Network configuration
As shown in Figure 1, to monitor the Internet access behaviors of users on network segments 192.168.30.0/24 and 192.168.40.0/24, perform the following tasks:
Configure the uplink port Ethernet 1/0/1 of the switch as a source port of a mirroring group.
Configure Ethernet 1/0/23 as the monitor port of the mirroring group.
Then, the following events occur:
The users' Internet access traffic on Ethernet 1/0/1 is sent to the probe through Ethernet 1/0/23.
The probe sends the generated logs to the IMC UBA server.
IMC UBA generates audit reports based on the logs.
Figure 1: Network diagram
