beautypg.com

Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide User Manual

Page 242

background image

ACL 101 is mirrored to port 4/3 even though a destination port has not explicitly been defined for traffic
from port 1/1.

device(config)#interface ethernet 1/1

device(config-if-e10000-1/1)#ip access-group 101 in

device(config)#interface ethernet 1/3

device(config-if-e10000-1/3)#ACL-mirror-port ethernet 4/3

NOTE
If a destination mirror port is not configured for any ports within the port region where the port-mirroring
ACL is configured, the ACL does not mirror the traffic but the ACL is applied to traffic on the port.

Specifying the destination mirror port for trunk ports

You can mirror the traffic that has been selected by ACL-based inbound mirroring from a trunk by
configuring a destination port for the primary port within the trunk configuration, as shown in the
following example.

device(config)#trunk ethernet 1/1 to 1/4

device(config)#interface ethernet 1/1

device(config-if-e10000-1/1)#ACL-mirror-port ethernet 1/8

Using this configuration, all trunk traffic is mirrored to port 1/8.

Limitations when configuring ACL-based mirroring with trunks

The config-trunk-ind command cannot operate with ACL-based mirroring:

• If a trunk is configured with the config-trunk-ind command, ACL-based mirroring will not be

allowed.

• If the config-trunk-ind command is added to a trunk, any ports that are configured for ACL-based

mirroring will have monitoring removed and the following message is displayed.

Trunk port monitoring, if any, has been removed.

If an individual port is configured for ACL-based mirroring, you cannot add it to a trunk. If you try to add
a port that is configured for ACL-based mirroring to a trunk, the following message appears.

Note - ACL-mirror-port configuration is removed from port 2 in new trunk.

NOTE
If you want to add a port configured for ACL-based mirroring to a trunk, you must first remove the
ACL-mirror-port command from the port configuration. You can then add the port to a trunk that can
then be configured for ACL-based trunk mirroring.

Behavior of ACL-based mirroring when deleting trunks

If you delete a trunk that has ACL-based mirroring configured, the ACL-based mirroring configuration
is configured on the individual ports that made up the trunk.

For example, if a trunk is configured as shown in the following example and is then deleted from the
configuration as shown, each of the ports that previously was contained in the trunk is configured for
ACL-based mirroring.

device(config)#lag test static id 111

Specifying the destination mirror port for trunk ports

242

FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide

53-1003086-04