Reference Guide
2 Return to CONFIGURATION mode.
exit
3 Create an access list in CONFIGURATION mode.
ip access-list access-list-name
4 Dene access-list rules using seq, permit, and deny statements in CONFIG-ACL mode. The ACL rules describe the trac you
want to monitor. Flow monitoring is supported for IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
seq sequence-number {deny | permit} {source [mask] | any | host ip-address} [count [byte]]
[fragments] [threshold-in-msgs count] [capture session session-id]
5 Return to CONFIGURATION mode.
exit
6 Apply the ow-based monitoring ACL to the monitored source port in CONFIGURATION mode (up to 140 characters).
ip access-group access-list-name {in | out}
Enable ow-based monitoring
OS10(config)# monitor session 1
OS10(conf-mon-local-1)# flow-based enable
OS10(conf-mon-local-1)# exit
OS10(config)# ip access-list ipacl1
OS10(conf-ipv4-acl)# deny ip host 1.1.1.23 any capture session 1 count
OS10(conf-ipv4-acl)# exit
OS10(config)# mac access-list mac1
OS10(conf-mac-acl)# deny any any capture session 1
OS10(conf-mac-acl)# exit
OS10(config)# interface ethernet 1/1/9
OS10(conf-if-eth1/1/9)# mac access-group mac1 in
OS10(conf-if-eth1/1/9)# end
OS10# show mac access-lists in
Ingress MAC access-list mac1
Active on interfaces :
ethernet1/1/9
seq 10 deny any any capture session 1 count (0 packets)
Remote port mirroring
Remote port mirroring allows you to monitor ingress and/or egress trac on multiple source ports of multiple devices and forward the
mirrored trac to multiple destination ports on dierent remote devices. Remote port mirroring helps network administrators monitor and
analyze trac to troubleshoot network problems in a time-saving and ecient way.
In a remote-port mirroring session, monitored trac is tagged with a VLAN ID and switched on a user-dened, non-routable L2 VLAN. The
VLAN is reserved in the network to carry only mirrored trac, which is forwarded on all egress ports of the VLAN. You must congure each
intermediate switch that participates in the transport of mirrored trac with the reserved L2 VLAN. Remote port monitoring supports
mirroring sessions in which multiple source and destination ports distribute across multiple network devices.
216
Layer 2