Monitoring and Analyzing Switch Operation

Traffic Mirroring

The following commands have been deprecated:

interface <port/trunk/mesh > monitor ip access-group <acl-name>in mirror < 1 - 4 name-str>

vlan < vid-#> monitor ip access-group <acl-name>inmirror < 1 - 4 name-str>

After you install and boot release K.14.01 or greater, ACL-based local and remote mirroring sessions configured on a port or VLAN interface are auto­ matically converted to classifier-based mirroring policies. For more informa­ tion, see “Migration to Release K.14.01 or Greater” on page B-37.

If you are running software release K.13.xx or earlier, ACL permit/deny criteria are supported to select IP traffic entering a switch to mirror in a local or remote session, using specified source and/or destination criteria.

Mirroring Terminology

Figure B-23shows an example of the terms used to describe the configuration of a sample local and remote mirroring session:

In the local session, inbound traffic entering Switch A is monitored on port A2 and mirrored to a destination (host), traffic analyzer 1, through exit port A15 on the switch.

A local mirroring session means that the monitored interface (A2) and exit port (A15) are on the same switch.

In the remote session, inbound traffic entering Switch A is monitored on port A1. A mirrored copy of monitored traffic is routed through the network to a remote mirroring endpoint: exit port B7 on Switch B. A destination device, traffic analyzer 2, is connected to the remote exit port.

A remote mirroring session means that:The monitored interface (A1) and exit port (B7) are on different switches.

Mirrored traffic can be bridged or routed from a source switch to a remote switch.

B-30