H3C Technologies H3C WX5500E Series Access Controllers - Manual (Page 92)

84
Configuring the monitor port in interface view
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure the current port as
the monitor port for a local
mirroring group.
[ mirroring-group group-id ]
monitor-port
By default, a port does not serve as
the monitor port for any local
mirroring group.
Using the remote probe VLAN to enable local mirroring to
support multiple monitor ports
In typical local port mirroring configuration, you can configure only one monitor port in a local mirroring
group. As a result, you cannot monitor traffic of a local device on multiple data monitoring devices. To
do that, take advantage of the remote probe VLAN used in Layer 2 remote mirroring.
In Layer 2 remote port mirroring, a remote probe VLAN is configured, and the mirrored packets are
broadcast within the remote probe VLAN. By connecting multiple data monitoring devices to the remote
probe VLAN's member ports, you can monitor the local device's traffic on multiple data monitoring
devices.
Configure this feature by following these steps:
1. Configure a remote source mirroring group on the local device.
2. Configure the monitored ports on the device as source ports of this mirroring group.
3. Configure a remote probe VLAN for this mirroring group.
4. Assign the ports connecting the data monitoring devices to the remote probe VLAN.
In this way, when packets mirrored on the monitored ports are broadcast in the remote probe VLAN, they
are sent out of the ports connecting the data monitoring devices, and all data monitoring devices can
thus receive these mirrored packets.
Configuration restrictions and guidelines
• The reflector port of a remote source mirroring group must be an access port and belong to the
default VLAN, VLAN 1.
• H3C recommends that you configure an unused port as the reflector port of a remote source
mirroring group and disable spanning tree on it.
• Do not configure a combo interface as a reflector port.
• A mirroring group can contain multiple source ports.
• To make sure that the port mirroring function works properly, do not assign a source port to the
remote probe VLAN.
• If you have already configured a reflector port for a remote source mirroring group, you can no
longer configure an egress port for it.
• A VLAN can serve as the remote probe VLAN for only one remote source mirroring group. H3C
recommends that you use the remote probe VLAN for port mirroring exclusively. Do not create a
VLAN interface for the VLAN or configure any other features for the VLAN.