HPE FlexNetwork 10500 SERIES, Configuration Manual

Page: 230 / 407

219
Figure 62 Layer 2 remote port mirroring implementation through the egress port
method
In the reflector port method, the reflector port broadcasts mirrored packets in the remote probe
VLAN. By assigning a non-source port on the source device to the remote probe VLAN, you can
use the reflector port method to implement local port mirroring. The egress port method cannot
implement local port mirroring in this way.
To ensure Layer 2 forwarding of the mirrored packets, assign the ports connecting intermediate
devices to the source and destination devices to the remote probe VLAN.
To monitor the bidirectional traffic of a source port, disable MAC address learning for the remote
probe VLAN on the source, intermediate, and destination devices. For more information about
MAC address learning, see
Layer 2—LAN Switching Configuration Guide .
•
Layer 3 remote port mirroring —The mirroring sources and the mirroring destination are
separated by IP networks.
Layer 3 remote port mirroring is implemented through creating a local mirroring group on both
the source device and the destination device. For example, in a network as shown in
Figure 63 ,
Layer 3 remote port mirroring works in the following flow:
a. The source device sends one copy of a packet received on the source port GigabitEthernet
1/0/1 to the tunnel interface.
The tunnel interface acts as the monitor port in the local mirroring group created on the
source device.
b. The tunnel interface on the source device forwards the mirrored packet to the tunnel
interface on the destination device through the GRE tunnel.
c. The destination device receives the mirrored packet from the physical interface of the tunnel
interface.
The tunnel interface acts as the source port in the local mirroring group created on the
destination device.
d. The physical interface of the tunnel interface sends one copy of the packet to the monitor
port GigabitEthernet 1/0/2.
e. GigabitEthernet 1/0/2 forwards the packet to the data monitoring device.
For more information about GRE tunnels and tunnel interfaces, see Layer 3—IP Services
Configuration Guide .
Source
device
Intermediate
device
Destination
device
GE1/0/1
Remote
probe VLAN
Data monitoring
device
Host
Remote
probe VLAN
GE1/0/2 GE1/0/1 GE1/0/2 GE1/0/1
GE1/0/2
GE1/0/1
Mirroring process
in the device
GE1/0/2
Source port
Monitor port
Original packets
Common port Mirrored packets
Egress port