Traffic mirroring on Hyper-V

Traffic mirroring and possible issues on Hyper-V

Product: Flowmon OS

Version: Any

Platform: Hyper-V

I cannot see any traffic on the monitoring port after following the deployment guide.

For port mirroring, it is necessary to enable "monitor mode" on the vSwitch with the following commands (with administrator privileges):

$portFeature=Get-VMSystemSwitchExtensionPortFeature -FeatureName "Ethernet Switch Port Security Settings"
$portFeature.SettingData.MonitorMode = 2 
Add-VMSwitchExtensionPortFeature -ExternalPort -SwitchName "NameOfCreatedSwitch" -VMSwitchExtensionFeature $portFeature

It is possible to verify the configuration with:

Get-VMSwitchExtensionPortFeature -FeatureName "Ethernet Switch Port Security Settings" -SwitchName "NameOfCreatedSwitch" -ExternalPort | select -ExpandProperty SettingData

It is recommended to enable VLAN monitoring even if the VLANs are not used at the time of configuration:

$VMNetAdap = Get-VMNetworkAdapter -VMName "NameOfCreatedVirtualMachine"
rename-VMNetworkAdapter -VMNetworkAdapter $VMNetAdap[0] -newname "Management 1"
rename-VMNetworkAdapter -VMNetworkAdapter $VMNetAdap[1] -newname "Management 2"
rename-VMNetworkAdapter -VMNetworkAdapter $VMNetAdap[2] -newname "Monitoring 1"
rename-VMNetworkAdapter -VMNetworkAdapter $VMNetAdap[3] -newname "Monitoring 2"

Set-VMNetworkAdapterVlan -Trunk -AllowedVlanIdList "1-4094" -VMName "NameOfCreatedVirtualMachine" -VMNetworkAdapterName "Monitoring 1" -NativeVlanId 0
Set-VMNetworkAdapterVlan -Trunk -AllowedVlanIdList "1-4094" -VMName "NameOfCreatedVirtualMachine" -VMNetworkAdapterName "Monitoring 2" -NativeVlanId 0

It is possible to verify the configuration with:

Get-VMNetworkAdapter -VMName "NameOfCreatedVirtualMachine"
Get-VMNetworkAdapterVlan