H3C Technologies H3C WX3000 Series Unified Switches - Manual (Page 393)

39-11
GigabitEthernet1/0/2 both
mirroring mac:
mirroring vlan:
monitor port: GigabitEthernet1/0/3
After the configurations, you can monitor all packets received on and sent from the R&D department
and the marketing department on the data detection device.
Remote Port Mirroring Configuration Example
Network requirements
The departments of a company connect to each other through switches, as shown in Figure 39-4 :
z
Switch A, Switch B, and Switch C are WX3000 series devices.
z
Department 1 is connected to GigabitEthernet 1/0/1 of Switch A.
z
Department 2 is connected to GigabitEthernet 1/0/2 of Switch A.
z
GigabitEthernet 1/0/3 of Switch A connects to GigabitEthernet 1/0/1 of Switch B.
z
GigabitEthernet 1/0/2 of Switch B connects to GigabitEthernet 1/0/1 of Switch C.
z
The data detection device is connected to GigabitEthernet 1/0/2 of Switch C.
The administrator wants to monitor the packets sent from Department 1 and 2 through the data
detection device.
Use the remote port mirroring function to meet the requirement. Perform the following configurations:
z
Use Switch A as the source switch, Switch B as the intermediate switch, and Switch C as the
destination switch.
z
On Switch A, create a remote source mirroring group, configure VLAN 10 as the remote-probe
VLAN, ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 as the source ports, and port
GigabitEthernet 1/0/4 as the reflector port.
z
On Switch B, configure VLAN 10 as the remote-probe VLAN.
z
Configure GigabitEthernet 1/0/3 of Switch A, GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 of
Switch B, and GigabitEthernet 1/0/1 of Switch C as trunk ports, allowing packets of VLAN 10 to
pass.
z
On Switch C, create a remote destination mirroring group, configure VLAN 10 as the remote-probe
VLAN, and configure GigabitEthernet 1/0/2 connected with the data detection device as the
destination port.