Brocade Multi-Service IronWare Switching Configuration Guide (Supporting R05.6.00) - Manual (Page 44)

14 Multi-Service IronWare Switching Configuration Guide
53-1003036-02
Mirroring and Monitoring
1
Mirroring and Monitoring
You can monitor traffic on Brocade device ports by configuring another port to “mirror” the traffic
on the ports you want to monitor. By attaching a protocol analyzer to the mirror port, you can
observe the traffic on the monitored ports.
Monitoring traffic on a port is a two-step process:
• Enable a port to act as the mirror port. This is the port to which you connect your protocol
analyzer.
• Enable monitoring on the ports you want to monitor.
You can monitor input traffic, output traffic, or both.
Any port on a module can operate as a mirror port and you can configure more than one mirror
port. You can configure the mirror ports on different modules and you can configure more than one
mirror port on the same module.
Configuration guidelines for monitoring traffic
Use the following considerations when configuring mirroring for inbound and outbound traffic:
• Any port can be mirrored and monitored except for the management port.
• Only one inbound mirror port can be configured for any inbound monitor port.
• Only one outbound mirror port can be configured for any outbound monitor port.
• A LAG port can be configured as either an inbound or outbound monitor port.
• A LAG port cannot be configured as either an inbound or an outbound mirror port.
• Both input and output monitoring are supported.
• Monitoring for LAG ports is supported.
• sFlow and monitoring can be enabled concurrently on the same port.
• ACL-based inbound mirroring is supported.
• ACL-based inbound sFlow is not concurrently supported.
• On the Brocade NetIron CES, there can be at most one port configured as the mirror port per
port region (aport region is 24-1GbE ports or 2 10-GbE ports). There is no limit on the number
of monitor ports that can be configured per port region.
• A trunk port cannot be configured as a mirror port.
• An 802.1X/MAC-authentication port cannot be configured as a mirror port.
• You cannot mirror a port that has an MPLS tunnel configured.
• You cannot mirror a port that has a VPLS endpoint configured.
• You cannot mirror a port that has a MPLS VE configured.
• You cannot mirror a port that has IPv4 multicast configured.
• You cannot mirror a port that has IPv6 multicast configured.
Assigning a mirror port and monitor ports
To configure ethernet port 3/1 for port mirroring, enter the following command.