Brocade Multi-Service IronWare Switching Configuration Guide (Supporting R05.6.00) - Manual (Page 48)

18 Multi-Service IronWare Switching Configuration Guide
53-1003036-02
ACL-based inbound mirroring
1
Applying the ACL to an interface
You must apply the ACL to an interface using the ip access-group command as shown in the
following.
Brocade(config)# interface ethernet 1/1
Brocade(config-if-e10000-1/1)# ip access-group 101 in
Specifying the destination mirror port
You can specify physical ports or a LAG to mirror traffic from. The following sections describe how to
perform each of these configurations.
Specifying the destination mirror port for physical ports
You must specify a destination port for traffic that has been selected by ACL-based Inbound
Mirroring. This configuration is performed at the Interface Configuration of the port whose traffic
you are mirroring. In the following example, ACL mirroring traffic from port 1/1 is mirrored to port
1/3.
Brocade(config)# interface ethernet 1/1
Brocade(config-if-e10000-1/1)# acl-mirror-port ethernet 1/3
You can also use the ACL-mirroring feature to mirror traffic from multiple ports to a single port using
the Multiple Interface Configuration (MIF) mode as shown in the following example.
Brocade(config)# interface ethernet 1/1 to 1/2
Brocade(config-mif-e10000-1/1-1/2)# acl-mirror-port ethernet 1/3
Syntax: [no] acl-mirror-port ethernet [slot/port]
The [slot/port] variable specifies port that ACL-mirror traffic from the configured interface will be
mirrored to.
Specifying the destination mirror port for a LAG
You can mirror the traffic that has been selected by ACL-based inbound mirroring from all ports in a
LAG by configuring a destination (monitor) port for the LAG at the interface configuration level of
the LAG’s primary port. Configuring mirroring on the primary port of the LAG causes ACL-selected
traffic from all ports in the LAG (including any ports subsequently added to the LAG dynamically on
the Brocade NetIron XMR and Brocade MLX series) to be mirrored to the monitor port. For example,
in the following configuration all traffic on LAG “mylag” will be mirrored to port 10/4:
Brocade(config)# lag mylag static
Brocade(config-lag-mylag)# ports ethernet 10/1 to 10/3
Brocade(config-lag-mylag)# primary-port 10/1
Brocade(config-lag-mylag)# deploy
Brocade(config-lag-mylag)# exit
Brocade(config)# interface ethernet 10/1
Brocade(config-if-e1000-10/1)# acl-mirror-port ethernet 10/4
Syntax: [no] acl-mirror-port ethernet slot/port
The ethernet slot/port variable specifies the port that ACL-mirror traffic from the LAG will be
mirrored to.