API Guide

Restrictions
● When you use a source VLAN, enable flow-based monitoring using the flow-based enable command.
● In a source VLAN, only received (rx) traffic is monitored.
● If the port channel or VLAN has a member port configured as a destination port in a remote port monitoring session, you
cannot configure a source port channel or source VLAN in a source session.
● You cannot use a destination port for remote port monitoring as a source port, including the session the port functions as
the destination port.
● The reserved VLAN used to transport mirrored traffic must be an L2 VLAN. L3 VLANs are not supported.
Configure remote port monitoring
Remote port monitoring requires the following for transporting mirrored traffic configured on the source, intermediate, and
destination devices:
● A source interface
● Monitored ports on different source network devices
● A reserved tagged VLAN
1. Create a remote monitoring session in CONFIGURATION mode.
monitor session session-id type rpm-source
2. Enter the source to monitor traffic in MONITOR-SESSION mode.
source interface interface-range direction
3. Enter the destination to send the traffic to in MONITOR-SESSION mode.
destination remote-vlan vlan-id
4. Enable the monitoring interface in MONITOR-SESSION mode.
no shut
Create remote monitoring session
OS10(config)# monitor session 10 type rpm-source
OS10(conf-mon-rpm-source-10)#
Configure source and destination port, and traffic direction
OS10(conf-mon-rpm-source-10)# source interface vlan 10 rx
OS10(conf-mon-rpm-source-10)# destination remote-vlan 100
OS10(conf-mon-rpm-source-10)# no shut
View monitoring session
OS10(conf-mon-rpm-source-10)# do show monitor session all
S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason
---------------------------------------------------------------
1 vlan10 vlan 100 rx N/A N/A N/A N/A true Is UP
Encapsulated remote port monitoring
You can also have the monitored traffic transmitted over an L3 network to a remote analyzer. The encapsulated remote port
monitoring (ERPM) session mirrors traffic from the source ports, LAGs, or source VLANs. It forwards the traffic using routable
GRE-encapsulated packets to the destination IP address specified in the session.
Consider the following when configuring an ERPM session:
● OS10 supports only the ERPM source session. The encapsulated packets terminate at the destination IP address, the remote
analyzer.
● The source IP address must be a valid local IP address for the session.
Layer 2
519