Management and Configuration Guide K/KA/KB.15.15

Traffic selection options
To configure traffic mirroring, specify the source interface, traffic direction, and criteria to be used
to select the traffic to be mirrored by using the following options:
• Interface type
Port, trunk, and/or mesh•
• VLAN
• Switch (global configuration level)
• Traffic direction and selection criteria
All inbound and/or outbound traffic on a port or VLAN interface•
• Only inbound IP traffic selected with an ACL (deprecated in software release K.14.01
and greater)
• Only inbound IPv4 or IPv6 traffic selected with a classifier-based mirroring policy
• All inbound and/or outbound traffic selected by MAC source and/or destination address
The different ways to configure traffic-selection criteria on a monitored interface are described in
the following sections.
Mirroring-source restrictions
In a mirroring session, you can configure any of the following sources of mirrored traffic:
• Multiple port and trunk, and/or mesh interfaces
• One VLAN
If you configure a VLAN as the source interface in a mirroring session and assign a second
VLAN to the session, the second VLAN overwrites the first VLAN as the source of mirrored
traffic.
• One classifier-based policy
If you configure a mirroring policy on a port or VLAN interface to mirror inbound traffic in a
session, you cannot configure a port, trunk, mesh, ACL, or VLAN as an additional source of
mirrored traffic in the session.
• Up to 320 MAC addresses (used to select traffic according to source, destination MAC address,
or both) in all mirroring sessions configured on a switch
About selecting all inbound/outbound traffic to mirror
If you have already configured session 1 with a local or remote destination, you can enter the
vlan vid monitor or interface port monitor command without additional parameters
for traffic-selection criteria and session number to configure mirroring for all inbound and outbound
traffic on the specified VLAN or port interfaces in session 1 with the preconfigured destination.
Untagged mirrored packets
Although a VLAN tag is added (by default) to the mirrored copy of untagged outbound packets
to indicate the source VLAN of the packet, it is sometimes desirable to have mirrored packets look
exactly like the original packet. The no-tag-added parameter gives you the option of not tagging
mirrored copies of outbound packets, as shown in Figure 179 (page 351) and Figure 180 (page 352).
Figure 179 Mirroring commands with the no-tag-added option
About selecting all inbound/outbound traffic to mirror 351