Administrator Guide

region priority is less than IPv6 user ACL region, so that the traffic matching the user ACL takes priority in permit/deny action. Both IPv4
and IPv6 mirror ACLs can co-exist in a monitor session.
Pre-requisite
• Allocate a CAM region using the following command.
cam-acl l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number
ipmacacl number vman-qos number [ipv6mirracl number]
NOTE:
If you configure IPv6 mirroring without configuring ipv6mirracl CAM region, following error message appears.
% Error: IPv6 Mirror-Access-list not supported on this CAM profile. Please remove the ipv6
access-group.
Enabling IPv6 Flow-Based Monitoring
To enable IPv6 flow-based mirroring, use ipv6 access-group access-list-name command under monitor session. You can
apply a new IPv6 ACL in a monitor session, when an ACL is already applied. If so, the new ACL will replace the old and overwrite it.
1. Create a monitoring session.
CONFIGURATION mode
monitor session session-id
2. Enable flow-based monitoring for a monitoring session.
MONITOR SESSION mode
flow-based enable
3. Specify the source and destination port and direction of traffic.
MONITOR SESSION mode
source source—port destination destination-port direction rx
4. For flow-based monitoring with ACL applied on the interface, define IPv6 access-list rules that include the monitor keyword. Dell
EMC Networking OS only considers traffic matching rules with the monitor keyword for flow-based monitoring with ACL applied on
the interface.
CONFIGURATION mode
ipv6 access-list
To define access lists, see the Access Control Lists (ACLs) chapter.
5. Apply the IPv6 ACL to the monitored port.
MONITOR SESSION mode
ipv6 access-group access-list-name
Following is an example configuration for flow-based monitoring mirroring ACL applied on an interface.
DellEMC(conf)#monitor session 10
DellEMC(conf-mon-sess-10)#flow-based enable
DellEMC(conf)#ipv6 access-list testflow
DellEMC(config-ext-nacl)#seq 5 permit icmp any any count bytes monitor
DellEMC(config-ext-nacl)#seq 10 permit ipv6 10::/64 any count bytes monitor
DellEMC(config-ext-nacl)#seq 15 deny udp any any count bytes
DellEMC(config-ext-nacl)#seq 20 deny tcp any any count bytes
DellEMC(config-ext-nacl)#exit
DellEMC(conf)#interface tengigabitethernet 1/1
DellEMC(conf-if-te-1/1)#ipv6 access-group testflow in
The following is sample running-configuration of IPv6 flow-based mirroring with ACLs applied to monitor sessions.
DellEMC#show running-config monitor session
!
monitor session 10
flow-based enable
source TenGigabitEthernet 1/1 destination TenGigabitEthernet 1/2 direction rx
DellEMC#show monitor session 10 access-list
Monitor session – 10
632
Port Monitoring