Alcatel-Lucent 7750 SR OS Service Manual page 1353

The IP filter must be defined with an exclusive scope. This prevents mirroring issues when an IP fil-
ter template is defined on multiple interfaces. The mac-filter command defines mirroring for MAC
based filters.
The ip-filter command directs packets which match the defined list of entry IDs to be mirrored to the
mirror destination referenced by the mirror-dest-service-id of the mirror-source.
The IP filter must already exist in order for the command to execute. Filters are configured in the
config>filter context. If the IP filter does not exist, an error will occur. If the filter exists but has not
been associated with a SAP or IP interface, an error is not generated but mirroring will not be enabled
(there are no packets to mirror). Once the IP filter is defined to a SAP or IP interface, mirroring is
enabled.
If the IP filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are
mirrored to the mirror destination prior to any ingress packet modifications.
If the IP filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mir-
rored to the mirror destination after all egress packet modifications.
An entry-id within an IP filter can only be mirrored to a single mirror destination. If the same entry-id
is defined multiple times, an error occurs and only the first mirror-source definition is in effect.
By default, no packets matching any IP filters are mirrored. Mirroring of IP filter entries must be
explicitly defined.
The no ip-filter command, without the entry keyword, removes mirroring on all entry-id's within the
ip-filter-id.
When the no command is executed with the entry keyword and one or more entry-id's, mirroring of
that list of entry-id's is terminated within the ip-filter-id. If an entry-id is listed that does not exist, an
error will occur and the command will not execute. If an entry-id is listed that is not currently being
mirrored, no error will occur for that entry-id and the command will execute normally.
Default
IP filter mirroring is not defined.
Parameters
ip-filter-id — The IP filter ID whose entries are mirrored. The IP filter must have a defined scope of
entry entry-id [entry-id ...] — The IP filter entries to use as match criteria for packet mirroring. The
7750 SR OS Services Guide
exclusive. If the ip-filter-id does not exist, an error will occur and the command will not execute.
Mirroring of packets will commence once the ip-filter-id is defined on a SAP or IP interface.
entry keyword begins a list of entry-id's for mirroring. Multiple entry-id entries may be speci-
fied with a single command. Each entry-id must be separated by a space. Up to <N><n> entry
IDs may be specified in a single command.
If an entry-id does not exist within the IP filter, an error occurs and the command will not exe-
cute.
If the filter's entry-id is renumbered within the IP filter definition, the old entry-id is removed but
the new entry-id must be manually added to the configuration to include the new (renumbered)
entry's criteria.
If no entry-id entries are specified in the command, mirroring will not occur for that IP filter ID.
The command will have no effect.
Mirror Services
Page 1355