Configuration Guide User guide

FastIron Configuration Guide 929
53-1002494-02
Port mirroring and monitoring configuration
The previous command is required even though the analyzer port is already set globally by the
port mirroring command.
Brocade(config)# interface ethernet 1/1/3
Brocade(config-if-e1000-1/1/3)# ip access-group 101 in
Brocade(config-if-e1000-1/1/3)# acl-mirror-port ethernet 2/1/48
Brocade(config-if-e1000-1/1/3)# ip access-group 102 in
• Because of hardware limitations on the SX-FI48GPP interface module, if the monitored port is
on the SX-FI48GPP module, mirrored packets vary slightly from original (monitored) packets,
depending on the type of management or interface module on which the mirror port (analyzer)
is configured:
- When ingress or egress mirroring is enabled between a monitored port on an SX-FI48GPP
interface module and a mirror port on an IPv4 interface module, mirrored packets contain
CRC errors. All other data in the original and mirrored packets is the same.
- When ingress or egress mirroring is enabled between a monitored port on an SX-FI48GPP
interface module and a mirror port on an IPv4 8-port management module, IPv6
management module, IPv6 interface module, or SX-FI48GPP module, mirrored packets
are larger than the original packet by 4 bytes, but do not contain CRC errors. All other data
in the original and mirrored packets is the same.
Command syntax for port mirroring and monitoring
This section describes how to configure port mirroring and monitoring.
Monitoring a port
To configure port monitoring on an individual port on a Brocade device, enter commands similar to
the following.
Brocade(config)#mirror-port ethernet 1/2/4
Brocade(config)#interface ethernet 1/2/11
Brocade(config-if-e1000-11)#monitor ethernet 1/2/4 both
Traffic on port e 1/2/11 will be monitored, and the monitored traffic will be copied to port e 1/2/4,
the mirror port.
Syntax: [no] mirror-port ethernet <port> [input | output]
Syntax: [no] monitor ethernet <port> both | in | out
The <port> variable for mirror-port ethernet specifies the port to which the monitored traffic is
copied. The <port> variable for monitor ethernet specifies the port on which traffic is monitored.
Specify the port variable in one of the following formats:
• FWS, FCX, and ICX stackable switches – stack-unit/slotnum/portnum
• FSX 800 and FSX 1600 chassis devices – slotnum/portnum
• ICX devices – slotnum/portnum
• FESX compact switches – portnum
The input and output parameters configure the mirror port exclusively for ingress or egress traffic.
If you do not specify one, both types of traffic apply.
The both, in, and out parameters specify the traffic direction you want to monitor on the mirror port.
There is no default.