Configuration Guide User guide

936 FastIron Configuration Guide
53-1002494-02
MAC address filter-based mirroring
MAC address filter-based mirroring
NOTE
The MAC address filter-based mirroring feature is not supported on FastIron X Series devices.
This feature allows traffic entering an ingress port to be monitored from a mirror port connected to
a data analyzer, based on specific source and destination MAC addresses. This feature supports
mirroring of inbound traffic only. Outbound mirroring is not supported.
MAC-filter-based mirroring allows a user to specify a particular stream of data for mirroring using a
filter. This eliminates the need to analyze all incoming data to the monitored port. To configure
MAC-filter-based mirroring, the user must perform three steps:
1. Define a mirror port
2. Create a MAC address filter with a mirroring clause
3. Apply the MAC address filter to an interface
Configuring MAC address filter-based mirroring
Complete the following steps to configure MAC address filter-based mirroring.
1. Defining a mirror port
To activate mirroring on a port, use the mirror command in global configuration mode.
Brocade(config)#mirror e 0/1/14
Configuration notes for defining a mirror port
• If there is no input mirror port configured, MAC-filter based mirroring does not take effect. It
remains in the configuration, but is not activated.
• FWS devices support one ingress mirror and one egress mirror per system. These ports are
shared by all mirroring features: port-based mirroring, VLAN-based mirroring, ACL-based
mirroring and MAC-based mirroring.
• MAC-filter-based mirroring can be enabled on a port at the same time as either port-based
mirroring or VLAN-based mirroring. When port-based mirroring and MAC-filter-based mirroring
are enabled on a port at the same time, the preference order is port-based mirroring followed
by MAC-based filtering. When VLAN-based mirroring and MAC-filter-based mirroring are
enabled on a port at the same time, the preference order is VLAN-based mirroring and
MAC-filter-based mirroring.
NOTE
Port-based mirroring and VLAN-based mirroring can not be enabled on a port at the same time.
2. Creating a MAC address filter with a mirroring clause
The mirror keyword is added to MAC address filter clauses to direct desired traffic to the mirror
port. In the following example, the MAC address filter directs traffic to a mirror port.
Brocade(config)#mac filter 1 permit 0000.1111.2222 ffff.ffff.ffff 0000.2222.3333
ffff.ffff.fff mirror