Port Mirror
Port-based Mirroring
The Port-Based Mirroring is used on a network switch to send a copy of network packets
sent/received on one or a range of switch ports to a network monitoring connection on
another switch port (Monitor to Port). This is commonly used for network appliances that
require monitoring of network traffic, such as an intrusion-detection system.
Port Mirroring, together with a network traffic analyzer, helps to monitor network traffic.
Users can monitor the selected ports (Source Ports) for egress and/or ingress packets.
Source Mode:
Ingress : The received packets will be copied to the monitor port.
Egress : The transmitted packets will be copied to the monitor port.
Both : The received and transmitted packets will be copied to the monitor
port.
Note:
1. The monitor port cannot be a trunk member port.
2. The monitor port cannot be ingress or egress port.
3. If the Port Mirror function is enabled, the Monitor-to Port can receive mirrored
packets only.
4. If a port has been configured as a source port and then user configures the port
as a destination port, the port will be removed from the source ports
automatically.
Default Settings
Mirror Configurations:
State : Disable
Monitor port : 1
Ingress port(s) : None
Egress port(s) : None
CLI Configuration
Example:
[DEVICE_NAME]#configure terminal
[DEVICE_NAME](config)#mirror enable
[DEVICE_NAME](config)#mirror destination port 2
[DEVICE_NAME](config)#mirror source ports 3-5 mode both