Configuration Commands
Page 1356 7750 SR OS Services Guide
mac-filter
Syntax mac-filter mac-filter-id entry entry-id [entry-id …]
no mac-filter mac-filter-id
no mac-filter mac-filter-id entry entry-id [entry-id …]
Context debug>mirror-source
Description This command enables mirroring of packets that match specific entries in an existing MAC filter.
The IP filter must be defined with an exclusive scope. This prevents mirroring issues when an IP filter
template is defined on multiple interfaces. The ip-filter command defines mirroring for MAC based
filters.
The mac-filter command directs packets which match the defined list of entry IDs to be mirrored to
the mirror destination referenced by the mirror-dest-service-id of the mirror-source.
The MAC filter must already exist in order for the command to execute. Filters are configured in the
config>filter context. If the MAC filter does not exist, an error will occur. If the filter exists but has
not been associated with a SAP or IP interface, an error is not be generated but mirroring will not be
enabled (there are no packets to mirror). Once the filter is defined to a SAP or MAC interface, mirror-
ing is enabled.
If the MAC filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are
mirrored to the mirror destination prior to any ingress packet modifications.
If the MAC filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are
mirrored to the mirror destination after all egress packet modifications.
An entry-id within a MAC filter can only be mirrored to a single mirror destination. If the same entry-
id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.
By default, no packets matching any MAC filters are mirrored. Mirroring of MAC filter entries must
be explicitly defined.
The no mac-filter command, without the entry keyword, removes mirroring on all entry-id’s within
the mac-filter-id.
When the no command is executed with the entry keyword and one or more entry-id’s, mirroring of
that list of entry-id’s is terminated within the mac-filter-id. If an entry-id is listed that does not exist,
an error will occur and the command will not execute. If an entry-id is listed that is not currently
being mirrored, no error will occur for that entry-id and the command will execute normally.
Default No MAC filter mirroring defined.
Parameters mac-filter-id — The MAC filter ID whose entries are mirrored. The MAC filter must have a defined
scope of exclusive. If the mac-filter-id does not exist, an error will occur and the command will
not execute. Mirroring of packets will commence once the mac-filter-id is defined on a SAP.
entry entry-id [entry-id …] — The MAC filter entries to use as match criteria for packet mirroring.
The entry keyword begins a list of entry-id’s for mirroring. Multiple entry-id entries may be
specified with a single command. Each entry-id must be separated by a space. Up to <N><n>
entry IDs may be specified in a single command.
If an entry-id does not exist within the MAC filter ID, an error will occur and the whole com-
mand will not execute.
To Next Page
Loading...
