Monitoring and Analyzing Switch Operation
Traffic Mirroring
Syntax: [no] mirror < 1 - 4 > [name < name-str >] remote ip < src-ip >
< src-udp-port > < dst-ip >
< src-udp-port > : This value associates the configured
mirroring session with a UDP port number. Where multiple
sessions have the same source IP address (< src-ip >) and
destination IP address (< dst-ip >), the UDP port number
should be unique for each session. The UDP port number
used for a given session should be in the range of 7933 -
65535.
Caution: UDP port numbers below 7933 are reserved
for various IP applications. Using them for mirroring
can result in disrupting other IP functions, and can
also result in non-mirrored traffic received on the
destination switch being sent to a mirroring exit port.)
The configured UDP port number is included in the frames
mirrored from the source switch to the remote exit switch
(mirror endpoint), and enables the exit switch to match the
frames to the exit port configured for that combination of
UDP port number, source IP address, and destination IP
address. To see this correspondence, refer to the mirror
endpoint command syntax under “2. Configure the Remote
Mirroring Session on Destination Switch” on page B-41.
< dst-ip >: For the mirroring session specified in the
command, this is the IP address of the VLAN or subnet on
which the desired remote exit port exists. (The exit port is
specified in the mirroring configuration on the exit switch,
and a traffic analyzer or IDS should be connected to this
port.) Refer to “2. Configure the Remote Mirroring Session
on Destination Switch” on page B-41.
B-46
To Next Page
Loading...
Need help?
General