CLI support for configuring Network traffic mirroring
traffic_mirroring
is a tool that allows network administrators to set up an integration with their enterprise Intrusion Detection System (IDS). For more details see Configuring Lighthouse for Network traffic Mirroring.
root@lighthouse:~# traffic_mirroring --enable --destination-ip 10.97.100.1 --vlan-id 100
Configuring for Primary Lighthouse instance (Instance ID: 1).
Confirming that Traffic Mirroring is set up...
Traffic Mirroring successfully enabled.
root@lighthouse:~# traffic_mirroring --status
Primary Lighthouse 1 has traffic mirroring enabled.
Mirroring Node VPN (tun0) -> 10.97.100.1 (VLAN 100)
Mirroring Multi Instance VPN (tun1) -> 10.97.100.1 (VLAN 100)
root@lighthouse:~# traffic_mirroring --test
Preparing to test Node VPN (tun0) interface.
Pinging address '192.168.128.2' on interface 'tun0'.
Preparing to test Multi Instance VPN (tun1) interface.
Pinging address '172.16.1.2' on interface 'tun1'.
Test complete. The pings sent across the VPN's should have been mirrored.
root@lighthouse:~# traffic_mirroring --disable
Traffic Mirroring disabled.