3

Does a port mirror send ethernet frames out of the switch-port with the 802.1Q header bytes still on the frame?

Matt
  • 1,142
  • 1
  • 12
  • 32

1 Answers1

4

By default, no. However, the behavior can be controlled on the monitor command; the encapsulation argument controls this. replicate will preserve the encapsulation type that the packet had in transit, while dot1q will force the 802.1Q header.

Shane Madden
  • 114,520
  • 13
  • 181
  • 251