Acl-based inbound mirroring, Creating an acl-based inbound mirror clause – Brocade TurboIron 24X Series Configuration Guide User Manual

Page 460

Advertising
background image

426

Brocade TurboIron 24X Series Configuration Guide

53-1003053-01

ACL-based inbound mirroring

By default, when you monitor the primary port in a trunk group, aggregated traffic for all the ports in
the trunk group is copied to the mirror port. You can configure the device to monitor individual ports
in a trunk group. You can monitor the primary port or a secondary port individually.

To configure port monitoring on an individual port in a trunk group, enter commands such as the
following.

TurboIron(config)#mirror-port ethernet 6

TurboIron(config)#trunk e 2 to 5

TurboIron(config-trunk-2-5)#config-trunk-ind

TurboIron(config-trunk-2-5)#monitor ethernet 4 ethernet 6 in

Traffic on trunk port e 4 will be monitored, and the monitored traffic will be copied to port e 6, the
mirror port.

Syntax: [no] mirror-port ethernet [<portnum> [input | output]

Syntax: [no] config-trunk-ind

Syntax: [no] monitor ethernet <portnum> both | in | out

The <portnum> parameter for mirror-port ethernet specifies the port to which the monitored traffic
will be copied. The <portnum> parameter for monitor ethernet specifies the port on which traffic
will be monitored.

The input or output parameters configure the mirror port exclusively for ingress or egress traffic. If
you do not specify one, both types of traffic apply.

The config-trunk-ind command enables configuration of individual ports in the trunk group. You
enter the config-trunk-ind command only once in a trunk group. After you enter the command, all
applicable port configuration commands apply to individual ports only.

NOTE

If you enter no config-trunk-ind, all port configuration commands are removed from the individual
ports and the configuration of the primary port is applied to all the ports. Also, once you enter the
no config-trunk-ind command, the enable, disable, and monitor commands are valid only on the
primary port and apply to the entire trunk group.

The both, in, and out parameters specify the traffic direction you want to monitor on the mirror port.
There is no default.

To display the port monitoring configuration, enter the show monitor and show mirror commands

ACL-based inbound mirroring

This section describes how to configure ACL-based inbound mirroring.

Creating an ACL-based inbound mirror clause

The following example shows how to configure an ACL-based inbound mirror clause.

1. Configure the mirror port.

TurboIron(config)#mirror-port ethernet 2

2. Configure the ACL inbound mirror clause.

Advertising