H3C S3100V2-52TP - Layer 2 Remote Port Mirroring Configuration Example

102
# Create VLAN 10 and assign the three ports (Ethernet 3/0/1 through Ethernet 3/0/3) connecting the
three data monitoring devices to VLAN 10.
[SwitchA] vlan 10
[SwitchA-vlan10] port ethernet 3/0/1 to ethernet 3/0/3
[SwitchA-vlan10] quit
# Configure VLAN 10 as the remote probe VLAN of remote source mirroring group 1.
[SwitchA] mirroring-group 1 remote-probe vlan 10
Layer 2 remote port mirroring configuration example
Network requirements
On the Layer 2 network shown in Figure 37,
• Device A connects to the marketing department through Ethernet 1/0/1 and connects to the trunk
port Ethernet 1/0/1 of Device B through the trunk port Ethernet 1/0/2; Device C connects to the
server through Ethernet 1/0/2 and connects to the trunk port Ethernet 1/0/2 of Device B through
the trunk port Ethernet 1/0/1. Device A supports egress port configuration.
• Configure Layer 2 remote port mirroring to enable the server to monitor the bidirectional traffic of
the marketing department.
Figure 37 Network diagram
Source device
Device A
Eth1/0/1
Eth1/0/2
Server
Marketing Dept.
Intermediate device
Device B
Destination device
Device C
Eth1/0/1 Eth1/0/2 Eth1/0/1
Eth1/0/2
Source port Monitor portEgress portCommon port
Configuration procedure
1. Configure Device A (the source device)
# Create a remote source group.
<DeviceA> system-view
[DeviceA] mirroring-group 1 remote-source
# Create VLAN 2 as the remote probe VLAN.
[DeviceA] vlan 2
# Disable MAC address learning for the remote probe VLAN.
[DeviceA-vlan2] mac-address mac-learning disable
[DeviceA-vlan2] quit
# Configure VLAN 2 as the remote probe VLAN of the mirroring group; configure Ethernet 1/0/1 as a
source port and Ethernet 1/0/2 as the egress port in the mirroring group.
[DeviceA] mirroring-group 1 remote-probe vlan 2