17-Network Management and Monitoring Command Reference

HomeSupportReference GuidesCommand ReferencesH3C SecPath F1000[F5000][VFW] Firewalls Series Command Reference(V7)-6W60017-Network Management and Monitoring Command Reference
05-Mirroring commands
Title Size Download
05-Mirroring commands 139.24 KB

Port mirroring commands

The fixed interfaces of a device and the interfaces on interface cards cannot be assigned to the same mirroring group on devices of the following series:

·     F5010, F5020, F5020-GM, F5040, F5000-AI-15, F5000-C, and F5000-S.

·     F1000-AI-20, F1000-AI-25, F1000-AI-30, F1000-AI-35, F1000-AI-50, F1000-AI-55, F1000-AI-65, and F1000-AI-75.

·     F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1000-V50, F1000-V60, and F1000-V70.

·     F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK711, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380.

Port mirroring across IRF member devices are not supported. The mirroring sources and destination must reside on the same IRF member device.

Virtual interfaces do not support port mirroring.

If you configure an interface shared by multiple contexts as a source port, traffic passing through the shared interface will be mirrored to the monitor port without distinction of contexts.

The following compatibility matrix shows the support of hardware platforms for port mirroring:

 

Series

Models

Port mirroring compatibility

F50X0 series

F5010, F5020, F5020-GM, F5040, F5000-C, F5000-S

Yes

F5030, F5030-6GW, F5060, F5080, F5000-A, F5000-M

Yes only in slot 3 through slot 8.

F5000-CN series

F5000-CN30, F5000-CN60

No

F5000-AI series

F5000-AI-15

Yes only on GE 1/0/0 through GE1/0/13 and XGE 1/0/18 through XGE 1/0/19.

F5000-AI-20, F5000-AI-40

Yes only in slot 3 through slot 8.

F5000-V series

F5000-V30

Yes only in slot 3 through slot 8.

F1000-AI series

F1000-AI-05, F1000-AI-10, F1000-AI-15

No

F1000-AI-20, F1000-AI-30, F1000-AI-50

Yes

F1000-AI-25, F1000-AI-35, F1000-AI-55

Yes only on interfaces GE 1/0/0 through GE 1/0/23, GE1/0/25, XGE 1/0/26, and XGE 1/0/27.

F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes only on GE 1/0/0 through GE 1/0/13, XGE 1/0/18 and XGE 1/0/19, GE 1/0/22 through GE 1/0/29, and interfaces on cards in four interface card slots.

F1000-AI-65, F1000-AI-75

Yes only on interfaces GE 1/0/0 through GE1/0/23, XGE 1/0/24, and XGE 1/0/25.

F1000-L series

F1003-L, F1005-L, F1010-L

No

F10X0 series

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080

Yes

F1090

Yes only on GE 1/0/0 through GE 1/0/13, XGE 1/0/18 and XGE 1/0/19, GE 1/0/22 through GE 1/0/29, and interfaces on cards in four interface card slots.

F1000-V series

F1000-V50

Yes only on interfaces GE 1/0/0 through GE 1/0/23, GE1/0/25, XGE 1/0/26, and XGE 1/0/27.

F1000-V60

Yes only on interfaces GE 1/0/0 through GE1/0/23, XGE 1/0/24, and XGE 1/0/25.

F1000-V70

Yes

F1000-V90

Yes only on GE 1/0/0 through GE 1/0/13, XGE 1/0/18 and XGE 1/0/19, GE 1/0/22 through GE 1/0/29, and interfaces on cards in four interface card slots.

F1000-SASE series

F1000-SASE100, F1000-SASE200

No

F1000-AK series

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK9110, F1000-AK9210

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272

Yes only on interfaces GE 1/0/0 through GE 1/0/23, GE1/0/25, XGE 1/0/26, and XGE 1/0/27.

F1000-AK1342, F1000-AK1352, F1000-AK1362

Yes only on interfaces GE 1/0/0 through GE1/0/23, XGE 1/0/24, and XGE 1/0/25.

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes only on GE 1/0/0 through GE 1/0/13, XGE 1/0/18 and XGE 1/0/19, GE 1/0/22 through GE 1/0/29, and interfaces on cards in four interface card slots.

Modules

IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1

No

vFW series

vFW1000, vFW2000

No

display mirroring-group

Use display mirroring-group to display mirroring group information.

Syntax

display mirroring-group { group-id | all | local }

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

group-id: Specifies a mirroring group by its ID.

The following compatibility matrix shows the value ranges for the mirroring group ID:

 

Series

Models

Value range

F50X0 series

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-A, F5000-C, F5000-S, F5000-M

1 and 2

F5000-CN series

F5000-CN30, F5000-CN60

Not supported

F5000-AI series

F5000-AI-15, F5000-AI-20, F5000-AI-40

1 and 2

F5000-V series

F5000-V30

1 and 2

F1000-AI series

F1000-AI-05, F1000-AI-10, F1000-AI-15

Not supported

F1000-AI-25, F1000-AI-35, F1000-AI-55

1

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90

1 and 2

F1000-L series

F1003-L, F1005-L, F1010-L

Not supported

F10X0 series

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090

1 and 2

F1000-V series

F1000-V50

1

F1000-V70, F1000-V60, F1000-V90

1 and 2

F1000-SASE series

F1000-SASE100, F1000-SASE200

Not supported

F1000-AK series

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK9110, F1000-AK9210

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

1 and 2

F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272

1

Modules

IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1

Not supported

vFW series

vFW1000, vFW2000

Not supported

all: Specifies all mirroring groups.

local: Specifies local mirroring groups.

Usage guidelines

Mirroring group information includes the type, status, and content of a mirroring group. It is sorted by mirroring group number.

Examples

# Display information about all mirroring groups.

<Sysname> display mirroring-group all

Mirroring group 1:

    Type: Local

    Status: Active

    Mirroring port:

        GigabitEthernet1/0/1  Inbound

    Monitor port: GigabitEthernet1/0/2

Table 1 Command output

Field

Description

Mirroring group

ID of the mirroring group.

Type

Type of the mirroring group:

Local.

Status

Status of the mirroring group:

·     Active—The mirroring group has taken effect.

·     Incomplete—The mirroring group configuration is not complete and does not take effect.

Mirroring port

Source port.

Monitor port

Destination port.

mirroring-group

Use mirroring-group to create a mirroring group.

Use undo mirroring-group to delete mirroring groups.

Syntax

mirroring-group group-id local

undo mirroring-group { group-id | all | local }

Default

No mirroring groups exist.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

group-id: Specifies a mirroring group ID.

The following compatibility matrix shows the value ranges for the mirroring group ID:

Series

Models

Value range

F50X0 series

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-A, F5000-C, F5000-S, F5000-M

1 and 2

F5000-CN series

F5000-CN30, F5000-CN60

Not supported

F5000-AI series

F5000-AI-15, F5000-AI-20, F5000-AI-40

1 and 2

F5000-V series

F5000-V30

1 and 2

F1000-AI series

F1000-AI-05, F1000-AI-10, F1000-AI-15

Not supported

F1000-AI-25, F1000-AI-35, F1000-AI-55

1

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90

1 and 2

F1000-L series

F1003-L, F1005-L, F1010-L

Not supported

F10X0 series

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090

1 and 2

F1000-V series

F1000-V50

1

F1000-V70, F1000-V60, F1000-V90

1 and 2

F1000-SASE series

F1000-SASE100, F1000-SASE200

Not supported

F1000-AK series

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK9110, F1000-AK9210

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

1 and 2

F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272

1

Modules

IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1

Not supported

vFW series

vFW1000, vFW2000

Not supported

local: Specifies local mirroring groups.

all: Specifies all mirroring groups.

Examples

# Create local mirroring group 1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

mirroring-group mirroring-port (interface view)

Use mirroring-group mirroring-port to configure a port as a source port for a mirroring group.

Use undo mirroring-group mirroring-port to restore the default.

Syntax

mirroring-group group-id mirroring-port { both | inbound | outbound }

undo mirroring-group group-id mirroring-port

Default

A port does not act as a source port for any mirroring groups.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

group-id: Specifies a mirroring group by its ID.

The following compatibility matrix shows the value ranges for the mirroring group ID:

 

Series

Models

Value range

F50X0 series

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-A, F5000-C, F5000-S, F5000-M

1 and 2

F5000-CN series

F5000-CN30, F5000-CN60

Not supported

F5000-AI series

F5000-AI-15, F5000-AI-20, F5000-AI-40

1 and 2

F5000-V series

F5000-V30

1 and 2

F1000-AI series

F1000-AI-05, F1000-AI-10, F1000-AI-15

Not supported

F1000-AI-25, F1000-AI-35, F1000-AI-55

1

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90

1 and 2

F1000-L series

F1003-L, F1005-L, F1010-L

Not supported

F10X0 series

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090

1 and 2

F1000-V series

F1000-V50

1

F1000-V70, F1000-V60, F1000-V90

1 and 2

F1000-SASE series

F1000-SASE100, F1000-SASE200

Not supported

F1000-AK series

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK9110, F1000-AK9210

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

1 and 2

F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272

1

Modules

IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1

Not supported

vFW series

vFW1000, vFW2000

Not supported

both: Mirrors both received and sent packets.

inbound: Mirrors only received packets.

outbound: Mirrors only sent packets.

Usage guidelines

A Layer 2 or Layer 3 aggregate interface cannot be configured as a source port for a mirroring group.

A source port cannot be used as a monitor port.

Examples

# Create local mirroring group 1 to monitor the bidirectional traffic of port GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mirroring-group 1 mirroring-port both

Related commands

mirroring-group

mirroring-group mirroring-port (system view)

Use mirroring-group mirroring-port to configure source ports for a mirroring group.

Use undo mirroring-group mirroring-port to remove source ports from a mirroring group.

Syntax

mirroring-group group-id mirroring-port interface-list { both | inbound | outbound }

undo mirroring-group group-id mirroring-port interface-list

Default

No source port is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

group-id: Specifies a mirroring group by its ID.

The following compatibility matrix shows the value ranges for the mirroring group ID:

 

Series

Models

Value range

F50X0 series

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-A, F5000-C, F5000-S, F5000-M

1 and 2

F5000-CN series

F5000-CN30, F5000-CN60

Not supported

F5000-AI series

F5000-AI-15, F5000-AI-20, F5000-AI-40

1 and 2

F5000-V series

F5000-V30

1 and 2

F1000-AI series

F1000-AI-05, F1000-AI-10, F1000-AI-15

Not supported

F1000-AI-25, F1000-AI-35, F1000-AI-55

1

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90

1 and 2

F1000-L series

F1003-L, F1005-L, F1010-L

Not supported

F10X0 series

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090

1 and 2

F1000-V series

F1000-V50

1

F1000-V70, F1000-V60, F1000-V90

1 and 2

F1000-SASE series

F1000-SASE100, F1000-SASE200

Not supported

F1000-AK series

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK9110, F1000-AK9210

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

1 and 2

F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272

1

Modules

IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1

Not supported

vFW series

vFW1000, vFW2000

Not supported

interface-list: Specifies a space-separated list of up to eight interface items. Each item specifies an interface by its type and number or specifies a range of interfaces in the form of interface-type interface-number1 to interface-type interface-number2. When you specify a range of interfaces, the interfaces must be of the same type and on the same slot. The start interface number must be identical to or lower than the end interface number.

both: Mirrors both received and sent packets.

inbound: Mirrors only received packets.

outbound: Mirrors only sent packets.

Usage guidelines

A Layer 2 or Layer 3 aggregate interface cannot be configured as a source port for a mirroring group.

A source port cannot be used as a monitor port.

Examples

# Create local mirroring group 1 to monitor the bidirectional traffic of GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] mirroring-group 1 mirroring-port gigabitethernet 1/0/1 both

Related commands

mirroring-group

mirroring-group monitor-port (interface view)

Use mirroring-group monitor-port to configure a port as the monitor port for a mirroring group.

Use undo mirroring-group monitor-port to restore the default.

Syntax

mirroring-group group-id monitor-port

undo mirroring-group group-id monitor-port

Default

A port does not act as the monitor port for any mirroring groups.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

group-id: Specifies a mirroring group by its ID.

The following compatibility matrix shows the value ranges for the mirroring group ID:

 

Series

Models

Value range

F50X0 series

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-A, F5000-C, F5000-S, F5000-M

1 and 2

F5000-CN series

F5000-CN30, F5000-CN60

Not supported

F5000-AI series

F5000-AI-15, F5000-AI-20, F5000-AI-40

1 and 2

F5000-V series

F5000-V30

1 and 2

F1000-AI series

F1000-AI-05, F1000-AI-10, F1000-AI-15

Not supported

F1000-AI-25, F1000-AI-35, F1000-AI-55

1

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90

1 and 2

F1000-L series

F1003-L, F1005-L, F1010-L

Not supported

F10X0 series

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090

1 and 2

F1000-V series

F1000-V50

1

F1000-V70, F1000-V60, F1000-V90

1 and 2

F1000-SASE series

F1000-SASE100, F1000-SASE200

Not supported

F1000-AK series

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK9110, F1000-AK9210

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

1 and 2

F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272

1

Modules

IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1

Not supported

vFW series

vFW1000, vFW2000

Not supported

Usage guidelines

Do not enable the spanning tree feature on the monitor port of a mirroring group.

A Layer 2 or Layer 3 aggregate interface cannot be configured as the monitor port for a mirroring group.

Use a monitor port only for port mirroring, so the data monitoring device receives and analyzes only the mirrored traffic.

The member port of an existing mirroring group cannot be configured as a monitor port.

Examples

# Create local mirroring group 1 and configure GigabitEthernet 1/0/1 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mirroring-group 1 monitor-port

Related commands

mirroring-group

mirroring-group monitor-port (system view)

Use mirroring-group monitor-port to configure the monitor ports for a mirroring group.

Use undo mirroring-group monitor-port to remove the monitor ports from a mirroring group.

Syntax

mirroring-group group-id monitor-port interface-type interface-number

undo mirroring-group group-id monitor-port interface-type interface-number

Default

No monitor port is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

group-id: Specifies a mirroring group by its ID.

The following compatibility matrix shows the value ranges for the mirroring group ID:

 

Series

Models

Value range

F50X0 series

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-A, F5000-C, F5000-S, F5000-M

1 and 2

F5000-CN series

F5000-CN30, F5000-CN60

Not supported

F5000-AI series

F5000-AI-15, F5000-AI-20, F5000-AI-40

1 and 2

F5000-V series

F5000-V30

1 and 2

F1000-AI series

F1000-AI-05, F1000-AI-10, F1000-AI-15

Not supported

F1000-AI-25, F1000-AI-35, F1000-AI-55

1

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90

1 and 2

F1000-L series

F1003-L, F1005-L, F1010-L

Not supported

F10X0 series

F1005, F1010

Not supported

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090

1 and 2

F1000-V series

F1000-V50

1

F1000-V70, F1000-V60, F1000-V90

1 and 2

F1000-SASE series

F1000-SASE100, F1000-SASE200

Not supported

F1000-AK series

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK9110, F1000-AK9210

Not supported

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

1 and 2

F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272

1

Modules

IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1

Not supported

vFW series

vFW1000, vFW2000

Not supported

interface-type interface-number: Specifies an interface by its type and number.

Usage guidelines

Do not enable the spanning tree feature on the monitor port of a mirroring group.

Use a monitor port only for port mirroring, so the data monitoring device receives only the mirrored traffic.

The member port of an existing mirroring group cannot be configured as a monitor port.

Examples

# Create local mirroring group 1 and configure GigabitEthernet 1/0/1 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] mirroring-group 1 monitor-port gigabitethernet 1/0/1

Related commands

mirroring-group

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网