ProCurve 3500yl Series, Руководство по управлению и настройке

Страница: 557 / 732

B-27
Monitoring and Analyzing Switch Operation
Traffic Mirroring
• 4 local mirroring sessions originating on the same switch as the
mirrored traffic
■ A switch can be the originator (source) of four mirroring sessions, with
each session mirroring traffic associated with a list composed of ports
and/or static trunks, a mesh, or a VLAN interface.
■ Options for mirroring criteria include:
• Direction-Based mirroring for selecting traffic that is either entering
or leaving the switch. In cases where you want to monitor traffic in
only one direction, this improves utilization by reducing the amount
of traffic sent to the monitoring destination.
• Mirroring of all traffic entering or leaving the switch on the selected
interface(s).
• ACL (Access Control List) criteria to enable selective mirroring of
individual IP traffic types entering the switch, including IP and spe-
cific source and/or destination criteria. This enables you to limit a
given mirroring session to specific inbound traffic on a given interface
(instead of all inbound traffic on the interface).
• Source and/or destination MAC address used as mirroring criteria to
select packets in inbound and/or outbound traffic on specified inter-
faces.
Terminology
Destination : For a given, local mirroring session on a switch, this is the exit
port configured on that switch. For a given, remote mirroring session, this
is the remote switch supporting the exit port you want to use. The
destination for a given remote mirroring session should always be config-
ured before the source is configured. (Refer to “Mirrored Traffic Destina-
tions” on page B-29.)
Directional-Based Mirroring: On a given interface, using the direction of
traffic movement (entering or leaving the switch, or both) as criteria for
selecting which traffic to mirror.
Entry Port: On a remote mirroring destination switch, the port through
which mirrored traffic is received from remote sources. (Does not apply
to local mirroring.)
Exit Port: On the exit switch, the port to which a traffic analyzer or IDS is
connected to receive mirrored traffic. For local mirroring, an exit port can
be any available port to which a traffic analyzer or IDS is connected. For
remote mirroring, the entry port and the exit port on the destination
switch for a given session must belong to the same VLAN.
3500-5400-6200-8200-MCG-Jan08-K_13_01.book Page 27 Monday, January 28, 2008 10:04 AM