Brocade BigIron RX Series Configuration Guide - Manual (Page 675)

BigIron RX Series Configuration Guide 597
53-1002484-04
ACL-based inbound mirroring
22
Considerations when configuring ACL-based inbound
mirroring
The following must be considered when configuring ACL-based Inbound Mirroring:
• Configuring a Common Destination ACL Mirror Port for All Ports of a PPCR
• Support with ACL CAM Sharing Enabled.
• The mirror and copy-sflow keywords are mutually exclusive on a per-ACL clause basis.
• ACL-based inbound mirroring and port-based inbound mirroring are mutually exclusive on a
per-port basis.
• Mirror (analyzer) ports cannot be assigned to the 16x10G module. You can monitor traffic on
16x10 ports.
Configuring a common destination ACL mirror port for all ports of a PPCR
All ports using the same PPCR must have a Common Destination ACL mirror Port when configuring
ACL-based Inbound Mirroring. For Example, where ports 4/1 and 4/2 belong to the same PPCR, the
following configuration that configures them with different destination ACL mirror ports will fail and
generate an error message as shown.
BigIron RX(config)# interface ethernet 4/1
BigIron RX(config-if-e10000-4/1)# acl-mirror-port ethernet 6/1
BigIron RX(config-if-e10000-4/1)# interface ethernet 4/2
BigIron RX(config-if-e10000-4/2)# acl-mirror-port ethernet 6/2
Error: 4/2 and 4/1 should have the same ACL mirror port
Configuring ACL-based inbound mirroring
The following sections describe how to configure ACL-based Inbound Mirroring on a BigIron RX
router:
• Creating an ACL with a Mirroring Clause
• Applying the ACL to an Interface
• Specifying a Destination Mirror Port
• Specifying the Destination Mirror Port for IP Receive ACLs
Creating an ACL with a mirroring clause
The mirror keyword has been added for inclusion in IPv4 and IPv6 ACL clauses to direct traffic that
meets the clause to be sent to another port. In the following examples, the ACL is used to direct IP
traffic to a mirror port.
Example of ACL-based Mirroring supported for IPv4 ACLs.
BigIron RX(config)# access-list 101 permit ip any any mirror
The mirror parameter directs selected traffic to the mirrored port. Traffic can only be selected using
the permit clause. The mirror parameter is supported on rACLs.
NOTE
Layer 2 ACL-based mirroring is not supported on BigIron RX.