source port. To mirror several ports, repeat the source interface command for each one within the same session.

Important

The destination interface is dedicated to mirroring — it must carry no other configuration beyond no shutdown / no switchport before you add it to the session. Port monitoring is not supported on the Z9332F-ON platform, and on the Z9664F-ON mirroring to a destination LAG is not supported. On the Netmon side the receiving NIC must be set to Sniffer (manual) — see Receiving the Data in Netmon.

Source: Dell SmartFabric OS10 User Guide Release 10.5.6, “Configure local monitoring session” and “monitor session”. https://www.dell.com/support/manuals/en-us/smartfabric-os10-emp-partner/smartfabric-os-user-guide-10-5-6/configure-local-monitoring-session?guid=guid-8b625c76-2a25-4519-9ed3-f9752edc7f0c&lang=en-us

Export flow data

Dell PowerSwitch / SmartFabric OS10 exports sFlow only. These platforms do not implement NetFlow or IPFIX, so there is no NetFlow/IPFIX configuration to perform — the switch sends sFlow to Netmon’s collector instead. Netmon receives sFlow on UDP 6343, which is also OS10’s default sFlow collector port, so no port override is normally needed.

Enable sFlow globally, register the Netmon appliance as the collector, then enable sFlow on each interface you want sampled.

Enable sFlow globally (all interfaces) in CONFIGURATION mode.
```
OS10(config)# sflow enable all-interfaces
```
Add the Netmon appliance as the sFlow collector. Set agent-addr to the switch address that Netmon knows the device by (the source address stamped into exported datagrams). The collector port is optional — omit it to use the default UDP 6343, which is what Netmon listens on.
```
OS10(config)# sflow collector <netmon-ip> agent-addr <switch-source-ip>
```
If your Netmon collector listens on a non-default UDP port, append the port number:
```
OS10(config)# sflow collector <netmon-ip> agent-addr <switch-source-ip> <collector-port-number>
```

Enable sFlow on the interfaces (or interface range) to be sampled. sflow enable is available in both CONFIGURATION and INTERFACE modes.

OS10(config)# sflow enable
OS10(config)# interface ethernet <node/slot/port>
OS10(conf-if-eth<node/slot/port>)# sflow enable

Example — enable on a range of interfaces:

OS10(config)# sflow enable
OS10(config)# interface range ethernet 1/1/1-1/1/10
OS10(conf-range-eth1/1/1-1/1/10)# sflow enable

Verify the configuration. The output lists each collector with its IP, agent IP, and UDP port, plus exported-packet counters.
```
OS10# show sflow
```

Note

The default OS10 sFlow polling interval is 30 seconds; sample rate and polling interval can be tuned with sflow sample-rate and sflow polling-interval if your collector expects different values. Setting agent-addr to the address Netmon identifies the switch by keeps exported flows attributed to the correct device.

Important

If your Netmon appliance is reachable only across the switch’s management network, append the vrf argument to the collector command so the datagrams are sent over the management VRF — for example sflow collector <netmon-ip> agent-addr <switch-source-ip> vrf management. Remember to also enable Allow Netflow Data Collection for this device in Netmon (see Receiving the Data in Netmon).

Source: Dell SmartFabric OS10 User Guide Release 10.5.6, “Enable sFlow”. https://www.dell.com/support/manuals/en-us/smartfabric-os10-emp-partner/smartfabric-os-user-guide-10-5-6/enable-sflow%C2%AE?guid=guid-51d7b51d-b135-4759-83ad-a2d40db5e997&lang=en-us

Source: Dell SmartFabric OS10: OS9-to-OS10 Command Mapping, “sFlow” (sflow collector syntax); and Dell KB 000121452 (default UDP port 6343). https://www.dell.com/support/manuals/en-us/smartfabric-os10-emp-partner/techsheet-os10-5-x-os9-pub/sflow?guid=guid-19ed7ba2-8d36-4ebb-80a4-7f5fe021af41&lang=en-us

PreviousHPE Aruba ArubaOS-Switch (ProVision) NextExtreme EXOS / Switch Engine