Allied Telesis x908, X900-12XT/S manual Mirroring ARP packets

Page 16

Examples

Mirroring ARP packets

This example uses a QoS class-map.

Use this type of configuration when you want to mirror a subset of the incoming traffic on a port, and you need to use QoS match commands to select the mirrored traffic.

Consider a situation where you want to capture ARP packets that arrive at port 1.0.10. To configure this:

1.Set port 1.0.20 as the mirror port. To do this, enter global configuration mode and use the commands:

awplus(config)#interface port1.0.20

awplus(config-if)#mirror interface none direction both

2.Create an ACL with an action of copy-to-mirror. This ACL will only be used to set the action taken on the ARP traffic, not to select the traffic, so it needs to match all IP traffic. To do this, return to global configuration mode and use the commands:

awplus(config)#access-list 3400 copy-to-mirror ip any any

3.Create a class-map that matches on ARP traffic and uses the ACL. To do this, use the commands:

awplus(config)#class-map mirror-arp

awplus(config-cmap)#match protocol arp eth-format ethii-untagged

awplus(config-cmap)#match access-group 3400

4.Create a policy-map and add the class-map to it. To do this, use the commands:

awplus(config-cmap)#policy-map mirror-arp

awplus(config-pmap)#class mirror-arp

5.Apply the policy-map to port 1.0.10. To do this, use the commands:

awplus(config-pmap-c)#interface port1.0.10

awplus(config-if)#service-policy input mirror-arp

Page 16 AlliedWare Plus™ OS How To Note

Image 16
Contents AlliedWare PlusTM OS Which products and software version does this Note apply to? Creating hardware ACLs Creating IP hardware ACLsDestination-ip-address TCP and UDP You can filter TCP and UDP packets on the basis Effects of the action keywords in ACLs Creating MAC address hardware ACLsMaking filters by applying hardware ACLs to ports ACLsMaking filters by using QoS class-maps Creating a class-map Specifying what the class-map will match onMatching on inner keywords for nested VLANs So will the following single match command Matching on TCP flagApplying the policy-map to ports Applying the class-maps to a policy-mapMatching on eth-format and protocol Logic of the operation of the hardware filters Combining interface ACLs and QoS class-mapsExamples Blocking all multicast trafficBlocking all multicast traffic except one address Mirroring Http and Smtp trafficMirroring ARP packets Blocking TCP sessions in one direction This example uses two QoS class-mapsHow many filters can you create? Filter rules tableProfile mask Are there enough bytes for your set of filters? Some protocols also use filters, so use some of the length
Related manuals
Manual 8 pages 39.31 Kb Manual 52 pages 56.44 Kb