Configuration Guide User guide

FastIron Configuration Guide 927
53-1002494-02
Port mirroring and monitoring configuration
Port mirroring and monitoring configuration
To configure port monitoring, first specify the mirror port, then enable monitoring on the monitored
port.
The mirror port is the port to which the monitored traffic is copied. Attach your protocol analyzer to
the mirror port. The monitored port is the port with the traffic you want to monitor.
Table 159 lists the number of mirror and monitor ports supported on the Brocade devices. For
more information about port regions, refer to “About port regions” on page 556.
.
NOTE
FastIron X Series devices support multiple ingress and egress mirror ports. For 1 Gbps ports, ports
in groups of 12 share one ingress mirror port and one egress mirror port. Therefore, ports 1 and 2
cannot have different mirror ports, but ports 1 and 13 can (port 25, for third-generation modules).
Each 10 Gbps port (or each third-generation 10 GbE module) can have one ingress mirror port and
one egress mirror port.
NOTE
For devices other than the FastIron X Series, it is possible to configure more than eight egress ports,
although only the first eight are operational. This is also true for mirrored VLANs - more than eight
can be configured, but only the first eight are operational.
Configuration notes for port mirroring and monitoring
Refer to the following guidelines when configuring port mirroring and monitoring:
• If you configure both ACL mirroring and ACL-based rate limiting on the same port, then all
packets that match are mirrored, including the packets that exceed the rate limit.
• FWS and FCX Series devices support sFlow and port monitoring together on the same port.
• FastIron X Series devices support port monitoring and sFlow together on the same device. The
caveat is that port monitoring and sFlow cannot be configured together within the same port
region. Refer to “About port regions” on page 556 for a list of valid port ranges on these
devices. This restriction only applies to first- and second-generation modules.
• You can configure a mirror port specifically as an ingress port, an egress port, or both.
• Mirror ports can run at any speed and are not related to the speed of the ingress or egress
monitored ports.
• The same port cannot be both a monitored port and the mirror port.
TABLE 159 Number of mirror and monitored ports supported
Port type Maximum number supported
FastIron X Series FCX ICX
Ingress mirror ports 1 per port region 1 per port region 1 per port region
Egress mirror ports 1 per port region 1 per port region 1 per port region
Ingress monitored ports No limit No limit No limit
Egress monitored ports 8 8 8