White Papers

DellEMC(conf)#do show monitor session 0
SessionID Source Destination Direction Mode Source IP Dest IP DSCP TTL
Drop Rate Gre-Protocol FcMonitor
--------- ------ ----------- --------- ---- --------- -------- ---- ---
---- ---- ----------- ---------
0 Te 1/1/1/1 Te 1/1/2/1 rx interface 0.0.0.0 0.0.0.0 0 0
No N/A N/A yes
The following is sample conguration for ow-based mirroring with ACLs applied to monitor sessions.
monitor session 16383 type erpm
ip access-group acl3
source Port-channel 10 direction rx
erpm source-ip 20.20.20.1 dest-ip 8.1.1.2 gre-protocol 65535
flow-based enable
no disable
DellEMC#show run acl
!
ip access-list extended acl2
seq 10 permit tcp any 2.1.1.0/24 lt 140 count bytes monitor
!
ip access-list extended acl3
seq 15 permit udp 4.1.1.0/24 any neq 150 count bytes monitor
!
ip access-list extended acl4
seq 20 permit ip any any count bytes monitor
DellEMC(conf)#do show ip access-lists in
Extended Ingress IP access list acl3
seq 15 permit udp 4.1.1.0/24 any neq 150 monitor count bytes (6400 bytes)
DellEMC(conf)#
DellEMC(conf)#do show ip accounting access-list
!
Extended Ingress IP mirror access list acl3 on TenGigabitEthernet 1/1/1/4
Total cam count 16
seq 15 permit udp 4.1.1.0/24 any neq 150 monitor count bytes (6400 bytes)
Remote Port Mirroring
While local port monitoring allows you to monitor trac from one or more source ports by directing it to a destination port on the same
switch/router, remote port mirroring allows you to monitor Layer 2 and Layer 3 ingress and/or egress trac on multiple source ports on
dierent switches and forward the mirrored trac to multiple destination ports on dierent switches.
Remote port mirroring helps network administrators monitor and analyze trac to troubleshoot network problems in a time-saving and
ecient way.
In a remote-port mirroring session, monitored trac is tagged with a VLAN ID and switched on a user-dened, non-routable L2 VLAN. The
VLAN is reserved in the network to carry only mirrored trac, which is forwarded on all egress ports of the VLAN. Each intermediate
switch that participates in the transport of mirrored trac must be congured with the reserved L2 VLAN. Remote port monitoring
supports mirroring sessions in which multiple source and destination ports are distributed across multiple switches
Remote Port Mirroring Example
Remote port mirroring uses the analyzers shown in the aggregation network in Site A.
The VLAN trac on monitored links from the access network is tagged and assigned to a dedicated L2 VLAN. Monitored links are
congured in two source sessions shown with orange and green circles. Each source session uses a separate reserved VLAN to transmit
mirrored packets (mirrored source-session trac is shown with an orange or green circle with a blue border).
686
Port Monitoring