90
NOTE:
•
A mirroring group contains only one monitor port.
•
To make sure that the mirroring function works properly, do not assign the monitor port to a source
VLAN, or enable the spanning tree feature on the monitor port.
•
H3C recommends you use a monitor port for port mirroring only. This is to make sure that the data
monitoring device receives and analyzes only the mirrored traffic rather than a mix of mirrored traffic
and normally forwarded traffic.
•
You cannot configure the monitor port in a mirroring group as a port in a RRPP ring.
Using the remote probe VLAN to enable local mirroring to
support multiple monitor ports
In typical local port mirroring configuration, you can configure only one monitor port in a local mirroring
group. As a result, you cannot monitor traffic of a local device on multiple data monitoring devices. To
do that, you can take advantage of the remote probe VLAN used in Layer 2 remote mirroring.
In Layer 2 remote port mirroring, a remote probe VLAN is configured, and the mirrored packets are
broadcast within the remote probe VLAN. By connecting multiple data monitoring devices to the member
ports of the remote probe VLAN, you can monitor the traffic of the local device on multiple data
monitoring devices.
Configure this feature in the following steps:
1.
Configure a remote source mirroring group on the local device
2.
Configure the monitored ports on the device as source ports of this mirroring group
3.
Configure a remote probe VLAN for this mirroring group
4.
Assign the ports connecting the data monitoring devices to the remote probe VLAN
In this way, when packets mirrored on the monitored ports are broadcast in the remote probe VLAN, they
will be sent out the ports connecting the data monitoring devices, and all the data monitoring devices
can thus receive these mirrored packets.
Configuration procedure
Follow these steps to configure local port mirroring with multiple monitor ports:
To do…
Use the command
Remarks
Enter system view
system-view
—
Create a remote source
mirroring group
mirroring-group
group-id
remote-source
Required
By default, no mirroring group exists
on a device.
In system view
mirroring-group
group-id
mirroring-port
mirroring-port-list
{
both
|
inbound
|
outbound
}
interface
interface-type
interface-number
Configure
source
ports for the
remote
source
mirroring
group
In interface
view
[
mirroring-group
group-id
]
mirroring-port
{
both
|
inbound
|
outbound
}
Use either command
By default, no source port is
configured for a mirroring group.