Contents

Port mirroring commands· 1

display mirroring-group· 1

mirroring-group· 2

mirroring-group mirroring-cpu· 3

mirroring-group mirroring-port (interface view) 4

mirroring-group mirroring-port (system view) 5

mirroring-group monitor-egress· 6

mirroring-group monitor-port (interface view) 7

mirroring-group monitor-port (system view) 9

mirroring-group reflector-port 10

mirroring-group remote-probe vlan· 12

Flow mirroring commands· 14

mirror-to cpu· 14

mirror-to interface· 14

mirror-to local 16

mirror-to slot 16

 

Port mirroring commands

display mirroring-group

Use display mirroring-group to display mirroring group information.

Syntax

display mirroring-group { group-id | all | local | remote-destination | remote-source }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64.

all: Specifies all mirroring groups.

local: Specifies local mirroring groups.

remote-destination: Specifies remote destination groups.

remote-source: Specifies remote source groups.

Usage guidelines

Mirroring group information includes the type, status, and content of a mirroring group. It is sorted by mirroring group number.

Examples

# Display information about all mirroring groups.

<Sysname> display mirroring-group all

Mirroring group 1:

    Type: Local

    Status: Active

    Mirroring port: GigabitEthernet3/1/1 Inbound

      Monitor port: GigabitEthernet3/1/2 pop-label

Table 1 Command output

Field	Description
Mirroring group	Number of the mirroring group.
Type	Type of the mirroring group: ·         Local. ·         Remote source. ·         Remote destination.
Status	Status of the mirroring group: ·         Active—The mirroring group has taken effect. ·         Incomplete—The mirroring group configuration is not complete and does not take effect.
Mirroring port	Source port.
Mirroring CPU	Source CPU.
Monitor port	Destination port.
pop-label	Indicates that the monitor port will remove the MPLS labels from the mirrored packets before forwarding the packets to the data monitoring device.

 

mirroring-group

Use mirroring-group to create a mirroring group.

Use undo mirroring-group to delete mirroring groups.

Syntax

mirroring-group group-id { local | remote-destination | remote-source }

undo mirroring-group { group-id | all | local | remote-destination | remote-source }

Default

No mirroring groups exist.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group number in the range of 1 to 64.

local: Specifies local mirroring groups.

remote-destination: Specifies remote destination groups.

remote-source: Specifies remote source groups.

all: Specifies all mirroring groups.

Usage guidelines

A sampler selects a packet from sequential packets. Port mirroring uses the sampler to limit the volume of traffic to be mirrored. You can specify a sampler that has not been created for a mirroring group. If you configure multiple samplers for a mirroring group, the most recent configuration takes effect. For more information about samplers, see Network Management and Monitoring Configuration Guide.

Examples

# Create local mirroring group 1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

mirroring-group mirroring-cpu

Use mirroring-group mirroring-cpu to configure source CPUs for a mirroring group.

Use undo mirroring-group mirroring-cpu to remove source CPUs from a mirroring group.

Syntax

In standalone mode:

mirroring-group group-id mirroring-cpu slot slot-number-list { both | inbound | outbound }

undo mirroring-group group-id mirroring-cpu slot slot-number-list

In IRF mode:

mirroring-group group-id mirroring-cpu chassis chassis-number slot slot-number-list { both | inbound | outbound }

undo mirroring-group group-id mirroring-cpu chassis chassis-number slot slot-number-list

Default

No source CPU is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

slot slot-number-list: Specifies a space-separated list of up to eight slot number items. An item specifies a card by its slot number or specifies a range of cards in the form of start-slot-number to end-slot-number. The end slot number must be equal to or greater than the start slot number. (In standalone mode.)

chassis chassis-number slot slot-number-list: Specifies cards on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number-list argument specifies a space-separated list of up to eight slot number items. An item specifies a card by its slot number or specifies a range of cards in the form of start-slot-number to end-slot-number. The end slot number must be equal to or greater than the start slot number. (In IRF mode.)

both: Mirrors both received and sent packets.

inbound: Mirrors only received packets.

outbound: Mirrors only sent packets.

Usage guidelines

You can configure source CPUs only for local mirroring groups and remote source groups.

Outbound traffic mirroring is not supported for CPUs on the following cards:

·          CSPC-GE24L-E card.

·          CSPC-GP24GE8XP2L-E card.

·          CSPC-GE16XP4L-E card.

·          CSPEX card.

·          CEPC card.

Both inbound and outbound traffic mirroring are supported for CPUs on the following cards:

·          CSPC (except CSPC-GE24L-E, CSPC-GP24GE8XP2L-E, and CSPC-GE16XP4L-E) card.

·          CMPE-1104 card.

Examples

# (In standalone mode.) Create local mirroring group 1 to monitor the bidirectional traffic of the CPU on the specified slot.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] mirroring-group 1 mirroring-cpu slot 3 both

Related commands

mirroring-group

mirroring-group mirroring-port (interface view)

Use mirroring-group mirroring-port to configure a port as a source port for a mirroring group.

Use undo mirroring-group mirroring-port to restore the default.

Syntax

mirroring-group group-id mirroring-port { both | inbound | outbound }

undo mirroring-group group-id mirroring-port

Default

A port does not act as a source port for any mirroring groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

both: Mirrors both received and sent packets.

inbound: Mirrors only received packets.

outbound: Mirrors only sent packets.

Usage guidelines

You can configure source ports only for local mirroring groups and remote source groups.

Do not assign a source port of a mirroring group to the remote probe VLAN of the mirroring group.

A source port cannot be used as a reflector port, monitor port, or egress port.

Examples

# Create local mirroring group 1 to monitor the bidirectional traffic of GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mirroring-group 1 mirroring-port both

# Create remote source group 2 to monitor the bidirectional traffic of GigabitEthernet 3/1/2.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] interface gigabitethernet 3/1/2

[Sysname-GigabitEthernet3/1/2] mirroring-group 2 mirroring-port both

Related commands

mirroring-group

mirroring-group mirroring-port (system view)

Use mirroring-group mirroring-port to configure source ports for a mirroring group.

Use undo mirroring-group mirroring-port to remove source ports from a mirroring group.

Syntax

mirroring-group group-id mirroring-port interface-list { both | inbound | outbound }

undo mirroring-group group-id mirroring-port interface-list

Default

No source port is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

interface-list: Specifies a space-separated list of up to eight port items. Each item specifies a single port or a port range in the form of interface-type interface-number1 to interface-type interface-number2. The specified interfaces must be of the same type and on the same slot. The value for the interface-number2 argument must be equal to or greater than the value for the interface-number1 argument.

both: Mirrors both received and sent packets.

inbound: Mirrors only received packets.

outbound: Mirrors only sent packets.

Usage guidelines

You can configure source ports only for local mirroring groups and remote source groups.

Do not assign a source port of a mirroring group to the remote probe VLAN of the mirroring group.

A source port cannot be used as a reflector port, monitor port, or egress port.

Examples

# Create local mirroring group 1 to monitor the bidirectional traffic of GigabitEthernet 3/1/1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] mirroring-group 1 mirroring-port gigabitethernet 3/1/1 both

# Create remote source group 2 to monitor the bidirectional traffic of GigabitEthernet 3/1/2.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] mirroring-group 2 mirroring-port gigabitethernet 3/1/2 both

Related commands

mirroring-group

mirroring-group monitor-egress

Use mirroring-group monitor-egress to configure the egress port for a remote source group.

Use undo mirroring-group monitor-egress to restore the default.

Syntax

In system view:

mirroring-group group-id monitor-egress interface-type interface-number

undo mirroring-group group-id monitor-egress interface-type interface-number

In interface view:

mirroring-group group-id monitor-egress

undo mirroring-group group-id monitor-egress

Default

No egress port is configured for a remote source group.

Views

System view

Interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

interface-type interface-number: Specifies a port by its type and number.

Usage guidelines

You can configure egress ports only for remote source groups.

For port mirroring to work correctly, disable the following features on the egress port of a mirroring group:

·          Spanning tree.

·          802.1X.

·          IGMP snooping.

·          Static ARP.

·          MAC address learning.

The member port of an existing mirroring group cannot be configured as an egress port.

The member port of an aggregate interface cannot be configured as an egress port.

If the remote source group contains a source CPU on the CSPC (except CSPC-GE24L-E, CSPC-GP24GE8XP2L-E, and CSPC-GE16XP4L-E) or CMPE-1104 card, do not configure a port on the CSPC-GE24L-E, CSPC-GP24GE8XP2L-E, CSPC-GE16XP4L-E, CSPEX, or CEPC card as the egress port.

If the remote source group contains a source port on the CSPC-GE24L-E, CSPC-GP24GE8XP2L-E, CSPC-GE16XP4L-E, CSPEX, or CEPC card, the following ports must be configured as trunk ports that permit all VLANs and use the remote probe VLAN as the PVID for Layer 2 remote port mirroring to operate correctly:

·          Egress port on the source device.

·          Ports on intermediate devices directly connected to the source and destination devices.

·          Port that receives mirrored packets on the destination device.

·          Monitor port on the destination device.

Examples

# Create remote source group 1. Configure GigabitEthernet 3/1/1 as its egress port in system view.

<Sysname> system-view

[Sysname] mirroring-group 1 remote-source

[Sysname] mirroring-group 1 monitor-egress gigabitethernet 3/1/1

# Create remote source group 2. Configure GigabitEthernet 3/1/2 as its egress port in interface view.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] interface gigabitethernet 3/1/2

[Sysname-GigabitEthernet3/1/2] mirroring-group 2 monitor-egress

Related commands

mirroring-group

mirroring-group monitor-port (interface view)

Use mirroring-group monitor-port to configure a port as a monitor port for a mirroring group.

Use undo mirroring-group monitor-port to restore the default.

Syntax

mirroring-group group-id monitor-port [ pop-label ]

undo mirroring-group group-id monitor-port

Default

A port does not act as a monitor port for any mirroring groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

pop-label: Enables the monitor port to remove the MPLS labels for mirrored packets before forwarding the packets. If you do not specify this keyword, the monitor port does not remove the MPLS labels for mirrored packets before forwarding the packets.

Usage guidelines

You can configure monitor ports only for local mirroring groups and remote destination groups.

Follow these guidelines when you configure the MPLS label removal feature by using the pop-label keyword:

·          You can specify the pop-label keyword only when the following conditions are met:

¡  The mirroring group specified in the command is a local mirroring group.

¡  The mirroring sources of the mirroring group are ports that reside on the CSPEX (except CSPEX-1204 and CSPEX-1104-E) or CEPC card.

·          You can also enable a flow mirroring destination interface to remove MPLS labels for mirrored packets by specifying the pop-label keyword in the mirror-to interface command. However, the flow mirroring destination interface removes MPLS labels for mirrored packets whether or not the pop-label keyword is specified if the following conditions are met:

¡  The QoS policy that uses the traffic behavior where the flow mirroring destination interface is specified is applied to the outbound direction of a port.

¡  The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡  The pop-label keyword is specified for the monitor port of the local mirroring group.

·          MPLS labels are removed for mirrored packets sent to destinations specified in a QoS policy for NetStream flow mirroring if the following conditions are met:

¡  The QoS policy is applied to the outbound direction of a port.

¡  The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡  The pop-label keyword is specified for the monitor port of the local mirroring group.

·          To change the status of the MPLS label removal feature for a monitor port, first remove the monitor port configuration, and then reconfigure the monitor port.

Do not enable the spanning tree feature on the monitor port of a mirroring group.

For a Layer 2 or Layer 3 aggregate interface configured as the monitor port of a mirroring group, do not configure its member ports as source ports of the mirroring group.

Use a monitor port only for port mirroring, so the data monitoring device receives and analyzes only the mirrored traffic.

The member port of an existing mirroring group cannot be configured as a monitor port.

The member port of an aggregate interface cannot be configured as a monitor port.

Examples

# Create local mirroring group 1 and configure GigabitEthernet 3/1/1 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] interface gigabitethernet 3/1/1

[Sysname-GigabitEthernet3/1/1] mirroring-group 1 monitor-port

# Create remote destination group 2 and configure GigabitEthernet 3/1/2 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-destination

[Sysname] interface gigabitethernet 3/1/2

[Sysname-GigabitEthernet3/1/2] mirroring-group 2 monitor-port

Related commands

mirroring-group

mirroring-group monitor-port (system view)

Use mirroring-group monitor-port to configure the monitor port for a mirroring group.

Use undo mirroring-group monitor-port to remove the monitor port from a mirroring group.

Syntax

mirroring-group group-id monitor-port interface-type interface-number [ pop-label ]

undo mirroring-group group-id monitor-port interface-type interface-number

Default

No monitor port is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

interface-type interface-number: Specifies an interface by its type and number.

pop-label: Enables the monitor port to remove the MPLS labels for mirrored packets before forwarding the packets. If you do not specify this keyword, the monitor port does not remove the MPLS labels for mirrored packets before forwarding the packets.

Usage guidelines

You can configure monitor ports only for local mirroring groups and remote destination groups.

Follow these guidelines when you configure the MPLS label removal feature by using the pop-label keyword:

·          You can specify the pop-label keyword only when the following conditions are met:

¡  The mirroring group specified in the command is a local mirroring group.

¡  The mirroring sources of the mirroring group are ports that reside on the CSPEX (except CSPEX-1204 and CSPEX-1104-E) or CEPC card.

·          You can also enable a flow mirroring destination interface to remove MPLS labels for mirrored packets by specifying the pop-label keyword in the mirror-to interface command. However, the flow mirroring destination interface removes MPLS labels for mirrored packets whether or not the pop-label keyword is specified if the following conditions are met:

¡  The QoS policy that uses the traffic behavior where the flow mirroring destination interface is specified is applied to the outbound direction of a port.

¡  The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡  The pop-label keyword is specified for the monitor port of the local mirroring group.

·          MPLS labels are removed for mirrored packets sent to destinations specified in a QoS policy for NetStream flow mirroring if the following conditions are met:

¡  The QoS policy is applied to the outbound direction of a port.

¡  The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡  The pop-label keyword is specified for the monitor port of the local mirroring group.

·          To change the status of the MPLS label removal feature for a monitor port, first remove the monitor port configuration, and then reconfigure the monitor port.

Do not enable the spanning tree feature on the monitor port of a mirroring group.

For a Layer 2 or Layer 3 aggregate interface configured as the monitor port of a mirroring group, do not configure its member ports as source ports of the mirroring group.

Use a monitor port only for port mirroring, so the data monitoring device receives only the mirrored traffic.

The member port of an existing mirroring group cannot be configured as a monitor port.

The member port of an aggregate interface cannot be configured as a monitor port.

Examples

# Create local mirroring group 1 and configure GigabitEthernet 3/1/1 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] mirroring-group 1 monitor-port gigabitethernet 3/1/1

# Create remote destination group 2 and configure GigabitEthernet 3/1/2 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-destination

[Sysname] mirroring-group 2 monitor-port gigabitethernet 3/1/2

# Create local mirroring group 3 and configure ports GigabitEthernet 3/1/1 through GigabitEthernet 3/1/3 and GigabitEthernet 3/1/5 as its monitor ports.

<Sysname> system-view

[Sysname] mirroring-group 3 local

[Sysname] mirroring-group 3 monitor-port gigabitethernet 3/1/1 to gigabitethernet 3/1/3 gigabitethernet 3/1/5

Related commands

mirroring-group

mirroring-group reflector-port

Use mirroring-group reflector-port to configure the reflector port for a remote source group.

Use undo mirroring-group reflector-port to restore the default.

Syntax

In system view:

mirroring-group group-id reflector-port interface-type interface-number

undo mirroring-group group-id reflector-port interface-type interface-number

In Layer 2 interface view:

mirroring-group group-id reflector-port

undo mirroring-group group-id reflector-port

Default

No reflector port is configured for a mirroring group.

Views

System view

Layer 2 interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

interface-type interface-number: Specifies a port by its type and number.

Usage guidelines

You can configure reflector ports only for remote source groups.

The device supports using only Layer 2 interfaces as reflector ports.

Only ports on the CSPC (except CSPC-GE24L-E, CSPC-GP24GE8XP2L-E, and CSPC-GE16XP4L-E) or CMPE-1104 card can be configured as reflector ports.

If you need to configure a subinterface for a physical interface on the card where the reflector port resides, make sure the subinterface ID is different from the remote probe VLAN ID. This restriction also applies when you configure subinterfaces for Layer 3 aggregate interfaces that contain physical interfaces on the card where the reflector port resides.

The port to be configured as a reflector port must be a port not in use. Do not connect a network cable to a reflector port.

When a port is configured as a reflector port, the port restores to the factory default settings. You cannot configure other features on a reflector port.

If an IRF port is bound to only one physical interface, do not configure the physical interface as a reflector port. Otherwise, the IRF might split.

You can configure a port as a reflector port only when the port is operating with the default setting of the following parameters:

·          Duplex mode.

·          Speed.

·          MDI settings.

The member port of an aggregate interface can be configured as a reflector port.

Examples

# Create remote source group 1. Configure GigabitEthernet 3/1/1 as its reflector port in system view.

<Sysname> system-view

[Sysname] mirroring-group 1 remote-source

[Sysname] mirroring-group 1 reflector-port gigabitethernet 3/1/1

This operation may delete all settings made on the interface. Continue? [Y/N]: y

# Create remote source group 2. Configure GigabitEthernet 3/1/2 as its reflector port in interface view.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] interface gigabitethernet 3/1/2

[Sysname-GigabitEthernet3/1/2] mirroring-group 2 reflector-port

This operation may delete all settings made on the interface. Continue? [Y/N]: y

Related commands

mirroring-group

mirroring-group remote-probe vlan

Use mirroring-group remote-probe vlan to specify a VLAN as the remote probe VLAN for a mirroring group.

Use undo mirroring-group remote-probe vlan to restore the default.

Syntax

mirroring-group group-id remote-probe vlan vlan-id

undo mirroring-group group-id remote-probe vlan vlan-id

Default

No remote probe VLAN is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 64. The specified mirroring group must already exist.

vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

To implement Layer 2 remote port mirroring with the reflector port method, make sure the remote probe VLAN ID is different from any subinterface IDs configured for the following interfaces:

·          Physical interfaces on the card where the reflector port resides.

·          Layer 3 aggregate interfaces that contain physical interfaces on the card where the reflector port resides.

You can configure remote probe VLANs only for remote source groups and remote destination groups.

When a VLAN is configured as a remote probe VLAN, use the VLAN for port mirroring exclusively.

The remote mirroring groups on the source device and destination device must use the same remote probe VLAN.

Only a static VLAN that already exists can be configured as a remote probe VLAN. A VLAN can be configured as the remote probe VLAN for only one mirroring group.

To delete a VLAN that is configured as a remote probe VLAN, remove the remote probe VLAN configuration first.

Examples

# Create remote source group 1 and configure VLAN 10 as its remote probe VLAN.

<Sysname> system-view

[Sysname] mirroring-group 1 remote-source

[Sysname] mirroring-group 1 remote-probe vlan 10

# Create remote destination group 2 and configure VLAN 20 as its remote probe VLAN.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-destination

[Sysname] mirroring-group 2 remote-probe vlan 20

Related commands

mirroring-group

 

Flow mirroring commands

mirror-to cpu

Use mirror-to cpu to configure a mirroring action that mirrors traffic to the CPU.

Use undo mirror-to cpu to delete the mirroring action that mirrors traffic to the CPU.

Syntax

mirror-to cpu

undo mirror-to cpu

Default

No mirroring action exists to mirror traffic to the CPU.

Views

Traffic behavior view

Predefined user roles

network-admin

Examples

# Create traffic behavior 1 and configure the action of mirroring traffic to the CPU for the traffic behavior.

<Sysname> system-view

[Sysname] traffic behavior 1

[Sysname-behavior-1] mirror-to cpu

mirror-to interface

Use mirror-to interface to configure a mirroring action that mirrors traffic to an interface.

Use undo mirror-to interface to delete a mirroring action that mirrors traffic to an interface.

Syntax

mirror-to interface interface-type interface-number [ sampler sampler-name ] [ pop-label ]

undo mirror-to interface interface-type interface-number

Default

No mirroring actions exist to mirror traffic to interfaces.

Views

Traffic behavior view

Predefined user roles

network-admin

Parameters

interface interface-type interface-number: Specifies a flow mirroring destination interface by its type and number.

sampler sampler-name: Specifies a sampler by its name. The sampler-name argument is a case-insensitive string of 1 to 31 characters.

pop-label: Enables the flow mirroring destination interface to remove the MPLS labels for mirrored packets before forwarding the packets. If you do not specify this keyword, the flow mirroring destination interface does not remove the MPLS labels for mirrored packets before forwarding the packets.

Usage guidelines

You can execute this command multiple times for a traffic behavior to mirror traffic to different interfaces.

When you configure flow mirroring to tunnel interfaces in a traffic behavior, follow these restrictions and guidelines:

·          A maximum of three GRE over IPv4 tunnel interfaces can be specified for the traffic behavior. Flow mirroring to other types of tunnel interfaces is not supported.

·          QoS policies that use the traffic behavior can be applied only to interfaces on the CSPEX (except CSPEX-1204 and CSPEX-1104-E) or CEPC card.

A sampler selects a packet from sequential packets. Flow mirroring uses a sampler to limit the volume of traffic to be mirrored. It supports using a sampler that has not been created. If you configure multiple samplers for a mirroring action, the most recent configuration takes effect. For more information about samplers, see Network Management and Monitoring Configuration Guide.

Follow these guidelines when you configure MPLS label removal in a traffic behavior to be used by a QoS policy for flow mirroring:

·          You can specify the pop-label keyword only when the QoS policy is applied to a port on the CSPEX (except CSPEX-1204 and CSPEX-1104-E) or the CEPC card.

·          A flow mirroring destination interface removes MPLS labels for mirrored packets whether or not the pop-label keyword is specified in the mirror-to interface command if the following conditions are met:

¡  The QoS policy that uses the traffic behavior where the flow mirroring destination interface is specified is applied to the outbound direction of a port.

¡  The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡  The pop-label keyword is specified for the monitor port of the local mirroring group.

·          MPLS labels are removed for mirrored packets sent to destinations specified in a QoS policy for NetStream flow mirroring if the following conditions are met:

¡  The QoS policy is applied to the outbound direction of a port.

¡  The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡  The pop-label keyword is specified for the monitor port of the local mirroring group.

Examples

# Create traffic behavior 1 and configure the action of mirroring traffic to GigabitEthernet 3/1/1 for the traffic behavior.

<Sysname> system-view

[Sysname] traffic behavior 1

[Sysname-behavior-1] mirror-to interface gigabitethernet 3/1/1

# Create traffic behavior 1, configure the action of mirroring traffic to GigabitEthernet 3/1/1, and use sampler samp.

<Sysname> system-view

[Sysname] traffic behavior 1

[Sysname-behavior-1] mirror-to interface gigabitethernet 3/1/1 sampler samp

mirror-to local

Use mirror-to local to configure a mirroring action that mirrors traffic to the slot where the traffic was received or sent out.

Use undo mirror-to local to delete the mirroring action that mirrors traffic to the slot where the traffic was received or sent out.

Syntax

mirror-to local [ sampler sampler-name ]

undo mirror-to local

Default

No mirroring actions exist to mirror traffic to the slot where the traffic was received or sent out.

Views

Traffic behavior view

Predefined user roles

network-admin

Parameters

sampler sampler-name: Specifies a sampler by its name, a case-insensitive string of 1 to 31 characters.

Usage guidelines

Packets that match the QoS policy configured with this mirroring action are copied to the slot to which the interface where the packets were captured belongs.

A sampler selects a packet from sequential packets. Flow mirroring uses a sampler to limit the volume of traffic to be mirrored. It supports using a sampler that has not been created. If you configure multiple samplers for a mirroring action, the most recent configuration takes effect. For more information about samplers, see Network Management and Monitoring Configuration Guide.

Examples

# Create traffic behavior 1 and configure the action of mirroring traffic to the slot where the traffic was received or sent out.

<Sysname> system-view

[Sysname] traffic behavior 1

[Sysname-behavior-1] mirror-to local

mirror-to slot

Use mirror-to slot to configure a mirroring action that mirrors traffic to a card.

Use undo mirror-to slot to delete a mirroring action that mirrors traffic to a card.

Syntax

In standalone mode:

mirror-to slot slot-number [ backup slot slot-number ] [ sampler sampler-name ]

undo mirror-to slot slot-number

In IRF mode:

mirror-to chassis chassis-number slot slot-number [ backup chassis chassis-number slot slot-number ] [ sampler sampler-name ]

undo mirror-to chassis chassis-number slot slot-number

Default

No mirroring actions exist to mirror traffic to cards.

Views

Traffic behavior view

Predefined user roles

network-admin

Parameters

sampler sampler-name: Specifies a sampler by its name, a case-insensitive string of 1 to 31 characters.

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

Usage guidelines

If you execute this command for a traffic behavior multiple times to mirror traffic to different cards, the most recent configuration takes effect.

If you execute this command for a traffic behavior multiple times to mirror traffic to different IRF member devices, the most recent configuration takes effect.

A sampler selects a packet from sequential packets. Flow mirroring uses a sampler to limit the volume of traffic to be mirrored. It supports using a sampler that has not been created. If you configure multiple samplers for a mirroring action, the most recent configuration takes effect. For more information about samplers, see Network Management and Monitoring Configuration Guide.

Examples

# Create traffic behavior 1 and configure the action of mirroring traffic to the specified slot by using sampler samp.

<Sysname> system-view

[Sysname] traffic behavior 1

[Sysname-behavior-1] mirror-to slot 3 sampler samp