Huawei AR150 series - Checking the Configuration; Configuring Packet Capture Using Mirroring

----End
4.6.6 Checking the Configuration
After remote flow mirroring is configured, check the configurations of the observing server,
traffic classifier, traffic behavior, and traffic policy.
Prerequisites
The configurations of remote flow mirroring are complete.
Procedure
l Run the display observe-server command to check the configuration of observing server.
l Run the display mirror-port command to check the configuration of mirrored interface.
l Run the display traffic behavior user-defined [ behavior-name ] command to check the
configuration of traffic behavior.
l Run the display traffic classifier user-defined [ classifier-name ] command to check the
configuration of traffic classifier.
l Run the display traffic policy user-defined [ policy-name [ classifier classifier-name ] ]
command to check the configuration of traffic policy.
l Run the display traffic-policy policy-name applied-record command to check the use
record of traffic policy.
----End
4.7 Configuring Packet Capture Using Mirroring
This section describes how to configure packet capture using mirroring so that packets entering
the device interface can be displayed on the terminal or saved to the device.
Applicable Environment
Local port mirroring or local flow mirroring requires that an observing port needs to be directly
connected to a monitoring device. If the observing port is not directly connected to a mirroring
device, capture packets using mirroring to locate faults so that packets entering the device
interface can be displayed on the terminal or saved to the device.
If mirrored packets are saved to the device, log in to the device through FTP and download the
mirrored packets for analysis.
NOTE
l Currently, only incoming traffic can be captured using mirroring.
l Before using the capture-packet interface command again, wait until the last command execution is
complete.
l Packet capturing rate must be lower than 256 pps. If the traffic is heavy, some packets matching rules
may not be captured.
l Currently, the AR150/200 supports the following mirrored interfaces: Ethernet interface, ATM
interface, Serial interface, VLANIF interface, Dialer interface, and Eth-trunk interface.
Huawei AR150&200 Series Enterprise Routers
Configuration Guide - Device Management 4 Mirroring Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
73