
B-46
Monitoring and Analyzing Switch Operation
Traffic Mirroring
3. Configure the Mirroring Session on the Source Switch
For local mirroring, only a session number and a destination port number are
needed. (You also have the option of associating a name with the session
number.) Refer to “Configuring Mirroring with a Destination on the Local
(Source) Switch” below.
If the mirroring destination is on a remote switch instead of the local (source)
switch, then the traffic source IP address, the mirroring destination IP address,
and a unique (randomly selected) UDP port number are required for the
mirroring session. (Refer to page B-47.)
Configuring Mirroring with a Destination on the Local (Source)
Switch.
For a given mirroring session on a source switch, use this command
to specify the exit port to use on the same switch. To create the mirroring
session itself, refer to the options under “1. Determine the Mirroring Session
Identity and Destination” on page B-44.
< port-# >:
Exit port for mirrored traffic from the specified
session. This is the port to which a traffic analyzer or IDS
should be connected.
Syntax:
mirror < 1 - 4 > port <
port-#
> [name <
name-str
>]
no mirror < 1- 4 >
This command assigns the exit port to use for the specified
mirroring session, and must be executed from the global
configuration level.
The
no
form of the command removes the mirroring session
and any mirroring source previously assigned to that
session. To preserve the session while deleting a mirroring
source assigned to it, refer to the
no
command descriptions
under “4. Configure Mirroring Sources” on page B-49.
< 1 - 4 >
:
Identifies the mirroring session created by this
command. (Multiple sessions on the switch can use the
same exit port.)
name < name-str > :
Optional alphanumeric name string used
to identify the session. Can be up to 15 characters in length.
Syntax:
mirror endpoint ip <
src-ip
> <
src-udp-port
> <
dst-ip
> <
port-#
>
no mirror endpoint ip <
src-ip
> <
src-udp-port
> <
dst-ip
>
3500-5400-6200-8200-MCG-Jan08-K_13_01.book Page 46 Monday, January 28, 2008 10:04 AM