156
Configuring port mirroring
The port mirroring feature is available on both Layer 2 and Layer 3 Ethernet interfaces. The term
"interface" in this chapter collectively refers to these two types of interfaces. You can use the port
link-mode command to configure an Ethernet port as a Layer 2 or Layer 3 interface (see Layer
2—LAN Switching Configuration Guide).
Overview
Port mirroring copies the packets passing through a port to the monitor port connecting to a data
monitoring device for packet analysis.
Terminology
The following terms are used in port mirroring configuration.
Mirroring source
The mirroring sources can be one or more monitored ports, which are called source ports. Packets
passing through mirroring sources are copied to a port connecting to a data monitoring device for
packet analysis. The copies are called mirrored packets.
Source device
The device where the mirroring sources reside is called a source device.
Mirroring destination
The mirroring destination connects to a data monitoring device and is the destination port (also
known as the monitor port) of mirrored packets. Mirrored packets are sent out of the monitor port to
the data monitoring device.
A monitor port might receive multiple copies of a packet when it monitors multiple mirroring sources.
For example, two copies of a packet are received on Port 1 when the following conditions exist:
• Port 1 is monitoring bidirectional traffic of Port 2 and Port 3 on the same device.
• The packet travels from Port 2 to Port 3.
Destination device
The device where the monitor port resides is called the destination device.
Mirroring direction
The mirroring direction specifies the direction of the traffic that is copied on a mirroring source.
• Inbound—Copies packets received.
• Outbound—Copies packets sent.
• Bidirectional—Copies packets received and sent.
Mirroring group
Port mirroring is implemented through mirroring groups, which include local, remote source, and
remote destination groups. For more information about the mirroring groups, see "Port mirroring
classification and implementation."
Reflector port, egress port, and remote probe VLAN
Reflector ports, remote probe VLANs, and egress ports are used for Layer 2 remote port mirroring.
The remote probe VLAN specially transmits mirrored packets to the destination device. Both the
reflector port and egress port reside on a source device and send mirrored packets to the remote
To Next Page
Loading...
Need help?
General