Operation Manual – Port Mirroring
H3C S9500 Series Routing Switches
Chapter 1 Port Mirroring Configuration
1-8
To do…
Use the command…
Remarks
Return to system view
quit
—
Create a remote
destination port mirroring
group
mirroring-group groupid
remote-destination
Required
Assign the VLAN you
created to the port
mirroring group
mirroring-group groupid
remote-probe vlan
rprobe-vlan-id
Required
In system
view
mirroring-group
groupid
monitor-port
monitor-port-id
interface
interface-type
interface-number
[
mirroring-group groupid
]
monitor-port
Assign a
port to the
port
mirroring
group as
the
monitor
port
In Ethernet
interface
view
quit
Required
Use either approach.
In Ethernet interface
view, if no destination
mirroring group is
specified, group 1 is
used by default.
Enter the interface view of
the monitor port
interface interface-type
interface-number
—
If the port is
an access
port
port access vlan
rprobe-vlan-id
If the port is a
trunk port
port trunk permit vlan
rprobe-vlan-id
Assign the
monitor
port to the
remote
probe
VLAN
If the port is a
hybrid port
port hybrid
vlan
rprobe-vlan-id
{
tagged
|
untagged
}
Required
Use one of the
commands
depending on the link
type of the monitor
port.
Note:
z
After you configure a port as a monitor port, you are recommended not to use it for
any other purposes. This is to ensure that the data monitoring device receives only
the mirrored traffic rather than a mix of mirrored traffic and normally forwarded
traffic.
z
Only existing static VLANs can be configured as remote probe VLANs. To remove
the VLAN operating as a remote probe VLAN, you need to remove the VLAN from
the remote mirroring group first with the
undo mirroring-group remote-probe vlan
command. Removing the probe VLAN can invalidate the remote source mirroring
group.
z
You are recommended to use a remote probe VLAN for port mirroring only.
z
To ensure the functionality of remote port mirroring, disable MAC address learning
in the remote probe VLAN on the source, intermediate, and destination devices.