Wednesday 5 April 2023

PART 9 - C9800 - Troubleshooting - Embedded Packet Capture

 Embedded Packet Capture filtered on AP IP

ip access-list extended CAP-FILTER

permit ip host <AP_IP> any

permit ip any host <AP_IP>

monitor capture MYCAP clear

monitor capture MYCAP interface Po1 both

monitor capture MYCAP buffer size 100

monitor capture MYCAP match any

monitor capture MYCAP access-list CAP-FILTER

monitor capture MYCAP start

!!Reproduce

monitor capture MYCAP stop

monitor capture MYCAP export flash:|tftp:|http:.../filename.pcap

Packet Capture filtered on Client MAC(available after Cisco IOS® XE 17.1.1s)

monitor capture MYCAP clear

monitor capture MYCAP interface Po1 both

monitor capture MYCAP buffer size 100

monitor capture MYCAP match any

monitor capture MYCAP inner mac <Client_MAC>

monitor capture MYCAP start

!!Reproduce

monitor capture MYCAP stop

monitor capture MYCAP export flash:|tftp:|http:.../filename.pcap

Verify

show monitor capture MYCAP

show monitor capture MYCAP buffer brief/detail/dump


No comments:

Post a Comment