
B-38
Monitoring and Analyzing Switch Operation
Traffic Mirroring
General Steps for Using the CLI To Configure Mirroring
C a u t i o n
Configuring a switch with the destination and traffic selection criteria for a
given mirroring session causes the switch to immediately begin mirroring
traffic to that destination. In the case of remote mirroring, which uses IPv4
encapsulation, if the intended exit switch is not already configured as the
destination for that session, its performance may be adversely affected by the
stream of mirrored traffic. For this reason, ProCurve strongly recommends
that you configure the exit switch for a remote mirroring session before
configuring the source switch for that same session.
Remote Mirroring (Mirroring Source and Destination on Different
Switches).
1.
Determine the session IP addressing, UDP port number, and destination
(exit) port number for the remote session:
–
source VLAN or subnet IP address on the source switch
–
destination VLAN or subnet IP address on the destination switch
–
random UDP port number for the session (7933-65535)
–
exit port on destination switch (Must belong to the same VLAN
as the port through which the remotely mirrored traffic for the
session enters the switch.)
(For a given session, the IP addressing and UDP port number selected in
this step must be used on both the source and destination switches.)
2.
On the mirroring
destination
(exit) switch, use the
mirror endpoint
com-
mand with the information from step 1 to configure a mirroring session
to a specific exit port.
3.
Determine the session identity (1 - 4) and (optional) alphanumeric name
to use on the mirroring
source
switch.
4.
Determine the traffic to be filtered by any of the following selection
methods and the appropriate configuration level (VLAN, port, mesh,
trunk, global):
–
Direction: inbound, outbound, or both
–
inbound ACL (IP addresses)
–
MAC addresses: source and/or destination
5.
On the mirroring
source
switch:
a.
Use the
mirror
command with the selected session identity (1 - 4) and
the IP addresses and UDP port number from step 1, to configure a
mirroring session.
3500-5400-6200-8200-MCG-Jan08-K_13_01.book Page 38 Monday, January 28, 2008 10:04 AM