H3C Technologies H3C WX3000 Series Unified Switches - Manual (Page 374)

37-30
To do… Use the command… Remarks
Define the current port as the destination
port
monitor-port Required
Exit current view quit —
Enter port group view port-group group-id —
Reference ACLs for identifying traffic flows
and perform traffic mirroring for packets
that match.
mirrored-to inbound acl-rule
monitor-interface
Required
Follow these steps to configure traffic mirroring for a port:
To do… Use the command… Remarks
Enter system view system-view —
Enter Ethernet port view of the destination
port interface interface-type
interface-number
—
Define the current port as the destination
port
monitor-port Required
Exit current view quit —
Enter Ethernet port view of traffic mirroring
configuration interface interface-type
interface-number
—
Reference ACLs for identifying traffic flows
and perform traffic mirroring for packets
that match.
mirrored-to inbound acl-rule
monitor-interface
Required
As the priority of traffic classification rules is higher than that of the default rules used for processing
protocol packets, traffic mirroring on all the packets or packets of a VLAN may affect device
management that is implemented through Telnet and so on
Configuration example
Network requirements:
z
GigabitEthernet 1/0/1 is connected to the 10.1.1.0/24 network segment.
z
Duplicate the packets from network segment 10.1.1.0/24 to the destination mirroring port
GigabitEthernet 1/0/4.
1) Method I
<device> system-view
[device] acl number 2000
[device-acl-basic-2000] rule permit source 10.1.1.0 0.0.0.255
[device-acl-basic-2000] quit
[device] interface GigabitEthernet 1/0/4
[device-GigabitEthernet1/0/4] monitor-port
[device-GigabitEthernet1/0/4] quit
[device] interface GigabitEthernet 1/0/1
[device-GigabitEthernet1/0/1] mirrored-to inbound ip-group 2000 monitor-interface