Operation Manual – Mirroring
Quidway S3900 Series Ethernet Switches Chapter 1 Mirroring Configuration
Huawei Technologies Proprietary
1-6
Table 1-5 Combined application of ACLs
Combination mode Form of acl-rule
Apply all rules in an IP type ACL (either a
basic or an advanced ACL) separately
ip-group acl-number
Apply one rule in an IP type ACL separately
ip-group acl-number rule rule-id
Apply all rules in a Layer 2 ACL separately
link-group acl-number
Apply one rule in a Layer 2 ACL separately
link-group acl-number rule rule-id
Apply one rule in a user-defined ACL
separately
user-group acl-number
Apply all rules in a user-defined ACL
separately
user-group acl-number rule rule-id
Apply one rule in an IP type ACL and one
rule in a Layer 2 ACL simultaneously
ip-group acl-number rule rule-id
link-group acl-number rule rule-id
III. Configuration example
1) Network requirements:
z GigabitEthernet 1/1/1 on the switch is connected to the 10.1.1.1/24 network
segment.
z Mirror the packets from the 10.1.1.1/24 network segment to GigabitEthernet 1/1/4,
the destination port.
2) Configuration procedure:
<Quidway> system-view
[Quidway] acl number 2000
[Quidway-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Quidway-acl-basic-2000] rule deny source any
[Quidway-acl-basic-2000] quit
[Quidway] interface gigabitEthernet 1/1/4
[Quidway-GigabitEthernet1/1/4] monitor-port
[Quidway-GigabitEthernet1/1/4] quit
[Quidway] interface gigabitEthernet 1/1/1
[Quidway-GigabitEthernet1/1/1] mirrored-to inbound ip-group 2000
monitor-interface
1.3.2 Configuring Port Mirroring
I. Configuration prerequisites
z The source port is specified and whether the packets to be mirrored are inbound or
outbound is specified: inbound: only mirrors the packets received via the port;