Reference Guide
T Po40
A Eth1/1/3:1
Supported Releases 10.2.0E or later
Port monitoring
Port monitoring enables mirroring of ingress or egress trac of one port to another for analysis. A mirroring port (MG) or destination port,
is the port where the mirrored trac is sent for analysis. A monitored port (MD) is the source interface which is monitored for trac
analysis, also called source port.
Depending on the location of the destination interface, port monitoring is performed as follows:
• Local port mirroring — The port monitoring is performed in the same switch. The switch forwards a copy of incoming and outgoing
trac from one port to another port for further analysis.
• Remote port mirroring (RPM/RSPAN) — The port monitoring is performed on trac running across a remote device in the same
network. The mirrored trac is carried over the L2 network.
Congure local monitoring session
1
Verify that the intended monitoring port has no conguration other than no shutdown and no switchport.
show running-configuration
2 Create a monitoring session in CONFIGURATION mode.
monitor session session-id [local]
3 Enter the source and direction of monitored trac in MONITOR-SESSION mode.
source interface interface-type {both | rx | tx}
4 Enter the destination of trac in MONITOR-SESSION mode.
destination interface interface-type
Create monitoring session
OS10(config)# monitor session 1
OS10(conf-mon-local-1)#
Congure source and destination port, and trac direction
OS10(conf-mon-local-1)# source interface ethernet 1/1/7-1/1/8 rx
OS10(conf-mon-local-1)# destination interface port-channel 10
OS10(conf-mon-local-1)# no shut
View congured monitoring sessions
In the State eld, true indicates that the port is enabled. In the Reason eld, Is UP indicates that hardware resources are allocated.
OS10# show monitor session all
S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason
----------------------------------------------------------------------
1 ethernet1/1/7 port-channel10 rx N/A N/A N/A N/A true Is UP
Flow-based monitoring
Flow-based monitoring conserves bandwidth by inspecting only specied trac instead of all interface trac. Using ow-based monitoring,
you can monitor only trac received by the source port that matches criteria in ingress access-lists.
1 Enable ow-based monitoring for a monitoring session in MONITOR-SESSION mode.
flow-based enable
Layer 2
215