Table of Contents

Chapter 1 Port Mirroring Configuration Commands. 1-1

1.1 Port Mirroring Configuration Commands. 1-1

1.1.1 display mirroring-group. 1-1

1.1.2 mirroring-group. 1-2

1.1.3 mirroring-group mirroring-port 1-3

1.1.4 mirroring-group monitor-port 1-4

1.1.5 mirroring-group reflector-port 1-5

1.1.6 mirroring-group remote-probe vlan. 1-7

1.1.7 mirroring-port 1-8

1.1.8 monitor-port 1-8

 

Chapter 1  Port Mirroring Configuration Commands

1.1  Port Mirroring Configuration Commands

1.1.1  display mirroring-group

Syntax

display mirroring-group { group-id | all | local | remote-destination | remote-source }

View

Any view

Parameters

group-id: Port mirroring group number, in the range of 1 to 2.

all: Specifies all the port mirroring groups.

local: Specifies local port mirroring groups.

remote-destination: Specifies remote destination port mirroring groups.

remote-source: Specifies remote source port mirroring groups.

Description

Use the display mirroring-group command to display the information about a port mirroring group or multiple port mirroring groups.

The output information varies with port mirroring group type and is organized by mirroring group numbers.

Examples

# Display the information about all the port mirroring groups.

<Sysname> display mirroring-group all

mirroring-group 1;

     type: local

     status: active

     mirroring port:

         Ethernet1/0/1  both

         Ethernet1/0/2  both

     monitor port: Ethernet1/0/3

mirroring-group 2:

     type: remote-source

     status: inactive

     mirroring port:

          Ethernet1/0/4  both

     reflector port:

     remote-probe vlan: 1900

Table 1-1 Description on the fields of the display mirroring-group command

Field	Description
mirroring-group	Port mirroring group number
type	Port mirroring group type, which can be local, remote-source, and remote-destination.
status	Status of a port mirroring group. “active” for already effective, and “inactive” for not effective yet.
mirroring port	Source mirroring port
monitor port	Destination mirroring port
reflector port	Reflector mirroring port
remote-probe vlan	Remote mirroring VLAN

 

1.1.2  mirroring-group

Syntax

mirroring-group group-id { local | remote-destination | remote-source }

undo mirroring-group { group-id | all | local | remote-destination | remote-source }

View

System view

Parameters

group-id: Port mirroring group number, in the range of 1 to 2.

all: Removes All the port mirroring groups.

local: Creates/Removes a local port mirroring group.

remote-destination: Creates/Removes a remote destination port mirroring group.

remote-source: Creates/Removes a remote source port mirroring group.

Description

Use the mirroring-group command to create a port mirroring group.

Use the undo mirroring-group command to remove a port mirroring group.

You need to specify the type of the port mirroring group to be created when creating it.

l           Use the keyword local to create a local port mirroring group.

l           Use the keyword remote-destination to create a remote destination port mirroring group.

l           Use the keyword remote-source to create a remote source port mirroring group.

You need to specify the port mirroring group type or the mirroring group number when removing a port mirroring group:

l           Use the group-id argument to specify the port mirroring group to be removed.

l           Use the all keyword to remove all the port mirroring groups.

l           Use the local keyword to remove all the local port mirroring groups.

l           Use the remote-destination keyword to remove all the remote destination port mirroring groups.

l           Use the remote-source keyword to remove all the remote source mirroring groups.

Examples

# Create a local port mirroring group numbered 1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

# Create remote destination mirroring group numbered 2.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-destination

1.1.3  mirroring-group mirroring-port

Syntax

mirroring-group group-id mirroring-port mirroring-port-list { both | inbound | outbound }

undo mirroring-group group-id mirroring-port mirroring-port-list { both | inbound | outbound }

View

System view

Parameters

group-id: Port mirroring group number, in the range of 1 to 2.

mirroring-port-list: List of ports to be added to the port mirroring group. You can specify multiple ports by providing this argument in the form of { interface-type interface-number [ to interface-type interface-number ] }&<1-8>, where the interface-type argument is port type, the interface-number argument is the port number, and &<1-8> means that you can provide up to eight port indexes/port index lists for this argument.

both: Specifies to duplicate both inbound and outbound packets.

inbound: Specifies to duplicate inbound packets only.

outbound: Specifies to duplicate outbound packets only.

Description

Use the mirroring-group mirroring-port command to configure source ports for a port mirroring group.

Use the undo mirroring-group mirroring-port command to remove source ports from a port mirroring group.

Note that:

l           The source port cannot be a member of the mirroring group.

l           A remote destination mirroring group cannot contain source mirroring ports.

Examples

# Add ports to port mirroring group 1 as source ports (assuming that port mirroring group 1 already exists).

<Sysname> system-view

[Sysname] mirroring-group 1 mirroring-port Ethernet 1/0/1 to Ethernet 1/0/5 both

# Remove source mirroring ports from port mirroring group 1.

[Sysname] undo mirroring-group 1 mirroring-port Ethernet 1/0/1 to Ethernet 1/0/3 both

1.1.4  mirroring-group monitor-port

Syntax

mirroring-group group-id monitor-port monitor-port-id

undo mirroring-group group-id monitor-port monitor-port-id

View

System view

Parameters

group-id: Port mirroring group number, in the range of 1 to 2.

monitor-port-id: Port index. You need to provide this argument in the form of interface-type interface-number, where interface-type is the port type and interface-number is the port number.

Description

Use the mirroring-group monitor-port command to configure the destination port for a port mirroring group.

Use the undo mirroring-group monitor-port command to remove the destination port from a port mirroring group.

Note that:

l           You cannot add a destination port to a remote source mirroring group.

l           A port mirroring group can contain only one destination port.

l           The destination port cannot be a member of the mirroring group.

l           An aggregation port cannot be specified as a destination port.

l           A remote source port mirroring group cannot contain destination ports.

l           Before add the destination port for a port mirroring group, make sure the port mirroring group exists.

l           It is not recommended to enable STP, RSTP or MSTP on the destination port; otherwise, the mirroring function may be affected.

Examples

# Configure Ethernet 1/0/1 as the destination port of port mirroring group 1 (a remote destination port mirroring group).

<Sysname> system-view

[Sysname] mirroring-group 1 remote-destination

[Sysname] mirroring-group 1 monitor-port Ethernet 1/0/1

1.1.5  mirroring-group reflector-port

Syntax

I. In system view:

mirroring-group group-id reflector-port reflector-port-id

undo mirroring-group group-id reflector-port reflector-port-id

II. In interface view:

mirroring-group group-id reflector-port

undo mirroring-group group-id reflector-port

View

System view, Ethernet interface view

Parameter

group-id: Port mirroring group number, in the range of 1 to 2.

reflector-port-id: A reflector port number. The expression is interface-type interface-number, in which interface-type is the port type and interface-number is the port number.

Description

Use the mirroring-group reflector-port command to configure a reflector port for a remote source mirroring group.

Use the undo mirroring-group reflector-port command to remove the configuration.

Note that:

l           You can configure a reflector port for a remote source mirroring group only. For other types of mirroring groups or mirroring groups that already have a reflector port, you cannot configure a reflector port.

l           A reflector port cannot be a member port of the current mirroring group, an aggregation port and cannot be configured with the QinQ function. It is required to be an access port and belong to the default VLAN.

l           It is not recommended to add the source ports to a remote VLAN, which can be used for remote mirroring only.

l           It is not recommended to connect network cable to the reflector port and to configure the following functions on this port: STP, RSTP, MSTP, 802.1x, IGMP Snooping, static ARP and MAC address learning, otherwise, the mirroring function may be affected.

l           A port can be configured as a reflector port only when it operates with the following settings being the defaults: operation mode (half duplex/full duplex), port speed, MDI setting. Conversely, these settings cannot be modified once a port is configured as a reflector port.

Example

# In system view, configure reflector port Ethernet 1/0/1 for remote source mirroring group 1.

<Sysname> system-view

[Sysname] mirroring-group 1 remote-source

[Sysname] mirroring-group 1 reflector-port Ethernet 1/0/1

# In Ethernet port view, configure reflector port Ethernet 1/0/2 for remote source mirroring group 1.

[Sysname] interface Ethernet 1/0/2

[Sysname-Ethernet1/0/1] mirroring-group 1 reflector-port

1.1.6  mirroring-group remote-probe vlan

Syntax

mirroring-group group-id remote-probe vlan rprobe-vlan-id

undo mirroring-group group-id remote-probe vlan rprobe-vlan-id

View

System view

Parameters

group-id: Port mirroring group number, in the range of 1 to 2.

rprobe-vlan-id: ID of the VLAN to be configured as the remote mirroring VLAN. Note that the VLAN must be an existing static VLAN.

Description

Use the mirroring-group remote-probe vlan command to specify a VLAN as the mirroring VLAN for a remote source port mirroring group or a remote destination port mirroring group.

Use the undo mirroring-group remote-probe vlan command to remove the remote mirroring VLAN from a remote source mirroring group or a remote destination mirroring group.

Note that:

l           Only remote source port mirroring groups or remote destination port mirroring groups can have remote mirroring VLANs. A port mirroring group can have only one remote mirroring VLAN.

l           To remove a VLAN operating as a remote port mirroring VLAN, you need to restore it to a normal VLAN first. A remote port mirroring group gets invalid if the corresponding remote port mirroring VLAN is removed.

l           We recommend that you use a remote mirroring VLAN for remote mirroring only.

Examples

# Specify VLAN 2 as the remote mirroring VLAN of port mirroring group 1 (assuming that VLAN 2 already exists).

<Sysname> system-view

[Sysname] mirroring-group 1 remote-source

[Sysname] mirroring-group 1 remote-probe vlan 2

1.1.7  mirroring-port

Syntax

[ mirroring-group group-id ] mirroring-port { inbound | outbound | both }

undo [ mirroring-group group-id ] mirroring-port { inbound | outbound | both }

View

Ethernet port view

Parameters

group-id: Port mirroring group number, in the range of 1 to 2.

both: Duplicates both inbound and outbound packets.

inbound: Duplicates the inbound packets only.

outbound: Duplicates the outbound packets only.

Description

Use the mirroring-port command to configure a port as a source mirroring port of a port mirroring group.

Use the undo mirroring-port command to remove a source mirroring port from a port mirroring group.

The mirroring group is defaulted to 1, if no mirroring group number is specified in the command line.

Examples

# Configure Ethernet 1/0/1 as a source mirroring port of remote source port mirroring group 2.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] interface Ethernet 1/0/1

[Sysname-Ethernet1/0/1] mirroring-group 2 mirroring-port both

1.1.8  monitor-port

Syntax

[ mirroring-group group-id ] monitor-port

undo [ mirroring-group group-id ] monitor-port

View

Ethernet port view

Parameters

group-id: Port mirroring group number, in the range of 1 to 2.

Description

Use the monitor-port command to configure a port as the destination mirroring port of a port mirroring group.

Use the undo monitor-port command to remove the destination mirroring port from a port mirroring group.

The mirroring group is defaulted to 1, if no mirroring group number is specified in the command line.

Examples

# Add port Ethernet 1/0/1 to port mirroring group 1 (a local port mirroring group) as the destination port.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] interface Ethernet 1/0/1

[Sysname-Ethernet1/0/1] monitor-port