Remote Mirroring Destination Using A Vlan Interface And An Acl For Mirroring Criteria - ProCurve 6200yl Management And Configuration Manual

Monitoring and Analyzing Switch Operation
Traffic Mirroring
B-64
Remote Mirroring Destination Using a VLAN Interface
and an ACL for Mirroring Criteria
In the network shown in figure B-29, the system operator has connected a
traffic analyzer to port A15 (in VLAN 30) on switch D, and wants to monitor
the Telnet traffic to the server at 10.10.30.153 from the workstations on
switches A and B. The operator does this by configuring remote mirroring
sessions on these two switches, and a mirroring destination on switch D.
(Telnet traffic to the server from sources on switch C is not of interest, and
routing is enabled on switches C and D.) Note that the port on which the
mirrored traffic enters switch D, port A10 in this example, must be in the same
VLAN as the configured exit port.
Switch A
VLAN 10
10.10.10.119
Switch B
VLAN 20
10.10.20.145
Figure B-29. Example Topology for Remote Mirroring from a VLAN Interface
The operator does the following:
1. On switch D, configure a mirroring destination using port A15 In VLAN 30
as the exit port.
2. Configure switches A and B with mirroring sessions to the destination
interface on switch D. Use a randomly selected UDP port number of 9300.
(For information on selecting UDP port numbers to use for remote
mirroring, refer to the syntax description on page B-42.) You can use the
same random UDP port number on different interfaces because the
identity of the mirroring source is the combination of the unique interface
identity and the UDP port number, and not the UDP port number alone.
3. Configure an ACL on switches A and B to select inbound Telnet traffic
intended for the server at 10.10.30.153.
Switch C
VLAN 10
10.10.10.1
VLAN 20
10.10.20.1
Switch D
VLAN 30
10.10.30.1
VLAN 30
A10
10.10.30.2
VLAN 40
10.10.40.1
Server
10.10.30.153
Traffic
A15
Analyzer