Skip to content

Commit ac299e0

Browse files
committed
rewrite vlan considerations description
1 parent 9706264 commit ac299e0

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/defender-for-iot/organizations/best-practices/traffic-mirroring-methods.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -126,12 +126,12 @@ For more information, see [Update a sensor's monitoring interfaces (configure ER
126126

127127
### VLAN ID considerations for ERSPAN
128128

129-
When setting up ERSPAN, it's important to understand how VLAN IDs are handled based on the type of mirrored port:
129+
When you set up ERSPAN, consider how VLAN IDs are handled based on the type of mirrored port:
130130

131-
- **Tagged VLANs**: These VLANs are present in packets from trunk mirrored ports. They remain intact within the packet payload during encapsulation and are supported by the Microsoft Defender for IoT sensor.
132-
- **Untagged VLANs**: These VLANs originate from access mirrored ports. They're stripped from the payload during decapsulation, resulting in their loss. They aren't supported by the Microsoft Defender for IoT sensor.
131+
- **Tagged VLANs** exist in packets from trunk mirrored ports and remain intact within the packet's payload during encapsulation. The Defender for IoT sensor supports tagged VLANs.
132+
- **Untagged VLANs** originate from access mirrored ports. Untagged VLANs are stripped from the payload during decapsulation, and as a result the VLANs are lost. The Microsoft Defender for IoT sensor doesn't support untagged VLANs.
133133

134-
To ensure accurate VLAN detection, configure your network and ERSPAN router so that all mirrored ports use tagged VLANs. This means using mirror ports configured as trunk ports. This setup ensures that VLAN information remains preserved in the packet payload throughout the ERSPAN process, providing full visibility for monitoring on the Defender for IoT sensor.
134+
To ensure accurate VLAN detection, configure your network and ERSPAN router so that all mirrored ports use tagged VLANs, where mirror ports are configured as trunk ports. With this setup, VLAN information remains in the packet payload throughout the ERSPAN process and provides full visibility for the Defender for IoT sensor monitoring.
135135

136136

137137

0 commit comments

Comments
 (0)