H3C H3C S5100-SI, Operation Manual, Page: 459 / 830

1-12
[Sysname] mirroring-group 1 monitor-port GigabitEthernet 1/0/3
# Display configuration information about local mirroring group 1.
[Sysname] display mirroring-group 1
mirroring-group 1:
type: local
status: active
mirroring port:
GigabitEthernet1/0/1 both
GigabitEthernet1/0/2 both
mirroring mac:
mirroring vlan:
monitor port: GigabitEthernet1/0/3
After the configurations, you can monitor all packets received on and sent from the R&D
department and the marketing department on the data detection device.
Remote Port Mirroring Configuration Example
Network requirements
The departments of a company connect to each other through S5100 Ethernet switches:
z
Switch A, Switch B, and Switch C are S5100-EI series switches.
z
Department 1 is connected to GigabitEthernet 1/0/1 of Switch A.
z
Department 2 is connected to GigabitEthernet 1/0/2 of Switch A.
z
GigabitEthernet 1/0/3 of Switch A connects to GigabitEthernet 1/0/1 of Switch B.
z
GigabitEthernet 1/0/2 of Switch B connects to GigabitEthernet 1/0/1 of Switch C.
z
The data detection device is connected to GigabitEthernet 1/0/2 of Switch C.
The administrator wants to monitor the packets sent from Department 1 and 2 through the
data detection device.
Use the remote port mirroring function to meet the requirement. Perform the following
configurations:
z
Use Switch A as the source switch, Switch B as the intermediate switch, and Switch C
as the destination switch.
z
On Switch A, create a remote source mirroring group, configure VLAN 10 as the
remote-probe VLAN, ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 as the
source ports, and port GigabitEthernet 1/0/4 as the reflector port.
z
On Switch B, configure VLAN 10 as the remote-probe VLAN.
z
Configure GigabitEthernet 1/0/3 of Switch A, GigabitEthernet 1/0/1 and
GigabitEthernet 1/0/2 of Switch B, and GigabitEthernet 1/0/1 of Switch C as trunk ports,
allowing packets of VLAN 10 to pass.
z
On Switch C, create a remote destination mirroring group, configure VLAN 10 as the
remote-probe VLAN, and configure GigabitEthernet 1/0/2 connected with the data
detection device as the destination port.