Monitoring and Analyzing Switch Operation

Traffic Mirroring

Example: Remote Mirroring Using a Classifier-Based Policy

In the network shown in Figure B-50, an administrator has connected a traffic analyzer to port A15 (in VLAN 30) on switch C to monitor the TCP traffic to the server at 10.10.30.153 from workstations connected to switches A and B. Remote mirroring sessions are configured on switches A and B, and a remote mirroring endpoint on switch C. TCP traffic is routed through the network to the server from VLANs 10 and 20 on VLAN 30.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Server

 

 

 

 

 

 

 

 

 

 

 

Switch A

10.10.30.153

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

VLAN 10

 

 

 

 

 

 

 

 

 

 

Switch C

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

10.10.10.119

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Network

 

 

 

 

VLAN 30

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

10.10.30.2

 

 

 

 

 

 

 

 

 

 

 

 

Switch B

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

VLAN 20

 

 

 

 

 

 

 

 

 

 

 

A15

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

10.10.20.145

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Traffic

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Analyzer

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Figure B-50. Sample Topology in a Remote Mirroring Session

To configure this remote mirroring session using a classifier-based policy to select inbound TCP traffic on two VLAN interfaces, take the following steps:

1.On remote switch C, configure a remote mirroring endpoint using port A15 as the exit port (as described in “2. Configure a Mirroring Destination on a Remote Switch” on page B-50).

On the remote (endpoint) switch, configures the IP address and UDP port of each source switch.

Switch-C(config)# mirror

On the remote (endpoint) switch, configures the destination IP address and remote exit port.

10.10.10.119 9300 10.10.30.2 port a15
Switch-C(config)# mirror endpoint 10.10.20.145 930010.10.30.2 port a15

Figure B-51. Configuring a Remote Mirroring Endpoint: Remote Switch and Exit Port

B-88