Quick Reference Guide

398 PowerConnect B-Series TI24X Configuration Guide
53-1002269-02
ACL-based inbound mirroring
14
Syntax: [no] mirror-port ethernet [<portnum> [input | output]
Syntax: [no] config-trunk-ind
Syntax: [no] monitor ethernet <portnum> both | in | out
The <portnum> parameter for mirror-port ethernet specifies the port to which the monitored traffic
will be copied. The <portnum> parameter for monitor ethernet specifies the port on which traffic
will be monitored.
The input or output parameters configure the mirror port exclusively for ingress or egress traffic. If
you do not specify one, both types of traffic apply.
The config-trunk-ind command enables configuration of individual ports in the trunk group. You
enter the config-trunk-ind command only once in a trunk group. After you enter the command, all
applicable port configuration commands apply to individual ports only.
NOTE
If you enter no config-trunk-ind, all port configuration commands are removed from the individual
ports and the configuration of the primary port is applied to all the ports. Also, once you enter the
no config-trunk-ind command, the enable, disable, and monitor commands are valid only on the
primary port and apply to the entire trunk group.
The both, in, and out parameters specify the traffic direction you want to monitor on the mirror port.
There is no default.
To display the port monitoring configuration, enter the show monitor and show mirror commands
ACL-based inbound mirroring
This section describes how to configure ACL-based inbound mirroring for PowerConnect devices.
Creating an ACL-based inbound mirror clause for
PowerConnect B-Series TI24X devices
The following example shows how to configure an ACL-based inbound mirror clause for
PowerConnect B-Series TI24X devices.
1. Configure the mirror port.
PowerConnect(config)#mirror-port ethernet 2
2. Configure the ACL inbound mirror clause.
PowerConnect(config)#access-list 101 permit ip any any mirror
At this point not all IP traffic will be mirrored to port 2, since the ACL has not yet been applied to
any port.
3. Apply the ACL inbound clause to the monitor port.
PowerConnect(config)#int e 5
PowerConnect(config-if-e10000-5)#ip access-group 101 in
4. Configure the monitor port to use the mirror port.
PowerConnect(config-if-e10000-5)#acl-mirror-port ethernet 2