Users Guide

Table 65. Conguration steps for ERPM
Step Command Purpose
1
configure terminal
Enter global conguration mode.
2
monitor session <id> type erpm
Specify a session ID and ERPM as the type of
monitoring session, and enter Monitoring-Session
conguration mode. The session number needs to be
unique and not already dened.
3
source { interface | range } direction
{rx | tx | both}
Specify the source port or range of ports. Specify the
ingress (rx), egress (tx), or both ingress and egress
trac to be monitored. You can enter mulitple source
statements in an ERPM monitoring session
4
erpm source-ip <id> dest-ip <id>
Specify the source IP address and the destination IP
address to which encapsulated mirrored trac is sent.
5
no flow-based enable
ERPM to be performed on a ow-by-ow basis or if you
congure a VLAN source interface. Enter the no
flow-based command to disable to disable ow-
based ERPM.
6
no disable
Enter the no disable command to activate the ERPM
session..
The following example shows an ERPM conguration .
Dell(conf)#monitor session 0 type erpm
Dell(conf-mon-sess-0)#source tengigabitethernet 1/9 direction rx
Dell(conf-mon-sess-0)#source port-channel 1 direction tx
Dell(conf-mon-sess-0)#erpm source-ip 1.1.1.1 dest-ip 7.1.1.2
Dell(conf-mon-sess-0)#no disable
Dell(conf)#monitor session 1 type erpm
Dell(conf-mon-sess-1)#source vlan 11 direction rx
Dell(conf-mon-sess-1)#erpm source-ip 5.1.1.1 dest-ip 3.1.1.2
Dell(conf-mon-sess-1)#flow-based enable
Dell(conf-mon-sess-1)#no disable
Dell# show monitor session
SessID Source Destination Dir Mode Source IP Dest IP
------ ------ ----------- --- ---- --------- --------
0 Te 1/9 remote-ip rx Port 1.1.1.1 7.1.1.2
0 Po 1 remote-ip tx Port 1.1.1.1 7.1.1.2
1 Vl 11 remote-ip rx Flow 5.1.1.1 3.1.1.2
The next example shows the conguration of an ERPM session in which VLAN 11 is monitored as the source interface and a MAC ACL
lters the monitored ingress trac.
Dell(conf)#mac access-list standard flow
Dell(config-std-macl)#seq 5 permit 00:00:0a:00:00:0b count monitor
Dell#show running-config interface vlan 11
!
interface Vlan 11
no ip address
tagged TenGigabitEthernet 1/1-3
mac access-group flow in <<<<<<<<<<<<<< Only ingress packets are supported for mirroring
shutdown
Port Monitoring
645