Table 1-1Ports involved in the mirroring operation

 

Switch

Ports involved

Function

 

 

 

 

Port monitored. It copies packets to the reflector port

 

 

 

Source port

through local port mirroring. There can be more than

 

 

 

 

one source port.

 

 

Source switch

 

 

 

 

Reflector port

Receives packets from the source port and

 

 

 

broadcasts the packets in the remote-probe VLAN.

 

 

 

 

 

 

 

 

 

 

 

 

Trunk port

Sends mirrored packets to the intermediate switch or

 

 

 

the destination switch.

 

 

 

 

 

 

 

 

 

 

 

 

 

Sends mirrored packets to the destination switch.

 

 

Intermediate

Trunk port

Two trunk ports are necessary for the intermediate

 

 

switch

switch to connect the devices at the source switch

 

 

 

 

 

 

 

side and the destination switch side.

 

 

 

 

 

 

 

 

Trunk port

Receives remote mirrored packets.

 

 

Destination switch

 

 

 

 

Destination port

Receives packets forwarded from the trunk port and

 

 

 

 

 

 

transmits the packets to the data detection device.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

z

z

z

Do not configure a default VLAN, a management VLAN, or a dynamic VLAN as the remote-probe VLAN.

Configure all ports connecting the devices in the remote-probe VLAN as trunk ports, and ensure the Layer 2 connectivity from the source switch to the destination switch over the remote-probe VLAN.

Do not configure a Layer 3 interface for the remote-probe VLAN, run other protocol packets, or carry other service packets on the remote-prove VLAN and do not use the remote-prove VLAN as the voice VLAN and protocol VLAN; otherwise, remote port mirroring may be affected.

MAC-Based Mirroring

With MAC-based mirroring configured, a device mirrors packets matching the specified MAC address to the destination port, including:

z

z

Packets with the source MAC address matching the specified MAC address. Packets with the destination MAC address matching the specified MAC address.

Compared with port mirroring, MAC-based mirroring is more precise and it can be used to monitor packets of specific device in the network.

VLAN-Based Mirroring

With VLAN-based mirroring configured, a device mirrors packets received on all ports in the specified VLAN to the destination port.

Compared with port mirroring, VLAN-based mirroring is more extensive and it can be used to monitor packets of a specific VLAN or VLANs in the network.

1-3

Page 404
Image 404
3Com WX3000 operation manual MAC-Based Mirroring, VLAN-Based Mirroring, 1Ports involved in the mirroring operation