KB.15.15

1. Determine the session and local destination port:

• Session number (1-4) and (optional) alphanumeric name

• Exit port (any port on the switch except a monitored interface used to mirror traffic)

CAUTION: An exit port should be connected only to a network analyzer, IDS, or other

network edge device that has no connection to other network resources. Connecting a mirroring

exit port to a network can result in serious network performance problems, and is strongly

discouraged by HP.

2. Enter the mirror session-# [name session-name ] port port-# command to

configure the session.

3. Determine the traffic to be selected for mirroring by any of the following methods and the

appropriate configuration level (VLAN, port, mesh, trunk, switch):

a. Direction: inbound, outbound, or both

b. Classifier-based mirroring policy: inbound only for IPv4 or IPv6 traffic

c. MAC source and/or destination address: inbound, outbound, or both

4. Enter the monitor command to assign one or more source interfaces to the session.

After you complete step 4, the switch begins mirroring traffic to the configured exit port.

The following commands configure mirroring for a local session in which the mirroring source and

destination are on the same switch.

• The mirror command identifies the destination in a mirroring session.

• The interface and vlan commands identify the mirroring source, including source interface,

traffic direction, and traffic-selection criteria for a specified session.

Configuring a local mirroring session

Syntax

[ no ] mirror 1 - 4 port exit-port-# [name name-str ]

The no mirror session-# port command removes the mirroring session and

any mirroring source previously assigned to that session by the following commands.

Configuring traffic-direction criteria to select traffic

Syntax

[ no ] [ interface port/trunk/mesh | vlan vid-# ]monitor all

in | out | both mirror session [ session ]... [no-tag-added]

Configuring ACL criteria to select inbound traffic — deprecated

Deprecated command:

Syntax

[ no ] [ interface port/trunk/mesh | vlan vid-# ]monitor ip

access-group acl-name in mirror session [ session ...]

318 Monitoring and Analyzing Switch Operation