Dell S4048-ON, Configuration Manual

Page: 656 / 1039

2
monitor session <id> type erpm Specify a session ID and ERPM as the type of
monitoring session, and enter Monitoring-Session
configuration mode. The session number needs to be
unique and not already defined.
3 source { interface | range } direction {rx | tx | both}
Specify the source port or range of ports. Specify
the ingress (rx), egress (tx), or both ingress and
egress traffic to be monitored. You can enter mulitple
source statements in an ERPM monitoring session
4
erpm source-ip <id> dest-ip <id> Specify the source IP address and the destination IP
address to which encapsulated mirrored traffic is
sent.
5
<no> flow-based enable ERPM to be performed on a flow-by-flow basis or if
you configure a VLAN source interface. Enter no
flow-based disable to disable flow-based ERPM.
6
no disable Enter the no disable command to activate the ERPM
session..
The following example shows a sample ERPM configuration .
Dell(conf)#monitor session 0 type erpm
Dell(conf-mon-sess-0)#source tengigabitethernet 1/9 direction rx
Dell(conf-mon-sess-0)#source port-channel 1 direction tx
Dell(conf-mon-sess-0)#erpm source-ip 1.1.1.1 dest-ip 7.1.1.2
Dell(conf-mon-sess-0)#no disable
Dell(conf)#monitor session 1 type erpm
Dell(conf-mon-sess-1)#source vlan 11 direction rx
Dell(conf-mon-sess-1)#erpm source-ip 5.1.1.1 dest-ip 3.1.1.2
Dell(conf-mon-sess-1)#flow-based enable
Dell(conf-mon-sess-1)#no disable
Dell# show monitor session
SessID Source Destination Dir Mode Source IP Dest IP
------ ------ ----------- --- ---- --------- --------
0 Te 1/9 remote-ip rx Port 1.1.1.1 7.1.1.2
0 Po 1 remote-ip tx Port 1.1.1.1 7.1.1.2
1 Vl 11 remote-ip rx Flow 5.1.1.1 3.1.1.2
The next example shows the configuration of an ERPM session in which VLAN 11 is monitored as the source interface and a MAC
ACL filters the monitored ingress traffic.
Dell(conf)#mac access-list standard flow
Dell(config-std-macl)#seq 5 permit 00:00:0a:00:00:0b count monitor
Dell#show running-config interface vlan 11
!
interface Vlan 11
no ip address
tagged TenGigabitEthernet 1/1-3
mac access-group flow in <<<<<<<<<<<<<< Only ingress packets are supported for mirroring
shutdown
Dell#
656
Port Monitoring