Monitoring and Analyzing Switch Operation

Traffic Mirroring

D e p r e c a t i o n o f A C L - b a s e d

Tr a f f i c

S e l e c t i o n

In software release K.14.01 or greater, advanced classifier-based policies replace ACL-based traffic selection in mirroring configurations.

Like ACL-based traffic-selection criteria, classifier-based service policies apply only to inbound traffic flows and are configured on a per-port or per- VLAN basis. In a mirroring session, classifier-based service policies do not support:

■The mirroring of outbound traffic exiting the switch■The use of meshed ports as monitored (source) interfaces

Classifier-based mirroring is not designed to work with other traffic-selection methods in a mirroring session applied to a port or VLAN interface:

■If a mirroring session is already configured with one or more traffic- selection criteria (MAC-based or all inbound and/or outbound traffic), the session does not support the addition of a classifier-based policy.

■If a mirroring session is configured to use a classifier-based mirroring policy, no other traffic-selection criteria (MAC-based or all inbound and/ or outbound traffic) can be added to the session on the same or a different interface.

Classifier-based mirroring policies provide greater precision when analyzing and debugging a network traffic problem. Using multiple match criteria, you can finely select and define the classes of traffic that you want to mirror on a traffic analyzer or IDS device.

For more information on how to configure and use classifier-based service policies, refer to the “Classifier-Based Software Configuration” chapter in the Advanced Traffic Management Guide.

For an example of a mirroring configuration that uses a classifier-based service policy to select traffic on a monitored interface, see “Example: Remote Mirroring Using a Classifier-Based Policy” on page B-88.

Classifier-Based Mirroring Configuration

To use the classifier-based model to configure a mirroring policy and apply it to a selected class of traffic on a port or VLAN interface, follow these steps:

1.Evaluate the types of traffic in your network and identify the traffic types that you want to mirror.

B-67