- Table of Contents
-
- 11-Network Management and Monitoring Command Reference
- 00-Preface
- 01-System maintenance and debugging commands
- 02-NQA commands
- 03-NTP commands
- 04-PTP commands
- 05-SNMP commands
- 06-RMON commands
- 07-Event MIB commands
- 08-NETCONF commands
- 09-CWMP commands
- 10-EAA commands
- 11-Process monitoring and maintenance commands
- 12-Mirroring commands
- 13-sFlow commands
- 14-Information center commands
- 15-Packet capture commands
- 16-VCF fabric commands
- Related Documents
-
Title | Size | Download |
---|---|---|
12-Mirroring commands | 106.25 KB |
mirroring-group mirroring-port (interface view)
mirroring-group mirroring-port (system view)
mirroring-group monitor-egress
mirroring-group monitor-port (interface view)
mirroring-group monitor-port (system view)
mirroring-group reflector-port
mirroring-group remote-probe vlan
Port mirroring commands
display mirroring-group
Use display mirroring-group to display mirroring group information.
Syntax
display mirroring-group { group-id | all | local | remote-destination | remote-source }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group-id: Specifies a mirroring group by its number. The value range is 1 to 4.
all: Specifies all mirroring groups.
local: Specifies local mirroring groups.
remote-destination: Specifies remote destination groups.
remote-source: Specifies remote source groups.
Usage guidelines
Mirroring group information includes the type, status, and content of a mirroring group. It is sorted by mirroring group number.
Examples
# Display information about all mirroring groups.
<Sysname> display mirroring-group all
Mirroring group 1:
Type: Local
Status: Active
Mirroring port:
Ten-GigabitEthernet1/0/1 Inbound
Monitor port: Ten-GigabitEthernet1/0/2
Mirroring group 2:
Type: Local
Status: Active
Mirroring port:
Ten-GigabitEthernet1/0/3 Inbound
Monitor port: Ten-GigabitEthernet1/0/4
Encapsulation: Destination IP address 1.1.1.1
Source IP address 2.2.2.2
DSCP 1
VLAN 2
VRF Instance 3
Destination MAC address 0011-0200-0211
Table 1 Command output
Field |
Description |
Mirroring group |
Number of the mirroring group. |
Type |
Type of the mirroring group: · Local. · Remote source. · Remote destination. |
Status |
Status of the mirroring group: · Active—The mirroring group has taken effect. · Incomplete—The mirroring group configuration is not complete and does not take effect. |
Mirroring port |
Source port. |
Mirroring CPU |
Source CPU. |
Monitor port |
Destination port. |
Destination IP address |
Destination IP address in the outer header of the GRE-encapsulated mirrored packets. |
Source IP address |
Source IP address in the outer header of the GRE-encapsulated mirrored packets. |
DSCP |
DSCP value in the outer header of the GRE-encapsulated mirrored packets. |
VLAN |
VLAN in the outer header of the GRE-encapsulated mirrored packets. |
VRF Instance |
VPN instance whose routing table is used to direct forwarding of the mirrored packets. |
Destination MAC address |
Destination MAC address in the outer header of the GRE-encapsulated mirrored packets. |
mirroring-group
Use mirroring-group to create a mirroring group.
Use undo mirroring-group to delete mirroring groups.
Syntax
mirroring-group group-id { local | remote-destination | remote-source }
undo mirroring-group { group-id | all | local | remote-destination | remote-source }
Default
No mirroring groups exist.
Views
System view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The value range is 1 to 4.
local: Specifies local mirroring groups.
remote-destination: Specifies remote destination groups.
remote-source: Specifies remote source groups.
all: Specifies all mirroring groups.
Examples
# Create local mirroring group 1.
<Sysname> system-view
[Sysname] mirroring-group 1 local
mirroring-group mirroring-cpu
Use mirroring-group mirroring-cpu to configure source CPUs for a mirroring group.
Use undo mirroring-group mirroring-cpu to remove source CPUs from a mirroring group.
Syntax
mirroring-group group-id mirroring-cpu slot slot-number-list inbound
undo mirroring-group group-id mirroring-cpu slot slot-number-list
Default
No source CPU is configured for a mirroring group.
Views
System view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range is 1 to 4.
slot slot-number-list: Specifies a space-separated list of up to eight slot number items. An item specifies an IRF member device by its member ID or specifies a range of IRF member devices in the form of start-slot-number to end-slot-number. The end slot number must be equal to or greater than the start slot number.
inbound: Mirrors only received packets.
Usage guidelines
The device supports mirroring only inbound traffic of a source CPU.
You can configure source CPUs only for local mirroring groups and remote source groups.
Examples
# Create local mirroring group 1 to monitor the inbound traffic of the CPU on the specified slot.
<Sysname> system-view
[Sysname] mirroring-group 1 local
[Sysname] mirroring-group 1 mirroring-cpu slot 1 inbound
mirroring-group
mirroring-group mirroring-port (interface view)
Use mirroring-group mirroring-port to configure a port as a source port for a mirroring group.
Use undo mirroring-group mirroring-port to restore the default.
Syntax
mirroring-group group-id mirroring-port { both | inbound | outbound }
undo mirroring-group group-id mirroring-port
Default
A port does not act as a source port for any mirroring groups.
Views
Interface view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 4.
both: Mirrors both received and sent packets.
inbound: Mirrors only received packets.
outbound: Mirrors only sent packets.
Usage guidelines
You can configure source ports only for local mirroring groups and remote source groups.
Do not assign a source port of a mirroring group to the remote probe VLAN of the mirroring group.
A port can be assigned to different mirroring groups as follows:
· When acting as a source port for unidirectional mirroring, the port can be assigned to up to four mirroring groups.
· When acting as a source port for bidirectional mirroring, the port can be assigned to up to two mirroring groups.
· When acting as a source port for unidirectional and bidirectional mirroring, the port can be assigned to up to three mirroring groups. One mirroring group is used for bidirectional mirroring and the other two for unidirectional mirroring.
A source port cannot be used as a reflector port, monitor port, or egress port.
Examples
# Create local mirroring group 1 to monitor the bidirectional traffic of the port Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] mirroring-group 1 local
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mirroring-group 1 mirroring-port both
# Create remote source group 2 to monitor the bidirectional traffic of the port Ten-GigabitEthernet 1/0/2.
<Sysname> system-view
[Sysname] mirroring-group 2 remote-source
[Sysname] interface ten-gigabitethernet 1/0/2
[Sysname-Ten-GigabitEthernet1/0/2] mirroring-group 2 mirroring-port both
Related commands
mirroring-group
mirroring-group mirroring-port (system view)
Use mirroring-group mirroring-port to configure source ports for a mirroring group.
Use undo mirroring-group mirroring-port to remove source ports from a mirroring group.
Syntax
mirroring-group group-id mirroring-port interface-list { both | inbound | outbound }
undo mirroring-group group-id mirroring-port interface-list
Default
No source port is configured for a mirroring group.
Views
System view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 4.
interface-list: Specifies a space-separated list of up to eight interface items. Each item specifies an interface by its type and number or specifies a range of interfaces in the form of interface-type interface-number1 to interface-type interface-number2. When you specify a range of interfaces, the interfaces must be of the same type and on the same slot. The start interface number must be identical to or lower than the end interface number.
both: Mirrors both received and sent packets.
inbound: Mirrors only received packets.
outbound: Mirrors only sent packets.
Usage guidelines
You can configure source ports only for local mirroring groups and remote source groups.
Do not assign a source port of a mirroring group to the remote probe VLAN of the mirroring group.
A port can be assigned to different mirroring groups as follows:
· When acting as a source port for unidirectional mirroring, the port can be assigned to up to four mirroring groups.
· When acting as a source port for bidirectional mirroring, the port can be assigned to up to two mirroring groups.
· When acting as a source port for unidirectional and bidirectional mirroring, the port can be assigned to up to three mirroring groups. One mirroring group is used for bidirectional mirroring and the other two for unidirectional mirroring.
A source port cannot be used as a reflector port, monitor port, or egress port.
Examples
# Create local mirroring group 1 to monitor the bidirectional traffic of Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] mirroring-group 1 local
[Sysname] mirroring-group 1 mirroring-port ten-gigabitethernet 1/0/1 both
# Create remote source group 2 to monitor the bidirectional traffic of Ten-GigabitEthernet 1/0/2.
<Sysname> system-view
[Sysname] mirroring-group 2 remote-source
[Sysname] mirroring-group 2 mirroring-port ten-gigabitethernet 1/0/2 both
mirroring-group
mirroring-group monitor-egress
Use mirroring-group monitor-egress to configure the egress port for a remote source group.
Use undo mirroring-group monitor-egress to restore the default.
Syntax
In system view:
mirroring-group group-id monitor-egress interface-type interface-number
undo mirroring-group group-id monitor-egress interface-type interface-number
In interface view:
mirroring-group group-id monitor-egress
undo mirroring-group group-id monitor-egress
Default
No egress port is configured for a remote source group.
Views
System view
Interface view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 4.
interface-type interface-number: Specifies a port by its type and number.
Usage guidelines
You can configure egress ports only for remote source groups.
Do not assign the egress port of a mirroring group to a source VLAN of the mirroring group.
For port mirroring to work correctly, disable the following features on the egress port of a mirroring group:
· Spanning tree.
· 802.1X.
· IGMP snooping.
· Static ARP.
· MAC address learning.
The member port of an existing mirroring group cannot be configured as an egress port.
The member port of an aggregate interface cannot be configured as an egress port.
Examples
# Create remote source group 1. Configure Ten-GigabitEthernet 1/0/1 as its egress port in system view.
<Sysname> system-view
[Sysname] mirroring-group 1 remote-source
[Sysname] mirroring-group 1 monitor-egress ten-gigabitethernet 1/0/1
# Create remote source group 2. Configure Ten-GigabitEthernet 1/0/2 as its egress port in interface view.
<Sysname> system-view
[Sysname] mirroring-group 2 remote-source
[Sysname] interface ten-gigabitethernet 1/0/2
[Sysname-Ten-GigabitEthernet1/0/2] mirroring-group 2 monitor-egress
Related commands
mirroring-group
mirroring-group monitor-port (interface view)
Use mirroring-group monitor-port to configure a port as the monitor port for a mirroring group.
Use undo mirroring-group monitor-port to restore the default.
Syntax
mirroring-group group-id monitor-port [ destination-ip destination-ip-address source-ip source-ip-address [ dscp dscp-value | vlan vlan-id | vrf-instance vrf-name ] * ]
undo mirroring-group group-id monitor-port
Default
A port does not act as the monitor port for any mirroring groups.
Views
Interface view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 4.
destination-ip destination-ip-address: Specifies the destination IP address for the mirrored packets. This option is supported only in R2612 and later.
source-ip source-ip-address: Specifies the source IP address for the mirrored packets. This option is supported only in R2612 and later.
dscp dscp-value: Specifies the DSCP value for the mirrored packets. The dscp-value argument can be a number in the range of 0 to 63 or a keyword in Table 2. The default DSCP value is 0. This option is supported only in R2612 and later.
Table 2 DSCP keywords and values
Keyword |
DSCP value in binary |
DSCP value in decimal |
af11 |
001010 |
10 |
af12 |
001100 |
12 |
af13 |
001110 |
14 |
af21 |
010010 |
18 |
af22 |
010100 |
20 |
af23 |
010110 |
22 |
af31 |
011010 |
26 |
af32 |
011100 |
28 |
af33 |
011110 |
30 |
af41 |
100010 |
34 |
af42 |
100100 |
36 |
af43 |
100110 |
38 |
cs1 |
001000 |
8 |
cs2 |
010000 |
16 |
cs3 |
011000 |
24 |
cs4 |
100000 |
32 |
cs5 |
101000 |
40 |
cs6 |
110000 |
48 |
cs7 |
111000 |
56 |
default |
000000 |
0 |
ef |
101110 |
46 |
vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094 for the mirrored packets. This option is supported only in R2612 and later.
vrf-instance vrf-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. The mirrored packets will be forwarded based on the routing table of the specified VPN instance. This option is supported only in R2612 and later.
Usage guidelines
You can configure monitor ports only for local mirroring groups and remote destination groups.
To implement Layer 3 remote port mirroring in ERSPAN mode, you must configure the following encapsulation parameters for mirrored packets sent to the monitor port:
· Destination IP address, which is the IP address of the remote data monitoring device.
· Source IP address.
· Optional encapsulation parameters, including the DSCP value, VLAN, and VPN instance.
The mirrored packet is first encapsulated in a GRE packet with a protocol number of 0x88BE. The GRE packet is then encapsulated in a delivery protocol by using the configured encapsulation parameters and routed to the final destination.
To implement Layer 3 remote port mirroring in non-ERSPAN mode, do not configure the packet encapsulation parameters.
Do not enable the spanning tree feature on the monitor port of a mirroring group.
For a Layer 2 aggregate interface configured as the monitor port of a mirroring group, do not configure its member ports as source ports of the mirroring group.
A Layer 3 aggregate interface cannot be configured as the monitor port for a local mirroring group.
A Layer 2 or Layer 3 aggregate interface cannot be configured as the monitor port for a Layer 2 remote destination group.
Use a monitor port only for port mirroring, so the data monitoring device receives and analyzes only the mirrored traffic.
The member port of an existing mirroring group cannot be configured as a monitor port.
The member port of a Layer 3 aggregate interface cannot be configured as a monitor port.
A mirroring group can contain only one monitor port.
Examples
# Create local mirroring group 1 and configure Ten-GigabitEthernet 1/0/1 as its monitor port.
<Sysname> system-view
[Sysname] mirroring-group 1 local
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mirroring-group 1 monitor-port
# Create remote destination group 2 and configure Ten-GigabitEthernet 1/0/2 as its monitor port.
<Sysname> system-view
[Sysname] mirroring-group 2 remote-destination
[Sysname] interface ten-gigabitethernet 1/0/2
[Sysname-Ten-GigabitEthernet1/0/2] mirroring-group 2 monitor-port
# Create local mirroring group 4. Specify Ten-GigabitEthernet 1/0/1 as its monitor port and configure the encapsulation parameters including the source and destination IP address, DSCP value, VLAN, and VPN instance for the mirrored packets.
<Sysname> system-view
[Sysname] mirroring-group 4 local
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mirroring-group 3 monitor-port destination-ip 1.1.1.1 source-ip 3.3.3.3 dscp 1 vlan 1 vrf-instance 122
Related commands
mirroring-group
mirroring-group monitor-port (system view)
Use mirroring-group monitor-port to configure the monitor ports for a mirroring group.
Use undo mirroring-group monitor-port to remove the monitor ports from a mirroring group.
Syntax
mirroring-group group-id monitor-port interface-type interface-number [ destination-ip destination-ip-address source-ip source-ip-address [ dscp dscp-value | vlan vlan-id | vrf-instance vrf-name ] * ]
undo mirroring-group group-id monitor-port interface-type interface-number
Default
No monitor port is configured for a mirroring group.
Views
System view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 4.
interface-type interface-number: Specifies an interface by its type and number.
destination-ip destination-ip-address: Specifies the destination IP address for the mirrored packets. This option is supported only in R2612 and later.
source-ip source-ip-address: Specifies the source IP address for the mirrored packets. This option is supported only in R2612 and later.
dscp dscp-value: Specifies the DSCP value for the mirrored packets. The dscp-value argument can be a number in the range of 0 to 63 or a keyword in Table 3. The default DSCP value is 0. This option is supported only in R2612 and later.
Table 3 DSCP keywords and values
Keyword |
DSCP value in binary |
DSCP value in decimal |
af11 |
001010 |
10 |
af12 |
001100 |
12 |
af13 |
001110 |
14 |
af21 |
010010 |
18 |
af22 |
010100 |
20 |
af23 |
010110 |
22 |
af31 |
011010 |
26 |
af32 |
011100 |
28 |
af33 |
011110 |
30 |
af41 |
100010 |
34 |
af42 |
100100 |
36 |
af43 |
100110 |
38 |
cs1 |
001000 |
8 |
cs2 |
010000 |
16 |
cs3 |
011000 |
24 |
cs4 |
100000 |
32 |
cs5 |
101000 |
40 |
cs6 |
110000 |
48 |
cs7 |
111000 |
56 |
default |
000000 |
0 |
ef |
101110 |
46 |
vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094 for the mirrored packets. This option is supported only in R2612 and later.
vrf-instance vrf-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. The mirrored packets will be forwarded based on the routing table of the specified VPN instance. This option is supported only in R2612 and later.
Usage guidelines
You can configure monitor ports only for local mirroring groups and remote destination groups.
To implement Layer 3 remote port mirroring in ERSPAN mode, you must configure the following encapsulation parameters for mirrored packets sent to the monitor port:
· Destination IP address, which is the IP address of the remote data monitoring device.
· Source IP address.
· Optional encapsulation parameters, including the DSCP value, VLAN, and VPN instance.
The mirrored packet is first encapsulated in a GRE packet with a protocol number of 0x88BE. The GRE packet is then encapsulated in a delivery protocol by using the configured encapsulation parameters and routed to the final destination.
To implement Layer 3 remote port mirroring in non-ERSPAN mode, do not configure the packet encapsulation parameters.
Do not enable the spanning tree feature on the monitor port of a mirroring group.
For a Layer 2 aggregate interface configured as the monitor port of a mirroring group, do not configure its member ports as source ports of the mirroring group.
A Layer 3 aggregate interface cannot be configured as the monitor port for a local mirroring group.
A Layer 2 or Layer 3 aggregate interface cannot be configured as the monitor port for a Layer 2 remote destination group.
Use a monitor port only for port mirroring, so the data monitoring device receives only the mirrored traffic.
The member port of an existing mirroring group cannot be configured as a monitor port.
The member port of a Layer 3 aggregate interface cannot be configured as a monitor port.
A mirroring group can contain only one monitor port.
Examples
# Create local mirroring group 1 and configure Ten-GigabitEthernet 1/0/1 as its monitor port.
<Sysname> system-view
[Sysname] mirroring-group 1 local
[Sysname] mirroring-group 1 monitor-port ten-gigabitethernet 1/0/1
# Create remote destination group 2 and configure Ten-GigabitEthernet 1/0/2 as its monitor port.
<Sysname> system-view
[Sysname] mirroring-group 2 remote-destination
[Sysname] mirroring-group 2 monitor-port ten-gigabitethernet 1/0/2
# Create local mirroring group 4. Specify Ten-GigabitEthernet 1/0/1 as its monitor port and configure the encapsulation parameters including the source and destination IP address, DSCP value, VLAN, and VPN instance for the mirrored packets.
<Sysname> system-view
[Sysname] mirroring-group 4 local
[Sysname] mirroring-group 4 monitor-port ten-gigabitethernet 1/0/1 destination-ip 1.1.1.1 source-ip 3.3.3.3 dscp 1 vlan 1 vrf-instance 122
Related commands
mirroring-group
mirroring-group reflector-port
Use mirroring-group reflector-port to configure the reflector port for a remote source group.
Use undo mirroring-group reflector-port to restore the default.
Syntax
In system view:
mirroring-group group-id reflector-port interface-type interface-number
undo mirroring-group group-id reflector-port interface-type interface-number
In interface view:
mirroring-group group-id reflector-port
undo mirroring-group group-id reflector-port
Default
No reflector port is configured for a mirroring group.
Views
System view
Interface view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 4.
interface-type interface-number: Specifies a port by its type and number.
Usage guidelines
You can configure reflector ports only for remote source groups.
The port to be configured as a reflector port must be a port not in use. Do not connect a network cable to a reflector port.
When a port is configured as a reflector port, the port restores to the factory default settings. You cannot configure other features on a reflector port.
If an IRF port is bound to only one physical interface, do not configure the physical interface as a reflector port. Otherwise, the IRF might split.
You cannot change the duplex mode or speed for a reflector port.
The member port of an aggregate interface can be configured as a reflector port.
Examples
# Create remote source group 1. Configure Ten-GigabitEthernet 1/0/1 as its reflector port in system view.
<Sysname> system-view
[Sysname] mirroring-group 1 remote-source
[Sysname] mirroring-group 1 reflector-port ten-gigabitethernet 1/0/1
This operation may delete all settings made on the interface. Continue? [Y/N]: y
# Create remote source group 2. Configure Ten-GigabitEthernet 1/0/2 as its reflector port in interface view.
<Sysname> system-view
[Sysname] mirroring-group 2 remote-source
[Sysname] interface ten-gigabitethernet 1/0/2
[Sysname-Ten-GigabitEthernet1/0/2] mirroring-group 2 reflector-port
This operation may delete all settings made on the interface. Continue? [Y/N]: y
Related commands
mirroring-group
mirroring-group remote-probe vlan
Use mirroring-group remote-probe vlan to specify a VLAN as the remote probe VLAN for a mirroring group.
Use undo mirroring-group remote-probe vlan to restore the default.
Syntax
mirroring-group group-id remote-probe vlan vlan-id
undo mirroring-group group-id remote-probe vlan vlan-id
Default
No remote probe VLAN is configured for a mirroring group.
Views
System view
Predefined user roles
network-admin
Parameters
group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 4.
vlan-id: Specifies a VLAN by its ID.
Usage guidelines
You can configure remote probe VLANs only for remote source groups and remote destination groups.
When a VLAN is configured as a remote probe VLAN, use the VLAN for port mirroring exclusively.
The remote mirroring groups on the source device and destination device must use the same remote probe VLAN.
Only a static VLAN that already exists can be configured as a remote probe VLAN. A VLAN can be configured as the remote probe VLAN for only one mirroring group.
To delete a VLAN that is configured as a remote probe VLAN, remove the remote probe VLAN configuration first.
Examples
# Create remote source group 1 and configure VLAN 10 as its remote probe VLAN.
<Sysname> system-view
[Sysname] mirroring-group 1 remote-source
[Sysname] mirroring-group 1 remote-probe vlan 10
# Create remote destination group 2 and configure VLAN 20 as its remote probe VLAN.
<Sysname> system-view
[Sysname] mirroring-group 2 remote-destination
[Sysname] mirroring-group 2 remote-probe vlan 20
Related commands
mirroring-group
Flow mirroring commands
mirror-to cpu
Use mirror-to cpu to configure a mirroring action that mirrors traffic to the CPU.
Use undo mirror-to cpu to delete the mirroring action that mirrors traffic to the CPU.
Syntax
mirror-to cpu
undo mirror-to cpu
Default
No mirroring action exists to mirror traffic to the CPU.
Views
Traffic behavior view
Predefined user roles
network-admin
Examples
# Create traffic behavior 1 and configure the action of mirroring traffic to the CPU for the traffic behavior.
<Sysname> system-view
[Sysname] traffic behavior 1
[Sysname-behavior-1] mirror-to cpu
mirror-to interface
Use mirror-to interface to configure a mirroring action that mirrors traffic to an interface.
Use undo mirror-to interface to delete a mirroring action that mirrors traffic to an interface.
Syntax
mirror-to interface interface-type interface-number [ loopback | [ destination-ip destination-ip-address source-ip source-ip-address [ dscp dscp-value | vlan vlan-id | vrf-instance vrf-name ] * ]
undo mirror-to interface interface-type interface-number
Default
No mirroring actions exist to mirror traffic to interfaces.
Views
Traffic behavior view
Predefined user roles
network-admin
Parameters
interface-type interface-number: Specifies an interface by its type and number.
loopback: Uses the GRE encapsulation format for mirrored packets. Upon arriving at the specified interface, the mirrored packets are forwarded to the destination device through the GRE tunnel. The destination device decapsulates the packets and forwards them to the data monitoring device.
destination-ip destination-ip-address: Specifies the destination IP address for the mirrored packets.
source-ip source-ip-address: Specifies the source IP address for the mirrored packets.
dscp dscp-value: Specifies the DSCP value for the mirrored packets. The dscp-value argument can be a number in the range of 0 to 63 or a keyword in Table 4.
Table 4 DSCP keywords and values
Keyword |
DSCP value in binary |
DSCP value in decimal |
af11 |
001010 |
10 |
af12 |
001100 |
12 |
af13 |
001110 |
14 |
af21 |
010010 |
18 |
af22 |
010100 |
20 |
af23 |
010110 |
22 |
af31 |
011010 |
26 |
af32 |
011100 |
28 |
af33 |
011110 |
30 |
af41 |
100010 |
34 |
af42 |
100100 |
36 |
af43 |
100110 |
38 |
cs1 |
001000 |
8 |
cs2 |
010000 |
16 |
cs3 |
011000 |
24 |
cs4 |
100000 |
32 |
cs5 |
101000 |
40 |
cs6 |
110000 |
48 |
cs7 |
111000 |
56 |
default |
000000 |
0 |
ef |
101110 |
46 |
vrf-instance vrf-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters. The mirrored packets will be forwarded based on the routing table of the specified VPN instance.
Usage guidelines
You can execute this command multiple times for a traffic behavior to mirror traffic to different interfaces.
You can mirror traffic to a maximum of four Ethernet interfaces or Layer 2 aggregate interfaces. If you execute this command for a traffic behavior multiple times, only the first four configured interfaces take effect.
The encapsulation parameters for the mirrored packets are available only when the mirrored packets are sent out of Ethernet interfaces.
If you configure the mirror-to interface command with the destination-ip destination-ip-address source-ip source-ip-address options, the mirrored packets will be tunneled to the data monitoring device with the tunnel encapsulation. The data monitoring device can analyze the mirrored packets only if it can decapsulate the tunnel encapsulation.
Examples
# Create traffic behavior 1 and configure the action of mirroring traffic to Ten-GigabitEthernet 1/0/1 for the traffic behavior.
<Sysname> system-view
[Sysname] traffic behavior 1
[Sysname-behavior-1] mirror-to interface ten-gigabitethernet 1/0/1
# Create traffic behavior 1, and configure the action of mirroring traffic to Ten-GigabitEthernet 1/0/1 for the traffic behavior. Specify the following parameters for the mirrored packets sent to Ten-GigabitEthernet 1/0/1:
· Specify 1.1.1.1 and 2.2.2.2 as the source address and destination address, respectively.
· Specify 20, 100, and vrf1 as the DSCP value, VLAN, and the VPN instance name, respectively.
<Sysname> system-view
[Sysname] traffic behavior 1
[Sysname-behavior-1] mirror-to interface ten-gigabitethernet 1/0/1 destination-ip 1.1.1.1 source-ip 2.2.2.2 dscp 20 vlan 100 vrf-instance vrf1