Port Mirroring
Fixed Switch Configuration Guide 8-13
• LAG ports can be a mirror source port, but not a mirror destination port. If a LAG port is a
mirror source port, no other ports can be configured as source ports.
• Both transmit and receive traffic will be mirrored.
• A destination port will only act as a mirroring port when the session is operationally active.
• When a port mirror is created, the mirror destination port is removed from the egress list of
VLAN 1 after a reboot.
• MAC addresses will be learned for packets tagged with the mirror VLAN ID. This will
prevent the ability to snoop traffic across multiple hops.
Configuring Port Mirroring
Use the set port mirroring command to create, enable, or disable a mirroring relationship. By
default, port mirrors are enabled automatically when created. Up to 8 source ports can be
specified. Only one destination port can be configured per stack, if applicable.
set port mirroring {create | disable | enable} source destination}
LAG ports can be mirror source ports. However, if a LAG port is configured as the source port, no
other ports can be added as source ports for that mirror.
The following example creates and enables port mirroring with ge.1.4 as the source port, and
ge.1.11 as the target port:
C5(su)->set port mirroring create ge.1.4 ge.1.11
Use the clear port mirroring command to remove a port mirroring relationship.
clear port mirroring source destination
Use the show port mirroring command to display the currently configured port mirror
relationship.
C5(su)->show port mirroring
Port Mirroring
==============
Source Port =
ge.1.4
Target Port =
ge.1.11
Frames Mirrored = Rx and Tx
Port Mirroring status enabled.
Remote Port Mirroring
Caution: Traffic mirrored to a VLAN may contain control traffic. This may be interpreted by the
downstream neighbor as legal control frames. It is recommended that you disable any protocols
(such as Spanning Tree) on inter-switch connections that might be affected .
Notes: When a port mirror is created, the mirror destination port is removed from VLAN 1’s egress
list after a reboot.
MAC addresses will be learned for packets tagged with the mirror VLAN ID. This will prevent the
ability to snoop traffic across multiple hops.
Note: Remote port mirroring is not supported on the A4 or I-Series platforms.
To Next Page
Loading...
Need help?
General