beautypg.com

Acl-based inbound mirroring, Devices – Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide User Manual

Page 240

background image

Configuring mirroring for ports on the same stack member in a traditional stack example

In this example, the mirror ports are assigned to different monitor ports.

device(config)#mirror-port ethernet 1/1/24

device(config)#mirror-port ethernet 2/1/24

device(config)#mirror-port ethernet 3/1/24

device(config)#mirror-port ethernet 4/1/24

device(config)#interface ethernet 1/1/1

device(config-if-e1000-1/1/1)#monitor ethernet 1/1/24 both

device(config)#interface ethernet 2/1/1

device(config-if-e1000-2/1/1)#monitor ethernet 2/1/24 both

device(config)#interface ethernet 4/1/1

device(config-if-e1000-4/1/1)#monitor ethernet 4/1/24 both

ACL-based inbound mirroring

This section describes ACL-based inbound mirroring for FastIron devices.

Creating an ACL-based inbound mirror clause for FCX and ICX devices

The following example shows how to configure an ACL-based inbound mirror clause.

1. Configure the mirror port.

device(config)#mirror-port ethernet 1/1/2

2. Configure the ACL-based inbound mirror clause.

device(config)#access-list 101 permit ip any any mirror

3. Apply the ACL-based inbound clause to the monitor port.

device(config)#interface e 1/1/5

device(config-if-e1000-1/1/5)#ip access-group 101 in

4. Create the ACL mirror port.

device(config-if-e1000-1/1/5)#acl-mirror-port ethernet 1/1/2

To display ACL mirror settings, enter the show access-list all command.

device#show access-list all

Extended IP access list 101

permit ip any any mirror

ACL-based inbound mirror clauses for FastIron X Series devices

The mirror parameter in an ACL clause causes the system to direct traffic that meets the clause to be
sent to a mirror port. Consider the following example.

device(config)#access-list 101 permit ip any any mirror

The mirror parameter directs selected traffic to the mirrored port. Traffic mirroring is only supported on
Layer 3 ACLs for FastIron X Series devices.

You can select traffic to be mirrored using a permit or deny clause on ports on the following interface
modules:

• SX-FI-24GPP
• SX-FI-24HF

Configuring mirroring for ports on the same stack member in a traditional stack example

240

FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide

53-1003086-04