R211x-HP Flexfabric 11900 Network Management and Monitoring Configuration Guide

173
Configuring traffic mirroring
The traffic mirroring feature is available on both Layer 2 and Layer 3 Ethernet interfaces. The term
"interface" in this chapter collectively refers to these two types of interfaces. You can use the port
link-mode command to configure an Ethernet port as a Layer 2 or Layer 3 interface (see Layer 2—LAN
Switching Configuration Guide).
Overview
Local traffic mirroring
Local traffic mirroring copies the specified packets to the specified destination for packet analyzing and
monitoring. It is implemented through QoS policies. You define traffic classes and configure match
criteria to classify packets to be mirrored, and then you configure traffic behaviors to mirror packets that
fit the match criteria to the specified destination. Traffic mirroring allows you to flexibly classify packets to
be analyzed by defining match criteria. For more information about QoS policies, traffic classes, and
traffic behaviors, see ACL and QoS Configuration Guide.
You can configure the traffic to be mirrored to the following destinations:
• Interface—Mirroring traffic to an interface copies the matching packets to an interface connecting
to a data monitoring device, which analyzes the packets received on the interface.
• CPU—Mirroring traffic to a CPU copies the matching packets to a CPU, whose card is configured
with traffic mirroring, to analyze the packets or deliver the packets to upper layers.
Remote traffic mirroring
Remote traffic mirroring combines traffic mirroring with remote port mirroring to use a remote mirroring
group to mirror local packets matching the specified criteria to the specified destination port on a remote
device.
Configure remote traffic mirroring in the following steps:
1. Configure traffic mirroring on the local device to mirror packets matching certain criteria to an
egress port.
2. Configure a remote source group on the local device and specify the destination port for traffic
mirroring as the egress port of the remote source group, so that packets sent to the destination port
by traffic mirroring can be mirrored to the remote device by remote port mirroring.
Configuring local traffic mirroring
For more information about the following commands except the mirror-to command, see ACL and QoS
Command Reference.