Brocade FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide - Manual (Page 245)

3. Applying the MAC address filter to an interface
Apply the MAC address filter to an interface using the mac-filter-group command.
device(config)#interface ethernet 0/1/1
device(config-if-e10000-0/1/1)#mac filter-group 1
4. Configuring the monitor port to use the mirror port
device(config)#interface ethernet 0/1/5
device(config-if-e10000-0/1/5)#acl-mirror-port ethernet 0/1/14
VLAN-based mirroring
NOTE
VLAN-based mirroring is supported on FastIron X Series devices equipped with third generation or later
modules and ICX 6650 devices. Refer to
VLAN-based mirroring on page 246.
The VLAN-based mirroring feature allows users to monitor all incoming traffic in one or more VLANs by
sending a mirror image of that traffic to a configured mirror port. This feature meets the requirements of
CALEA (Communications Assistance for Law Enforcement Act of 1994).
Configuring VLAN-based mirroring
Configure VLAN-based mirroring using the monitor ethernet command in VLAN configuration mode.
For example, to enable mirroring on VLANs 10 and 20, to mirror port e 1/1/21, enter the following
commands.
device(config)#mirror-port ethernet 1/1/21 input
device(config)#vlan 10
device(config-VLAN-10)#monitor ethernet 1/1/21
device(config-VLAN-10)#exit
device(config)#vlan 20
device(config-VLAN-20)#monitor ethernet 1/1/21
device(config-VLAN-20)#end
Syntax:[no] monitor ethernet port
NOTE
For FCX and ICX 6650 devices, because it is possible to have multiple mirror ports, monitor ports must
specify which mirror port they are monitoring.
To disable mirroring on VLAN 20, enter the following commands.
device(config)#vlan 20
device(config-VLAN-20)#no monitor ethernet 1/1/21
device(config-VLAN-20)#end
3. Applying the MAC address filter to an interface
FastIron Ethernet Switch Platform and Layer 2 Switching Configuration Guide 245
53-1003086-04