destination interface
To configure a destination for ACL capture packets, use the destination interface command.
destination interface ethernet slot/port
Syntax Description
Specifies Ethernet IEEE 802.3z.ethernet
Slot and port identifiers for the interface. The range
is from 1 to 253.
slot/port
Command Default
None
Command Modes
ACL capture configuration mode (config-acl-capture)
Command History
ModificationRelease
This command was introduced.5.2(1)
Usage Guidelines
Only the physical interface can be used for the destination. Port-channel interfaces and supervisor in-band
ports are not supported.
Port channels and supervisor in-band ports are not supported as a destination for ACL capture.
ACL capture session destination interfaces do not support ingress forwarding and ingress MAC learning. If
a destination interface is configured with these options, the monitor keeps the ACL capture session down.
Use the show monitor session all command to see if ingress forwarding and MAC learning are enabled.
You can use the no switchport monitor command to disable ingress forwarding and MAC learning on the
interface.
Note
The source port of the packet and the ACL capture destination port cannot be part of the same ASIC. If both
ports belong to the same ASIC, a message appears when you configure the destination ports for ACL capture,
and the packet is not captured.
You can enter the destination interface command multiple times to add multiple destinations.
This command does not require a license.
Examples
This example shows how to configure a destination for ACL capture packets:
switch# configure terminal
Cisco Nexus 7000 Series Security Command Reference
268
D Commands
destination interface
To Next Page
Loading...
