Brocade Communications Systems Brocate Ethernet Access Switch 6910 User Manual

Page 352

Advertising
background image

302

Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002581-01

Local Port Mirroring Commands

14

acl-name – Name of the ACL. (Maximum length: 16 characters, no spaces or other special
characters)

Default Setting

No mirror session is defined.

When enabled for an interface, default mirroring is for both received and transmitted packets.

When enabled for a VLAN or a MAC address, mirroring is restricted to received packets.

Command Mode

Interface Configuration (Ethernet, destination port)

Command Usage

You can mirror traffic from any source port to a destination port for real-time analysis. You can
then attach a logic analyzer or RMON probe to the destination port and study the traffic
crossing the source port in a completely unobtrusive manner.

Set the destination port by specifying an Ethernet interface with the

interface

configuration

command, and then use the port monitor command to specify the source of the traffic to
mirror.

When mirroring traffic from a port, the mirror port and monitor port speeds should match,
otherwise traffic may be dropped from the monitor port. When mirroring traffic from a VLAN,
traffic may also be dropped under heavy loads.

When VLAN mirroring and port mirroring are both enabled, the target port can receive a
mirrored packet twice; once from the source mirror port and again from the source mirror
VLAN.

When mirroring traffic from a MAC address, ingress traffic with the specified source address
entering any port in the switch, other than the target port, will be mirrored to the destination
port.

Note that Spanning Tree BPDU packets are not mirrored to the target port.

When mirroring VLAN traffic or packets based on a source MAC address, the target port cannot
be set to the same target port as that used for basic port mirroring.

You can create multiple mirror sessions, but all sessions must share the same destination
port.

The destination port cannot be a trunk or trunk member port.

ACL-based mirroring is only used for ingress traffic. To mirror an ACL, follow these steps:

1. Use the access-list command (

page 239

) to add an ACL.

2. Use the access-group command to add a mirrored port to access control list.

3. Use the port monitor access-list command to specify the destination port to which traffic

matching the ACL will be mirrored.

Example

The following example configures the switch to mirror all packets from port 6 to 5:

Console(config)#interface ethernet 1/5

Console(config-if)#port monitor ethernet 1/6 both

Console(config-if)#

Advertising