HP ProCurve 1600M, Management And Configuration Manual

Page: 535 / 690

Monitoring and Analyzing Switch Operation
Traffic Mirroring
• 4 local mirroring sessions originating on the same switch as the
mirrored traffic
■ A switch can be the originator (source) of four mirroring sessions, with
each session mirroring traffic associated with a list composed of ports
and/or static trunks, a mesh, or a VLAN interface.
■ Options for mirroring criteria include:
• Direction-Based mirroring for selecting traffic that is either entering
or leaving the switch. In cases where you want to monitor traffic in
only one direction, this improves utilization by reducing the amount
of traffic sent to the monitoring destination.
• Mirroring of all traffic entering or leaving the switch on the selected
interface(s).
• Optional ACL (Access Control List) criteria to enable selective mir­
roring of individual IP traffic types entering the switch, including IP
and specific source and/or destination criteria. This enables you to
limit a given mirroring session to specific inbound traffic on a given
interface (instead of all inbound traffic on the interface).
Terminology
Destination : For a given, local mirroring session on a switch, this is the exit
port configured on that switch. For a given, remote mirroring session, this
is the remote switch supporting the exit port you want to use. The
destination for a given remote mirroring session should always be config­
ured before the source is configured. (Refer to “Mirrored Traffic Destina­
tions” on page B-27.)
Directional-Based Mirroring: On a given interface, using the direction of
traffic movement (entering or leaving the switch, or both) as criteria for
selecting which traffic to mirror.
Entry Port: On a remote mirroring destination switch, the port through
which mirrored traffic is received from remote sources. (Does not apply
to local mirroring.)
Exit Port: On the exit switch, the port to which a traffic analyzer or IDS is
connected to receive mirrored traffic. For local mirroring, an exit port can
be any available port to which a traffic analyzer or IDS is connected. For
remote mirroring, the entry port and the exit port on the destination
switch for a given session must belong to the same VLAN.
B-25