R3303-HP HSR6800 Routers Network Management and Monitoring Configuration Guide

112
Configuring port mirroring
Overview
Port mirroring refers to copying packets that are passing through a port to a monitor port that is
connected to a monitoring device for packet analysis.
Terminologies of port mirroring
Mirroring source
The mirroring source can be one or more monitored ports. Packets (called "mirrored packets") passing
through them are copied to a port that is connected to a monitoring device for packet analysis. This type
of port is called a "source port" and the device where the mirroring source resides is called a "source
device."
Mirroring destination
The mirroring destination is the destination port (also known as the monitor port) of mirrored packets. It
connects to the data monitoring device. The device where the monitor port resides is called the
"destination device." The monitor port forwards mirrored packets to its connected monitoring device.
A monitor port can receive multiple duplicates of a packet in some cases because it can monitor multiple
mirroring sources. For example, assume that Port 1 is monitoring bidirectional traffic on Port 2 and Port
3 on the same device. If a packet travels from Port 2 to Port 3, two duplicates of the packet will be
received on Port 1.
Mirroring direction
The mirroring direction indicates that the inbound, outbound, or bidirectional traffic can be copied on a
mirroring source:
• Inbound—Copies packets received on a mirroring source.
• Outbound—Copies packets sent out of a mirroring source.
• Bidirectional—Copies packets both received on and sent out of a mirroring source.
Mirroring group
Port mirroring is implemented through mirroring groups. Mirroring groups include local, remote source,
and remote destination mirroring groups. For more information about mirroring groups, see "Port
mir
roring classification and implementation."
Egress port, and remote probe VLAN
A remote probe VLAN and an egress port are used for Layer 2 remote port mirroring. The remote probe
VLAN specially transmits mirrored packets to the destination device. The egress port resides on a source
device and sends mirrored packets to the remote probe VLAN. For more information about the egress
port, remote probe VLAN, and Layer 2 remote port mirroring, see "Port mirroring classification and
i
mplementation."
Ports except for source, monitor, and egress ports are called common ports on port mirroring devices.