Administrator Guide

Port Monitoring
Port monitoring (also referred to as mirroring ) allows you to monitor ingress and/or egress trac on specied ports. The mirrored trac
can be sent to a port to which a network analyzer is connected to inspect or troubleshoot the trac.
Mirroring is used for monitoring Ingress or Egress or both Ingress and Egress trac on a specic port(s). This mirrored trac can be sent
to a port where a network snier can connect and monitor the trac.
Dell Networking OS supports the following mirroring techniques:
• Port-Mirroring — Port Monitoring is a method of monitoring network trac that forwards a copy of each incoming and outgoing
packet from one port of a network router to another port where the packet can be studied.
• Remote Port Monitoring (RPM) — Remote Port Monitoring allows the user to monitor trac running across a remote device in the
same network. Here the mirror trac is carried over the L2 network, so that probe devices in the network can analyze it. It is an
extension to the normal Port Monitoring feature. This feature is generally referred as RPM, where mirror trac is carried over L2
network.
• Encapsulated Remote-Port Monitoring (ERPM) — ERPM is a feature to encapsulate mirrored packet using GRE with IP delivery so
that it can be sent across a routed network.
Topics:
• Important Points to Remember
• Port Monitoring
• Conguring Port Monitoring
• Conguring Monitor Multicast Queue
• Enabling Flow-Based Monitoring
• Remote Port Mirroring
• Encapsulated Remote Port Monitoring
• ERPM Behavior on a typical Dell Networking OS
• Port Monitoring on VLT
Important Points to Remember
• Port Monitoring is supported on both physical and logical interfaces like virtual area network (VLAN) and port-channel.
• The monitored (the source, [MD]) and monitoring ports (the destination, [MG]) must be on the same switch.
• In general, a monitoring port should have no ip address and no shutdown as the only conguration; Dell Networking OS permits a limited
set of commands for monitoring ports. You can display these commands using the ? command. A monitoring port also may not be a
member of a VLAN.
• There may only be one destination port (MG) in a monitoring session.
• Source port (MD) can be monitored by more than one destination port (MG).
• Destination port (MG) can be a physical interface or port-channel interface.
• A Port monitoring session can have multiple source statements.
• Range command is supported in the source statement, where we can specify a range of interfaces of (Physical, Port Channel or VLAN)
types.
• One Destination Port (MG) can be used in multiple sessions.
• There can be a maximum of 128 source ports in a Port Monitoring session.
• Flow based monitoring is supported for all type of source interfaces.
40
Port Monitoring 693