Concept Guide

DellEMC(config-ext-nacl)#seq 15 deny udp any any count bytes
DellEMC(config-ext-nacl)#seq 20 deny tcp any any count bytes
DellEMC(config-ext-nacl)#exit
DellEMC(conf)#interface tengigabitethernet 1/1/1
DellEMC(conf-if-te-1/1/1)#ip access-group testflow in
DellEMC(conf-if-te-1/1/1)#show config
!
interface TenGigabitEthernet 1/1/1
ip address 10.11.1.254/24
ip access-group testflow in
shutdown
DellEMC(conf-if-te-1/1/1)#exit
DellEMC(conf)#do show ip accounting access-list testflow
!
Extended Ingress IP access list testflow on TenGigabitEthernet 1/1/1
Total cam count 4
seq 5 permit icmp any any 40 monitor 40 count bytes (0 packets 0 bytes)
seq 10 permit ip 102.1.1.0/24 any monitor 40 count bytes (0 packets 0 bytes)
seq 15 deny udp any any count bytes (0 packets 0 bytes)
seq 20 deny tcp any any count bytes (0 packets 0 bytes)
DellEMC(conf)#do show monitor session 0
SessionID Source Destination Direction Mode Source IP Dest IP DSCP TTL Drop
Rate Gre-Protocol FcMonitor
--------- ------ ----------- --------- ---- --------- -------- ---- --- ----
---- ----------- ---------
0 Te 1/1/1 Te 1/2/1 rx interface 0.0.0.0 0.0.0.0 0 0 No N/
A N/A yes
Conguring IPv6 Flow-Based Mirroring
This section describes how to congure IPv6 ow-based mirroring in the monitor session.
You can congure IPv6 ow-based mirroring under monitor session. The IPv6 ow-based mirroring is supported in SPAN, RSPAN,
and ERSPAN monitor sessions. By default, all mirror ACLs is considered as implicit permit. .
The Dell EMC Networking OS creates a new
dedicated CAM region ipv6mirracl for IPv6 mirror ACL, which does not have any impact on IPv6 user ACL. The IPv6 mirror ACL region
priority is less than IPv6 user ACL region, so that the trac matching the user ACL takes priority in permit/deny action. Both IPv4 and IPv6
mirror ACLs can co-exist in a monitor session.
Pre-requisite
• Allocate a CAM region using the following command.
cam-acl l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number
ipmacacl number vman-qos number [ipv6mirracl number]
NOTE
:
If you congure IPv6 mirroring without conguring ipv6mirracl CAM region, following error message appears.
% Error: IPv6 Mirror-Access-list not supported on this CAM profile. Please remove the ipv6
access-group.
Enabling IPv6 Flow-Based Monitoring
To enable IPv6 ow-based mirroring, use ipv6 access-group access-list-name command under monitor session. You can
apply a new IPv6 ACL in a monitor session, when an ACL is already applied. If so, the new ACL will replace the old and overwrite it.
1 Create a monitoring session.
CONFIGURATION mode
718
Port Monitoring