3

Does a port mirror send ethernet frames out of the switch-port with the 802.1Q header bytes still on the frame?

Ablue
  • 1,140
  • 1
  • 12
  • 32

1 Answers1

4

By default, no. However, the behavior can be controlled on the monitor command; the encapsulation argument controls this. replicate will preserve the encapsulation type that the packet had in transit, while dot1q will force the 802.1Q header.

Shane Madden
  • 112,982
  • 12
  • 174
  • 248