Technical Tip: SPAN (Port Mirroring)

[sbaikadi]

Description
This article describes how to setup SPAN (Port Mirroring) on a Standalone and Managed FortiSwitch.

Useful links.
https://docs.fortinet.com/product/fortiswitch/6.4
Page#123 Managed FSW:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/daae6d6f-d2a0-11ea-96b9-005056...
Page#141 Standalone FSW:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/1f363a36-ba24-11ea-8b7d-005056...

Solution
Packet mirroring allows to collect packets on specified ports and then send them to another port to be collected and analyzed.
All FortiSwitch models support switched port analyzer(SPAN) mode, which mirrors traffic to the specified destination interface without encapsulation.

STEPS TO CONFIGURE PORT MIRRORING ON A STANDALONE FortiSwitch.

From CLI access to standalone FortiSwitch using SSH/TeraTerm.

# config switch mirror
    edit <mirror_name>
        set status active
        set dst <port_name>                          <----- Always set the destination port before setting the src-ingress or src-egress ports.
        set switching-packet <enable | disable>
        set src-ingress <port_name>                  <----- Set the source ingress physical ports that will be mirrored.
        set src-egress <port_name>                   <----- Set the source egress physical ports that will be mirrored.
end

STEPS TO CONFIGURE PORT MIRRORING ON A MANAGED FortiSwitch.
From CLI  access to FortiGate using SSH/TeraTerm.

# config switch-controller managed-switch
    edit <FortiSwitch_Serial_Number>
# config mirror
    edit <mirror_name>
    set status active
    set dst <port_name>                              <----- Always set the destination port before setting the src-ingress or src-egress ports
    set switching-packet <enable | disable>
    set src-ingress <port_name>                      <----- Set the source ingress physical ports that will be mirrored.
    set src-egress <port_name>                       <----- Set the source egress physical ports that will be mirrored.
end
end