Configuration Guide User guide
FastIron Configuration Guide 931
53-1002494-02
ACL-based inbound mirroring
• The maximum number of monitored VLANs on an IronStack is 8.
Configuring mirroring for ports on different members in an IronStack example
In this example, although two ports are configured as active ports, only one active mirror port (port
1/1/24) is allowed for the entire stack because the mirror ports and the monitored ports are on
different stack members.
Brocade(config)#mirror-port ethernet 1/1/24
Brocade(config)#mirror-port ethernet 2/1/24
Brocade(config)#interface ethernet 1/1/1
Brocade(config-if-e1000-1/1/1)#monitor ethernet 1/1/24 both
Brocade(config)#interface ethernet 2/1/1
Brocade(config-if-e1000-2/1/1)#monitor ethernet 1/1/24 both
Brocade(config)#interface ethernet 4/1/1
Brocade(config-if-e1000-4/1/1)#monitor ethernet 1/1/24 both
Configuring mirroring for ports on the same stack member in an IronStack
example
In this example, the mirror ports are assigned to different monitor ports.
Brocade(config)#mirror-port ethernet 1/1/24
Brocade(config)#mirror-port ethernet 2/1/24
Brocade(config)#mirror-port ethernet 3/1/24
Brocade(config)#mirror-port ethernet 4/1/24
Brocade(config)#interface ethernet 1/1/1
Brocade(config-if-e1000-1/1/1)#monitor ethernet 1/1/24 both
Brocade(config)#interface ethernet 2/1/1
Brocade(config-if-e1000-2/1/1)#monitor ethernet 2/1/24 both
Brocade(config)#interface ethernet 4/1/1
Brocade(config-if-e1000-4/1/1)#monitor ethernet 4/1/24 both
ACL-based inbound mirroring
This section describes ACL-based inbound mirroring for FastIron devices.
Creating an ACL-based inbound mirror clause for
FWS and FCX devices
The following example shows how to configure an ACL-based inbound mirror clause.
1. Configure the mirror port.
Brocade(config)#mirror-port ethernet 1/1/2
2. Configure the ACL-based inbound mirror clause.
Brocade(config)#access-list 101 permit ip any any mirror
3. Apply the ACL-based inbound clause to the monitor port.
Brocade(config)#interface e 1/1/5
Brocade(config-if-e1000-1/1/5)#ip access-group 101 in
4. Create the ACL mirror port.