Management and Configuration Guide K/KA/KB.15.15

• If session 1 has been configured in the CLI with an ACL/classifier-based mirroring policy or
as a remote mirroring session, the Menu is not available for changing the session 1
configuration.
• The CLI (and SNMP) can be used to override any Menu configuration of session 1.
Remote mirroring overview
To configure a remote mirroring session in which the mirroring source and destination are on
different switches, follow these general steps:
1. Determine the IP addressing, UDP port number, and destination (exit) port number for the
remote session:
a. Source VLAN or subnet IP address on the source switch.
b. Destination VLAN or subnet IP address on the destination switch.
c. Random UDP port number for the session (7933-65535.)
d. Remote mirroring endpoint: Exit port and IP address of the remote destination switch (In
a remote mirroring endpoint, the IP address of the exit port and remote switch can belong
to different VLANs. Any loopback IP address can be used except the default loopback
address 127.0.0.1.)
Requirement: For remote mirroring, the same IP addressing and UDP port number must be
configured on both the source and destination switches.
2. On the remote destination (endpoint) switch, enter the mirror endpoint command with
the information from step 1 (page 348) to configure a mirroring session for a specific exit port.
3. Determine the session (1 to 4) and (optional) alphanumeric name to use on the source switch.
4. Determine the traffic to be filtered by any of the following selection methods and the appropriate
configuration level (VLAN, port, mesh, trunk, global):
a. Direction: inbound, outbound, or both.
b. Classifier-based mirroring policy: inbound only for IPv4 or IPv6 traffic.
c. MAC source and/or destination address: inbound, outbound, or both.
5. On the source switch:
a. Enter the mirror command with the session number (1 to 4) and the IP addresses and
UDP port number from step 1 (page 348) to configure a mirroring session. If desired, enter
the [truncation] parameter to allow oversize packets to be truncated rather than
dropped.
b. Enter one of the following commands to configure one or more of the traffic-selection
methods in step 4 (page 348) for the configured session:
interface port/trunk/mesh [ monitor | service-policy policy-name
in ]
vlan vid [ monitor | service-policy policy-name in ]
monitor mac mac-addr
After you complete b, the switch begins mirroring traffic to the remote destination (endpoint)
configured for the session.
348 Monitoring and Analyzing Switch Operation