Mirroring - Siemens SCALANCE XM-400 Configuration Manual

In this example the data traffic from the customer networks A, B and C is forwarded over the
provider network using a VLAN tunnel. The frames from customer network A are tagged with
a VLAN ID. The frames from customer network B are tagged with a priority. The frames from
customer network C are untagged.
When the frames reach the relevant access port, they are expanded by a tag with the port VID
of the access port and tunneled through the provider network. As soon as the frames leave
the provider network, the outer VLAN tag (PVID) is removed again. The frames are forwarded
in their original form. The priority of the frame is retained.
4.5

Mirroring

The device provides the option of simultaneously channeling incoming or outgoing data
streams via other interfaces for analysis or monitoring. This has no effect on the monitored
data streams. This procedure is known as mirroring. In this menu section, you enable or disable
mirroring and set the parameters.
Mirroring ports
Mirroring a port means that the data traffic at a port (mirrored port) of the IE switch is copied
to another port (monitor port). You can mirror one or more ports to a monitor port.
If a protocol analyzer is connected to the monitor port, the data traffic at the mirrored port can
be recorded without interrupting the connection. This means that the data traffic can be
investigated without being affected. This is possible only if a free port is available on the device
as the monitor port.
RSPAN
With RSPAN (Remote Switched Port Analyzer) you can forward the data traffic of a mirroring
session to the monitor port via a VLAN. On the RSPAN VLAN, the mirrored data traffic is not
disturbed by other data.
Frames addressed directly to the monitoring source switch cannot be mirrored on the RSPAN
destination port.
SCALANCE XM-400/XR-500 Web Based Management (WBM)
Configuration Manual, 05/2017, C79000-G8976-C248-12
Technical basics
4.5 Mirroring
43