H3C S7500 Series Operation Manual
H3C S7500 Series Operation Manual

H3C S7500 Series Operation Manual

Mirroring
Hide thumbs Also See for S7500 Series:

Advertisement

Operation Manual - Mirroring
H3C S7500 Series Ethernet Switches
Chapter 1 Mirroring Configuration .............................................................................................. 1-1
1.1 Overview ............................................................................................................................ 1-1
1.1.1 Port Mirroring........................................................................................................... 1-1
1.1.2 Remote Port Mirroring ............................................................................................. 1-1
1.1.3 Traffic Mirroring ....................................................................................................... 1-4
1.1.4 Remote Traffic Mirroring ......................................................................................... 1-4
1.2 Mirroring Supported by S7500........................................................................................... 1-5
1.3 Mirroring Configuration ...................................................................................................... 1-5
1.3.1 Configuring Port Mirroring ....................................................................................... 1-5
1.3.2 Configuring Remote Port Mirroring ......................................................................... 1-7
1.3.3 Configuring Traffic Mirroring.................................................................................. 1-13
1.3.4 Configuring Remote Traffic Mirroring .................................................................... 1-16

Table of Contents

i
Table of Contents

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the S7500 Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for H3C S7500 Series

  • Page 1: Table Of Contents

    Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 Mirroring Configuration ....................1-1 1.1 Overview ..........................1-1 1.1.1 Port Mirroring......................1-1 1.1.2 Remote Port Mirroring ..................... 1-1 1.1.3 Traffic Mirroring ....................... 1-4 1.1.4 Remote Traffic Mirroring ..................
  • Page 2: Chapter 1 Mirroring Configuration

    Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Chapter 1 Mirroring Configuration When configuring mirroring, go to these sections for information you are interested in: Overview Mirroring Supported by S7500 Mirroring Configuration 1.1 Overview Mirroring refers to the process of copying packets that meet the specified rules to a destination port.
  • Page 3 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Remote-probe VLAN Remote-probe VLAN Source Source Intermediate Switch Intermediate Switch Switch Switch Destination Destination Switch Switch Trunk port Trunk port Reflector port Reflector port Source Port Source Port...
  • Page 4 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Table 1-1 Ports involved in the mirroring operation Switch Ports involved Function Port to be mirrored; copies user data packets to the specified reflector port Source port through local port mirroring.
  • Page 5: Traffic Mirroring

    Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Caution: To ensure the normal packet mirroring, you are not recommended to perform any of the following operations on the remote-probe VLAN: Configuring a source port to the remote-probe VLAN that is used by the local mirroring group;...
  • Page 6: Mirroring Supported By S7500

    Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration 1.2 Mirroring Supported by S7500 Table 1-2 Mirroring functions supported by S7500 and related commands Related Function Specifications Related command section mirroring-group Support port Configuring mirroring-group mirroring-port...
  • Page 7 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration II. Configuring port mirroring in Ethernet port view To do… Use the command… Remarks Enter system view — system-view Create a port mirroring mirroring-group group-id Required group...
  • Page 8: Configuring Remote Port Mirroring

    Configuration procedure 2: <H3C> system-view [H3C] mirroring-group 1 local [H3C] mirroring-group 1 monitor-port GigabitEthernet 2/0/4 [H3C] mirroring-group 1 mirroring-port GigabitEthernet 2/0/1 both 1.3.2 Configuring Remote Port Mirroring I. Configuration prerequisites The source switch, intermediate switch, and the destination switch have been determined.
  • Page 9 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration To do… Use the command… Remarks Enter port view of ports that connected to the interface interface-type — intermediate switch or interface-number destination switch Required Configure the current port...
  • Page 10 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Note: To mirror tagged packets, you need to configure VLAN VPN on the reflector port. The reflector port cannot forward traffics as a normal port. Therefore, it is recommended that you use a idle and in-down-state port as the reflector port, and be careful to not add other settings on this port.
  • Page 11 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Note: When a switch acts as a remote port mirroring intermediate switch, to realize the data mirroring successfully, you are recommended to configure redirection on the inbound interface and redirect all the packets in the remote-probe VLAN to the corresponding outbound interface.
  • Page 12 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration To do… Use the command… Remarks Required The destination port for remote mirroring must be of the Access type. LACP and STP must be disabled mirroring-group group-id on this port.
  • Page 13 [H3C-GigabitEthernet2/0/1] port link-type trunk [H3C-GigabitEthernet2/0/1] port trunk permit vlan 10 [H3C-GigabitEthernet2/0/1] quit [H3C] mirroring-group 1 remote-source [H3C] mirroring-group 1 mirroring-port GigabitEthernet 2/0/2 inbound [H3C] mirroring-group 1 reflector-port GigabitEthernet 2/0/3 [H3C] mirroring-group 1 remote-probe vlan 10 [H3C] display mirroring-group remote-source mirroring-group 1:...
  • Page 14: Configuring Traffic Mirroring

    Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration reflector port: GigabitEthernet2/0/3 remote-probe vlan: 10 # Configure Switch B. <H3C> system-view [H3C] vlan 10 [H3C-vlan10] remote-probe vlan enable [H3C-vlan10] quit [H3C] interface GigabitEthernet 2/0/1 [H3C-GigabitEthernet2/0/1] port link-type trunk...
  • Page 15 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration II. Configuration procedure To do… Use the command… Remarks Enter system view — system-view mirroring-group group-id Create a mirroring group Required local Required mirroring-group group-id LACP and STP cannot be...
  • Page 16 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Table 1-4 Combined application of ACLs on LPUs other than type A. Combination mode Form of acl-rule Apply all rules in an IP type ACL ip-group { acl-number | acl-name }...
  • Page 17: Configuring Remote Traffic Mirroring

    Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration 1.3.4 Configuring Remote Traffic Mirroring I. Configuration prerequisites ACLs for identifying traffics have been defined. For defining ACLs, refer to the description on the ACL module in this manual.
  • Page 18 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration To do… Use the command… Remarks Required The remote reflector port must be Access port and LACP and STP must be disabled on the remote mirroring-group Configure the remote reflector port.
  • Page 19 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Note: If you want to mirror the tagged packets, you need to configure VLAN VPN on the reflector port. For the reflector port can not forward traffic as a normal port does, you are recommended to configure the port that is not in use to be the reflector port and not to perform other configurations on this port.
  • Page 20 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Switch C Switch B Switch A GE2/0/1 2/0/1 GE2/0/2 GE2/0/ 1 GE2/0/2 GE2/0/2 10.1.1.1/24 Data detect device Figure 1-4 Network diagram for remote traffic mirroring Configuration procedure # Configure Switch A.
  • Page 21 Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration [H3C-GigabitEthernet2/0/2] port link-type trunk [H3C-GigabitEthernet2/0/2] port trunk permit vlan 10 # Configure Switch C <H3C> system-view [H3C] acl number 2000 [H3C-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255 [H3C-acl-basic-2000] rule deny source any...

Table of Contents