Table of Contents

Related Documents

16-Mirroring commands

Title	Size	Download
16-Mirroring commands	171.28 KB

Port mirroring commands

display mirroring-group

Use display mirroring-group to display mirroring group information.

Syntax

display mirroring-group { group-id | all | local | remote-destination | remote-source }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

group-id: Specifies a mirroring group by its number. The value range for this argument is 1 to 128.

all: Specifies all mirroring groups.

local: Specifies local mirroring groups.

remote-destination: Specifies remote destination groups.

remote-source: Specifies remote source groups.

Usage guidelines

Mirroring group information includes the type, status, and content of a mirroring group. It is sorted by mirroring group number.

Examples

# Display information about all mirroring groups.

<Sysname> display mirroring-group all

Mirroring group 1:

Type: Local

Status: Active

Mirroring port: Ten-GigabitEthernet3/0/1 Inbound

Monitor port: Ten-GigabitEthernet3/0/2 pop-label

Table 1 Command output

Field	Description
Mirroring group	Number of the mirroring group.
Type	Type of the mirroring group: · Local. · Remote source. · Remote destination.
Status	Status of the mirroring group: · Active—The mirroring group has taken effect. · Incomplete—The mirroring group configuration is not complete and does not take effect.
Mirroring port	Source port, which might be followed by the following keywords: · Both—Mirrors both the received and the sent packets of the interface. · Inbound—Mirrors the received packets of the interface. · Outbound—Mirrors the sent packets of the interface.
Mirroring CPU	Source CPU.
Monitor port	Destination port and the action taken on mirrored packets. pop-label means to pop out all MPLS labels of mirrored packets.

‌

Field	Description
Direction	Direction in which CAR is performed for mirrored packets by port mirroring.
CIR	Committed information rate in kbps.
CBS	Committed burst size (depth of the token bucket for accommodating burst traffic) in bytes.

display mirroring-group car interface

Use display mirroring-group car interface to display the CAR information about port mirroring on interfaces.

Syntax

display mirroring-group car interface [ interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, this command displays the CAR configuration and statistics for all interfaces.

Examples

# Display the CAR information about port mirroring on interface Ten-GigabitEthernet 3/0/1.

<Sysname>display mirroring-group car interface ten-gigabitethernet 3/0/1

Port Direction CIR(kbps) CBS(Bytes)

XGE3/0/1 inbound 10000000 16384

XGE3/0/1 outbound 10000000 16384

Related commands

mirroring-group car

mirroring-group

Use mirroring-group to create a mirroring group.

Use undo mirroring-group to delete mirroring groups.

Syntax

mirroring-group group-id { local | remote-destination | remote-source }

undo mirroring-group { group-id | all | local | remote-destination | remote-source }

Default

No mirroring groups exist.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number in the range of 1 to 128.

local: Specifies local mirroring groups.

remote-destination: Specifies remote destination groups.

remote-source: Specifies remote source groups.

all: Specifies all mirroring groups.

Examples

# Create local mirroring group 1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

mirroring-group car (interface view)

Use mirroring-group car to configure CAR for port mirroring on an interface.

Use undo mirroring-group car to restore the default on an interface.

Syntax

mirroring-group car { inbound | outbound } cir committed-information-rate [ cbs committed-burst-size ]

undo mirroring-group car { inbound | outbound }

Default

CAR is not configured for port mirroring on an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

inbound: Specifies packets received by mirroring sources.

outbound: Specifies packets sent by mirroring sources.

cir committed-information-rate: Specifies the committed information rate in kbps. The value range is 8 to 1000000.

cbs committed-burst-size: Specifies the committed burst size in bytes. The value range is 512 to 256000000.

Usage guidelines

In the port mirroring scenario, the monitor port might monitor the traffic of multiple mirroring sources at the same time. If the speed of packets received or sent by the mirroring sources are too high, the monitor port might be congested and drop packets. In this case, you can configure this feature on the device where the mirroring sources reside. This feature rate-limits mirrored packets and avoids congestion on the port mirroring network.

You can configure CAR for port mirroring in both system view and interface view. The configuration in interface view takes priority. If the configuration in interface view uses the default settings, the configuration in system view will be used.

Examples

# Configure the CIR as 1000 kbps for the packets received on mirroring source interface Ten-GigabitEthernet 3/0/1 of port mirroring.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mirroring-group car inbound cir 1000

Related commands

display mirroring-group car interface

mirroring-group car (system view)

Use mirroring-group car to configure CAR for port mirroring.

Use undo mirroring-group car to restore the default.

Syntax

mirroring-group car { inbound | outbound } cir committed-information-rate [ cbs committed-burst-size ]

undo mirroring-group car { inbound | outbound }

Default

The CIR is 10000000 kbps and the CBS is 16384 bytes for the packets received and sent by mirroring sources of port mirroring.

Views

System view

Predefined user roles

network-admin

Parameters

inbound: Specifies packets received by mirroring sources.

outbound: Specifies packets sent by mirroring sources.

cir committed-information-rate: Specifies the committed information rate in the range of 1000000 to 100000000 kbps.

cbs committed-burst-size: Specifies the committed burst size in the range of 1000 to 2000000 bytes.

Usage guidelines

Examples

# Set the CIR to 1000000 kbps and CBS to 16385 bytes for the packets received by mirroring sources of port mirroring.

<Sysname> system

[Sysname] mirroring-group car inbound cir 1000000 cbs 16385

Related commands

display mirroring-group car

mirroring-group mirroring-cpu

Use mirroring-group mirroring-cpu to configure source CPUs for a mirroring group.

Use undo mirroring-group mirroring-cpu to remove source CPUs from a mirroring group.

Syntax

mirroring-group group-id mirroring-cpu slot slot-number-list { both | inbound | outbound }

undo mirroring-group group-id mirroring-cpu slot slot-number-list

Default

No source CPU is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 128.

slot slot-number-list: Specifies a space-separated list of up to eight slot number items. An item specifies a card by its slot number or specifies a range of cards in the form of start-slot-number to end-slot-number. The end slot number must be equal to or greater than the start slot number.

both: Mirrors both received and sent packets.

inbound: Mirrors only sent packets.

outbound: Mirrors only received packets.

Usage guidelines

You can configure source CPUs only for local mirroring groups and remote source groups.

Examples

# Create local mirroring group 1 to monitor the bidirectional traffic of the CPU on the specified slot.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] mirroring-group 1 mirroring-cpu slot 10 both

Related commands

mirroring-group

mirroring-group mirroring-port (interface view)

Use mirroring-group mirroring-port to configure a port as a source port for a mirroring group.

Use undo mirroring-group mirroring-port to restore the default.

Syntax

mirroring-group group-id mirroring-port { both | inbound | outbound }

undo mirroring-group group-id mirroring-port

Default

A port does not act as a source port for any mirroring groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 128.

both: Mirrors both received and sent packets.

inbound: Mirrors only received packets.

outbound: Mirrors only sent packets.

Usage guidelines

You can configure source ports only for local mirroring groups and remote source groups.

When a mirroring source port is a Layer 2 or Layer 3 aggregate interface or aggregation member port, you cannot configure a Layer 2 or Layer 3 aggregate interface as the monitor port. Also, when the monitor port is a Layer 2 or Layer 3 aggregate interface, you cannot configure a Layer 2 or Layer 3 aggregate interface or aggregation member port as a mirroring source port.

Do not assign a source port of a mirroring group to the remote probe VLAN of the mirroring group.

A source port cannot be used as a reflector port, monitor port, or egress port.

Examples

# Create local mirroring group 1 to monitor the bidirectional traffic of Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mirroring-group 1 mirroring-port both

# Create remote source group 2 to monitor the bidirectional traffic of Ten-GigabitEthernet 3/0/2.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] interface ten-gigabitethernet 3/0/2

[Sysname-Ten-GigabitEthernet3/0/2] mirroring-group 2 mirroring-port both

Related commands

mirroring-group

mirroring-group mirroring-port (system view)

Use mirroring-group mirroring-port to configure source ports for a mirroring group.

Use undo mirroring-group mirroring-port to remove source ports from a mirroring group.

Syntax

mirroring-group group-id mirroring-port interface-list { both | inbound | outbound }

undo mirroring-group group-id mirroring-port interface-list

Default

No source port is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 128.

interface-list: Specifies a space-separated list of up to eight port items. Each item specifies a single port or a port range in the form of interface-type interface-number1 to interface-type interface-number2. The specified interfaces must be of the same type and on the same slot. The value for the interface-number2 argument must be equal to or greater than the value for the interface-number1 argument.

both: Mirrors both received and sent packets.

inbound: Mirrors only received packets.

outbound: Mirrors only sent packets.

Usage guidelines

You can configure source ports only for local mirroring groups and remote source groups.

Do not assign a source port of a mirroring group to the remote probe VLAN of the mirroring group.

A source port cannot be used as a reflector port, monitor port, or egress port.

Examples

# Create local mirroring group 1 to monitor the bidirectional traffic of Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] mirroring-group 1 mirroring-port ten-gigabitethernet 3/0/1 both

# Create remote source group 2 to monitor the bidirectional traffic of Ten-GigabitEthernet 3/0/2.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] mirroring-group 2 mirroring-port ten-gigabitethernet 3/0/2 both

Related commands

mirroring-group

mirroring-group monitor-egress

Use mirroring-group monitor-egress to configure the egress port for a remote source group.

Use undo mirroring-group monitor-egress to restore the default.

Syntax

In system view:

mirroring-group group-id monitor-egress interface-type interface-number

undo mirroring-group group-id monitor-egress interface-type interface-number

In interface view:

mirroring-group group-id monitor-egress

undo mirroring-group group-id monitor-egress

Default

No egress port is configured for a remote source group.

Views

System view

Interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 128.

interface-type interface-number: Specifies a port by its type and number.

Usage guidelines

You can configure egress ports only for remote source groups.

For port mirroring to work correctly, disable the following features on the egress port of a mirroring group:

· Spanning tree.

· IGMP snooping.

· Static ARP.

· MAC address learning.

The egress, monitor, or reflector port of an existing mirroring group cannot be configured as an egress port.

The member port of an aggregate interface cannot be configured as an egress port.

Examples

# Create remote source group 1. Configure Ten-GigabitEthernet 3/0/1 as its egress port in system view.

<Sysname> system-view

[Sysname] mirroring-group 1 remote-source

[Sysname] mirroring-group 1 monitor-egress ten-gigabitethernet 3/0/1

# Create remote source group 2. Configure Ten-GigabitEthernet 3/0/2 as its egress port in interface view.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-source

[Sysname] interface ten-gigabitethernet 3/0/2

[Sysname-Ten-GigabitEthernet3/0/2] mirroring-group 2 monitor-egress

Related commands

mirroring-group

mirroring-group monitor-port (interface view)

Use mirroring-group monitor-port to configure a port as a monitor port for a mirroring group.

Use undo mirroring-group monitor-port to restore the default.

Syntax

mirroring-group group-id monitor-port [ pop-label ]

undo mirroring-group group-id monitor-port

Default

A port does not act as a monitor port for any mirroring groups.

Views

Interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 128.

pop-label: Pops out all MPLS labels of packets mirrored to an interface. If you do not specify this keyword, the MPLS labels of mirrored packets are not popped out. Support for this keyword depends on the device model.

Usage guidelines

You can configure monitor ports only for local mirroring groups and remote destination groups.

Follow these guidelines when you configure the MPLS label removal feature by using the pop-label keyword:

· You can specify the pop-label keyword only when specifying a monitor port for a local mirroring group.

· You can also enable a flow mirroring destination interface to remove MPLS labels for mirrored packets by specifying the pop-label keyword in the mirror-to interface command. However, the flow mirroring destination interface removes MPLS labels for mirrored packets whether or not the pop-label keyword is specified if the following conditions are met:

¡ The QoS policy that uses the traffic behavior where the flow mirroring destination interface is specified is applied to the outbound direction of a port.

¡ The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡ The pop-label keyword is specified for the monitor port of the local mirroring group.

· MPLS labels are removed for mirrored packets sent to destinations specified in a QoS policy for NetStream flow mirroring if the following conditions are met:

¡ The QoS policy is applied to the outbound direction of a port.

¡ The outbound traffic of the port is also a mirroring source of a local mirroring group.

¡ The pop-label keyword is specified for the monitor port of the local mirroring group.

· To change the status of the MPLS label removal feature for a monitor port, first remove the monitor port configuration, and then reconfigure the monitor port.

Do not enable the spanning tree feature on the monitor port of a mirroring group.

For a Layer 2 or Layer 3 aggregate interface configured as the monitor port of a mirroring group, do not configure its member ports as source ports of the mirroring group.

Use a monitor port only for port mirroring, so the data monitoring device receives and analyzes only the mirrored traffic.

The member port of an existing mirroring group cannot be configured as a monitor port.

The source port of an existing mirroring group cannot be configured as a monitor port.

The member port of an aggregate interface cannot be configured as a monitor port.

The member port of an aggregate interface cannot be configured as a monitor port for a mirroring group.

When the monitor port is a Layer 2 or Layer 3 aggregate interface, you cannot configure a Layer 2 or Layer 3 aggregate interface or aggregation member port as a mirroring source port. When a mirroring source port is a Layer 2 or Layer 3 aggregate interface or aggregation member port, you cannot configure a Layer 2 or Layer 3 aggregate interface as the monitor port.

When you configure a monitor port for a local mirroring group, this command is supported only on Layer 2/Layer 3 physical interfaces, Layer 2/Layer 3 aggregate interfaces, and GRE tunnel interfaces.

Examples

# Create local mirroring group 1 and configure Ten-GigabitEthernet 3/0/1 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 1 local

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] mirroring-group 1 monitor-port

# Create remote destination group 2 and configure Ten-GigabitEthernet 3/0/2 as its monitor port.

<Sysname> system-view

[Sysname] mirroring-group 2 remote-destination

[Sysname] interface ten-gigabitethernet 3/0/2

[Sysname-Ten-GigabitEthernet3/0/2] mirroring-group 2 monitor-port

Related commands

mirroring-group

mirroring-group monitor-port (system view)

Use mirroring-group monitor-port to configure the monitor ports for a mirroring group.

Use undo mirroring-group monitor-port to remove the monitor ports from a mirroring group.

Syntax

mirroring-group group-id monitor-port interface-list [ pop-label ]

undo mirroring-group group-id monitor-port interface-list

Default

No monitor port is configured for a mirroring group.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies a mirroring group by its number. The specified mirroring group must already exist. The value range for this argument is 1 to 128.

interface-list: Specifies a space-separated list of up to eight port items. Each item specifies a single port or a port range in the form of interface-type interface-number1 to interface-type interface-number2. The value for the interface-number2 argument must be equal to or greater than the value for the interface-number1 argument.You can configure multiple monitor ports only for a mirroring group with an ID in the range 1 to 64.