H3C Routers

Mirroring Configuration Examples

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

The information in this document is subject to change without notice.

Contents

Introduction· 1

Prerequisites· 1

Example: Configuring local port mirroring· 1

Network configuration· 1

Software versions used· 1

Restrictions and guidelines· 2

Procedures· 2

Verifying the configuration· 2

Configuration files· 3

Related documentation· 4

 

Introduction

The following information provides mirroring configuration examples.

Prerequisites

The configuration examples were created and verified in a lab environment, and all the devices were started with the factory default configuration. When you are working on a live network, make sure you understand the potential impact of every command on your network.

The following information is provided based on the assumption that you have basic knowledge of mirroring.

Example: Configuring local port mirroring

Network configuration

As shown in Figure 1, the departments of a company use IP addresses on different subnets. The R&D department uses subnet 10.1.1.0/24, and the marketing department uses subnet 12.1.1.0/24. Configure local port mirroring, so that the data monitoring device can monitor the traffic from the R&D department and marketing department to Internet and the traffic between the two departments.

Figure 1 Network diagram

‌

Software versions used

This configuration example was created and verified on R9141P16 of the MSR2630E-X1 device.

Restrictions and guidelines

·     For a local mirroring group to take effect, you must configure mirroring source ports and monitor ports for the group. Make sure each monitor port is not the member port of any other mirroring group.

·     The packets received on the monitor port include the packets copied from the mirroring ports and the packets from other ports. Use monitor ports only for port mirroring, so the data monitoring devices analyze only the mirrored packets copied from mirroring source ports.

Procedures

# Assign IP address 10.1.1.1 to GigabitEthernet 1/0/1.

<DeviceA> system-view

[DeviceA] interface gigabitethernet 1/0/1

[DeviceA-GigabitEthernet1/0/1] ip address 10.1.1.1 24

[DeviceA-GigabitEthernet1/0/1] quit

# Assign IP addresses to other interfaces as shown in Figure 1 in the same way. (Details not shown.)

# Create a local mirroring group.

[DeviceA] mirroring-group 1 local

# Configure the local mirroring group to mirror the incoming packets of interfaces GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2.

[DeviceA] mirroring-group 1 mirroring-port gigabitethernet 1/0/1 gigabitethernet 1/0/2 inbound

# Configure interface GigabitEthernet 1/0/3 as the monitor port.

[DeviceA] mirroring-group 1 monitor-port gigabitethernet 1/0/3

Verifying the configuration

# Display information about mirroring group 1 on Device A.

[DeviceA] display mirroring-group 1

Mirroring group 1:

    Type: Local

    Status: Active

    Keep-link-header: No

    Mirroring port:

        GigabitEthernet1/0/1  Inbound

        GigabitEthernet1/0/2  Inbound

    Monitor port: GigabitEthernet1/0/3

# Ping 56.56.56.6 from a host at 10.1.1.2 in the R&D department. Capture the packets on the data monitoring device, as shown in Figure 2.

Figure 2 Packets captured by Wireshark

 

The captured packets show that the local port mirroring function takes effect. The data monitoring device can successfully monitor the specified traffic.

Configuration files

#

 mirroring-group 1 local

#

interface GigabitEthernet1/0/1

 ip address 10.1.1.1 255.255.255.0

 mirroring-group 1 mirroring-port inbound

#

interface GigabitEthernet1/0/2

 ip address 12.1.1.1 255.255.255.0

 mirroring-group 1 mirroring-port inbound

#

interface GigabitEthernet1/0/3

 port link-mode bridge

 undo stp enable

 mirroring-group 1 monitor-port

#

interface GigabitEthernet1/0/4

 port link-mode route

 ip address 56.56.56.5 255.255.255.0

#

Related documentation

·     Network Management and Monitoring Configuration Guide in H3C MSR1000[2600][3600] Routers Configuration Guides (V9)

·     Network Management and Monitoring Command Reference in H3C MSR1000[2600][3600] Routers Command References (V9)