Local Port Mirroring; Remote Port Mirroring - H3C S5600 SERIES Operation Manual

Hide thumbs Also See for S5600 SERIES:

Table of Contents

Local Port Mirroring

In local port mirroring, packets passing through one or more source ports of a device are

copied to the destination port on the same device for packet analysis and monitoring. In

this case, the source ports and the destination port must be located on the same device.

Remote port mirroring does not require the source and destination ports to be on the same

device. The source and destination ports can be located on multiple devices across the

network. This allows an administrator to monitor traffic on remote devices conveniently.

To implement remote port mirroring, a special VLAN, called remote-probe VLAN, is used.

All mirrored packets are sent from the reflector port of the source switch to the monitor port

on the destination switch through the remote-probe VLAN.

implementation of remote port mirroring.

Figure 1-2 Remote port mirroring application

The switches involved in remote port mirroring function as follows:

Source switch

The source switch is the device where the monitored port is located. It copies traffic

passing through the monitored port to the reflector port. The reflector port then transmits

the traffic to an intermediate switch (if any) or destination switch through the remote-probe

Intermediate switch

Intermediate switches are switches between the source switch and destination switch on

the network. An intermediate switch forwards mirrored traffic flows to the next intermediate

switch or the destination switch through the remote-probe VLAN. No intermediate switch is

present if the source and destination switches directly connect to each other.

Destination switch

The destination switch is where the monitor port is located. The destination switch

forwards the mirrored traffic flows it received from the remote-probe VLAN to the

monitoring device through the destination port.

illustrates the

Table of Contents