Administrator Guide

Conguring the Encapsulated Remote Port Mirroring
The ERPM session copies trac from the source ports/lags or source VLANs and forwards the trac using routable GRE-
encapsulated packets to the destination ip address specied in the session.
Important:
The steps to be followed for the ERPM Encapsulation :
• Dell Networking OS supports ERPM Source session only. The Encapsulated packets terminate at the destination ip or at
the analyzer.
• Make sure that the destination ip is reachable via the congured ip route (static or dynamic)
• The system MTU should be congured properly to accommodate the increased size of the ERPM mirrored packet.
• The system encapsulates the complete ingress or egress data under GRE header, IP header and outer MAC header and
sends it out at the next hop interface as pointed by the routing table.
• The source IP address can be any port's ip address dened in the box but it should be unique and should not be assigned to
any other system in the network.
• The keyword ‘ow-based enable’ should have been specied in case of source as vlan or where monitoring on a per ow
basis is desired.
• The keyword monitor should have been specied in the access list rules for which we need to mirror.
• The maximum number of source ports that can be dened in a session is 128.
• The system allows to congure upto 4 ERPM sessions.
• ERPM sessions do not copy locally sourced Remote-VLAN trac from source trunk ports that carry RPM VLANs. ERPM
sessions do not copy locally sourced ERPM GRE-encapsulated trac from source ports.
• Source Vlan monitoring can be done only for ingress packets and is not supported for egress direction.
Conguration steps for ERPM
ERPM sample steps for conguring the Source sessions
Step
Command Purpose
1 congure terminal
Enter global conguration mode.
The following example shows a sample conguration .
Dell(conf)#monitor session 0 type erpm
Dell(conf-mon-sess-0)#source tengigabitethernet 0/9 direction rx
Dell(conf-mon-sess-0)#source port-channel 1 direction tx
Dell(conf-mon-sess-0)#erpm source-ip 1.1.1.1 dest-ip 7.1.1.2
Dell(conf-mon-sess-0)#no disable
Dell(conf)#monitor session 1 type erpm
Dell(conf-mon-sess-1)#source vlan 11 direction rx
Dell(conf-mon-sess-1)#erpm source-ip 5.1.1.1 dest-ip 3.1.1.2
Dell(conf-mon-sess-1)#flow-based enable
Dell(conf-mon-sess-1)#no disable
Dell# show monitor session
SessID Source Destination Dir Mode Source IP Dest IP
------ ------ ----------- --- ---- --------- --------
0 Te 0/9 remote-ip rx Port 1.1.1.1 7.1.1.2
0 Po 1 remote-ip tx Port 1.1.1.1 7.1.1.2
1 Vl 11 remote-ip rx Flow 5.1.1.1 3.1.1.2
Sample example for monitoring the VLANs as source, an access list with monitor keyword in its rules needs to be attached to the
vlan interface.
Dell(conf)#mac access-list standard flow
Dell(config-std-macl)#seq 5 permit 00:00:0a:00:00:0b count monitor
602
Port Monitoring