Management and Configuration Guide K/KA/KB.15.15

service-policy mirror-policy-name in
In the policy mirror command, the mirror session parameter accepts a
number (1 to 4) or name, if the specified mirroring session has already been
configured with the name name-str option in the mirror command.
The
no [ interface | vlan ] service-policy in
command removes the mirroring policy from a port, VLAN, trunk, or mesh interface
for a specified session, but leaves the session available for other assignments.
Configuring the MAC-based criteria to select traffic
Syntax
[ no ] monitor mac mac-addr [ src | dst | both ] mirror
session
NOTE: If you have already configured session 1 with a destination, you can enter the vlan
vid monitor or interface port monitor command without traffic-selection criteria and
session identifier to:
• Overwrite the existing session 1 configuration.
• Automatically configure mirroring in session 1 for inbound and outbound traffic on specified
VLAN or port interfaces with the preconfigured destination.
Configuring a destination switch in a remote mirroring session
CAUTION: When configuring a remote mirroring session, always configure the destination switch
first. Configuring the source switch first can result in a large volume of mirrored, IPv4-encapsulated
traffic arriving at the destination without an exit path, which can slow switch performance.
Syntax
mirror endpoint ip src-ip src-udp-port dst-ip exit-port-#
no mirror endpoint ip src-ip src-udp-port dst-ip
Used on a destination switch to configure the remote endpoint of a mirroring session.
The command uniquely associates the mirrored traffic from the desired session on
a monitored source with a remote exit port on the destination switch. You must use
the same set of source and destination parameters used when you configure the
same session on both the source and destination switches.
For a given mirroring session, the same src-ip , src-udp-port and
dst-ip values must be entered with the mirror endpoint ip command on
the destination switch, and later with the mirror remote ip command on the
source switch.
CAUTION: Do not remove the configuration of a remote mirroring endpoint
support for a given session if there are source switches currently configured to mirror
traffic to the endpoint.
Must exactly match the src-ip address you configure on the source switch
for the remote session.
src-ip
Must exactly match the src-udp-port value you configure on the
source switch for the remote session. The recommended port range is 7933
to 65535.
src-udp-port
324 Monitoring and Analyzing Switch Operation