beautypg.com

Mac address filter-based mirroring, Configuring mac address filter-based mirroring, Defining a mirror port – Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide User Manual

Page 244

background image

MAC address filter-based mirroring

NOTE
The MAC address filter-based mirroring feature is not supported on FastIron X Series devices.

This feature allows traffic entering an ingress port to be monitored from a mirror port connected to a
data analyzer, based on specific source and destination MAC addresses. This feature supports
mirroring of inbound traffic only. Outbound mirroring is not supported.

MAC-filter-based mirroring allows a user to specify a particular stream of data for mirroring using a
filter. This eliminates the need to analyze all incoming data to the monitored port. To configure MAC-
filter-based mirroring, the user must perform three steps:

1. Define a mirror port
2. Create a MAC address filter with a mirroring clause
3. Apply the MAC address filter to an interface

Configuring MAC address filter-based mirroring

Complete the following steps to configure MAC address filter-based mirroring.

1. Defining a mirror port

To activate mirroring on a port, use the mirror command in global configuration mode.

device(config)#mirror ethernet 1/1/14

Configuration notes for defining a mirror port

• If there is no input mirror port configured, MAC-filter based mirroring does not take effect. It remains

in the configuration, but is not activated.

• MAC-filter-based mirroring can be enabled on a port at the same time as either port-based mirroring

or VLAN-based mirroring. When port-based mirroring and MAC-filter-based mirroring are enabled
on a port at the same time, the preference order is port-based mirroring followed by MAC-based
filtering. When VLAN-based mirroring and MAC-filter-based mirroring are enabled on a port at the
same time, the preference order is VLAN-based mirroring and MAC-filter-based mirroring.

NOTE
Port-based mirroring and VLAN-based mirroring can not be enabled on a port at the same time.

2. Creating a MAC address filter with a mirroring clause

The mirror keyword is added to MAC address filter clauses to direct desired traffic to the mirror port.
In the following example, the MAC address filter directs traffic to a mirror port.

device(config)#mac filter 1 permit 0000.0011.2222 ffff.ffff.ffff 0000.0022.3333

ffff.ffff.fff mirror

In this example, any flow matching the source address (SA) 0000.0011.2222 and the destination
address (DA) 0000.0022.3333 is mirrored. Other flows are not mirrored.

MAC address filter-based mirroring

244

FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide

53-1003086-04