Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide - Manual (Page 244)

MAC address filter-based mirroring
NOTE
The MAC address filter-based mirroring feature is not supported on FastIron X Series devices.
This feature allows traffic entering an ingress port to be monitored from a mirror port connected to a
data analyzer, based on specific source and destination MAC addresses. This feature supports
mirroring of inbound traffic only. Outbound mirroring is not supported.
MAC-filter-based mirroring allows a user to specify a particular stream of data for mirroring using a
filter. This eliminates the need to analyze all incoming data to the monitored port. To configure MAC-
filter-based mirroring, the user must perform three steps:
1. Define a mirror port
2. Create a MAC address filter with a mirroring clause
3. Apply the MAC address filter to an interface
Configuring MAC address filter-based mirroring
Complete the following steps to configure MAC address filter-based mirroring.
1. Defining a mirror port
To activate mirroring on a port, use the mirror command in global configuration mode.
device(config)#mirror ethernet 1/1/14
Configuration notes for defining a mirror port
• If there is no input mirror port configured, MAC-filter based mirroring does not take effect. It remains
in the configuration, but is not activated.
• MAC-filter-based mirroring can be enabled on a port at the same time as either port-based mirroring
or VLAN-based mirroring. When port-based mirroring and MAC-filter-based mirroring are enabled
on a port at the same time, the preference order is port-based mirroring followed by MAC-based
filtering. When VLAN-based mirroring and MAC-filter-based mirroring are enabled on a port at the
same time, the preference order is VLAN-based mirroring and MAC-filter-based mirroring.
NOTE
Port-based mirroring and VLAN-based mirroring can not be enabled on a port at the same time.
2. Creating a MAC address filter with a mirroring clause
The mirror keyword is added to MAC address filter clauses to direct desired traffic to the mirror port.
In the following example, the MAC address filter directs traffic to a mirror port.
device(config)#mac filter 1 permit 0000.0011.2222 ffff.ffff.ffff 0000.0022.3333
ffff.ffff.fff mirror
In this example, any flow matching the source address (SA) 0000.0011.2222 and the destination
address (DA) 0000.0022.3333 is mirrored. Other flows are not mirrored.
MAC address filter-based mirroring
244 FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide
53-1003086-04