Many-to-Many MS Port Mirroring Solutions

[KRobert]

Hello MS Community! We recently partnered with a Security MSP and the have supplied us with an appliance that needs to sniff our traffic appliances connected to MS250 switches. During installation, we discovered the Meraki switches only support 1-to-1 or 1-to-many port mirroring switchports. Typically this MSP appliance would tap into multiple interfaces on a Cisco switch and contain specific VLAN traffic per mirrored port. 

Example includes:

1-to-1 to port mirror for LAN traffic. 

1-to-1 to port mirror for WAN traffic.

1-to-1 to port mirror for DMZ traffic. 

In this example, three sniffing ports on the appliance would connect to three mirror destination ports, which would be mirroring 3 source ports. 

Based on Meraki's documentation, this isn't possible, but I was wondering if anyone has had support be able to change this to support multiple 1-to-1 port mirrors or if you had to come up with a solution to workaround the issue. Any information would be helpful.

Thank you,

[PhilipDAth]

Use a trunk port to the MX for as much as possible, and the mirror that to the device.

[KRobert]

We have two trunk ports on our MX, one for the LAN and one for the DMZs. So this allows us to see the LAN and I could see the appliance viewing the DMZs as well. The problem we are having is with the combo of needing the LAN/WAN together and pointing it back to the single sniff port. Ideally we need two sniff ports on the MS appliance.

[KarstenI]

I assume you need to buy a network-Tap.