Configuration Guide User guide

ManualsBrandsBrocade ManualsComputer AccessoriesFastIron

991

992

993

994

995

996

997

998

999

1000

FastIron Configuration Guide 937

53-1002494-02

VLAN-based mirroring

In this example, any flow matching the source address (SA) 0000.1111.2222 and the destination

address (DA) 0000.2222.3333 is mirrored. Other flows are not mirrored.

3. Apply ing the MAC address filter to an interface

Apply the MAC address filter to an interface using the mac-filter-group command.

Brocade(config)#interface ethernet 0/1/1

Brocade(config-if-e10000-0/1/1)#mac filter-group 1

4. Configuring the monitor port to use the mirror port

Brocade(config)#interface ethernet 0/1/5

Brocade(config-if-e10000-0/1/5)#acl-mirror-port ethernet 0/1/14

VLAN-based mirroring

NOTE

VLAN-based mirroring is supported on FastIron X Series devices equipped with third generation or

later modules. Refer to “VLAN-based mirroring on FastIron X Series devices” on page 939.

The VLAN-based mirroring feature allows users to monitor all incoming traffic in one or more VLANs

by sending a mirror image of that traffic to a configured mirror port. This feature meets the

requirements of CALEA (Communications Assistance for Law Enforcement Act of 1994).

Configuring VLAN-based mirroring

Configure VLAN-based mirroring using the monitor ethernet command in VLAN configuration mode.

For example, to enable mirroring on VLANs 10 and 20, to mirror port e 1/1/21, enter the following

commands.

Brocade(config)#mirror-port ethernet 1/1/21 input

Brocade(config)#vlan 10

Brocade(config-VLAN-10)#monitor ethernet 1/1/21

Brocade(config-VLAN-10)#exit

Brocade(config)#vlan 20

Brocade(config-VLAN-20)#monitor ethernet 1/1/21

Brocade(config-VLAN-20)#end

Syntax: [no] monitor ethernet <port>

NOTE

For FCX devices, because it is possible to have multiple mirror ports, monitor ports must specify

which mirror port they are monitoring.

To disable mirroring on VLAN 20, enter the following commands.

Brocade(config)#vlan 20

Brocade(config-VLAN-20)#no monitor ethernet 1/1/21

Brocade(config-VLAN-20)#end

Displaying VLAN-based mirroring status

The show vlan command displays the VLAN-based mirroring status.