Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Chapter 1 Mirroring Configuration When configuring mirroring, go to these sections for information you are interested in: Overview Mirroring Supported by S7500 Mirroring Configuration 1.1 Overview Mirroring refers to the process of copying packets that meet the specified rules to a destination port.
Page 3
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Remote-probe VLAN Remote-probe VLAN Source Source Intermediate Switch Intermediate Switch Switch Switch Destination Destination Switch Switch Trunk port Trunk port Reflector port Reflector port Source Port Source Port...
Page 4
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Table 1-1 Ports involved in the mirroring operation Switch Ports involved Function Port to be mirrored; copies user data packets to the specified reflector port Source port through local port mirroring.
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Caution: To ensure the normal packet mirroring, you are not recommended to perform any of the following operations on the remote-probe VLAN: Configuring a source port to the remote-probe VLAN that is used by the local mirroring group;...
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration 1.2 Mirroring Supported by S7500 Table 1-2 Mirroring functions supported by S7500 and related commands Related Function Specifications Related command section mirroring-group Support port Configuring mirroring-group mirroring-port...
Page 7
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration II. Configuring port mirroring in Ethernet port view To do… Use the command… Remarks Enter system view — system-view Create a port mirroring mirroring-group group-id Required group...
Configuration procedure 2: <H3C> system-view [H3C] mirroring-group 1 local [H3C] mirroring-group 1 monitor-port GigabitEthernet 2/0/4 [H3C] mirroring-group 1 mirroring-port GigabitEthernet 2/0/1 both 1.3.2 Configuring Remote Port Mirroring I. Configuration prerequisites The source switch, intermediate switch, and the destination switch have been determined.
Page 9
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration To do… Use the command… Remarks Enter port view of ports that connected to the interface interface-type — intermediate switch or interface-number destination switch Required Configure the current port...
Page 10
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Note: To mirror tagged packets, you need to configure VLAN VPN on the reflector port. The reflector port cannot forward traffics as a normal port. Therefore, it is recommended that you use a idle and in-down-state port as the reflector port, and be careful to not add other settings on this port.
Page 11
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Note: When a switch acts as a remote port mirroring intermediate switch, to realize the data mirroring successfully, you are recommended to configure redirection on the inbound interface and redirect all the packets in the remote-probe VLAN to the corresponding outbound interface.
Page 12
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration To do… Use the command… Remarks Required The destination port for remote mirroring must be of the Access type. LACP and STP must be disabled mirroring-group group-id on this port.
Page 15
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration II. Configuration procedure To do… Use the command… Remarks Enter system view — system-view mirroring-group group-id Create a mirroring group Required local Required mirroring-group group-id LACP and STP cannot be...
Page 16
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Table 1-4 Combined application of ACLs on LPUs other than type A. Combination mode Form of acl-rule Apply all rules in an IP type ACL ip-group { acl-number | acl-name }...
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration 1.3.4 Configuring Remote Traffic Mirroring I. Configuration prerequisites ACLs for identifying traffics have been defined. For defining ACLs, refer to the description on the ACL module in this manual.
Page 18
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration To do… Use the command… Remarks Required The remote reflector port must be Access port and LACP and STP must be disabled on the remote mirroring-group Configure the remote reflector port.
Page 19
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Note: If you want to mirror the tagged packets, you need to configure VLAN VPN on the reflector port. For the reflector port can not forward traffic as a normal port does, you are recommended to configure the port that is not in use to be the reflector port and not to perform other configurations on this port.
Page 20
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration Switch C Switch B Switch A GE2/0/1 2/0/1 GE2/0/2 GE2/0/ 1 GE2/0/2 GE2/0/2 10.1.1.1/24 Data detect device Figure 1-4 Network diagram for remote traffic mirroring Configuration procedure # Configure Switch A.
Page 21
Operation Manual – Mirroring H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration [H3C-GigabitEthernet2/0/2] port link-type trunk [H3C-GigabitEthernet2/0/2] port trunk permit vlan 10 # Configure Switch C <H3C> system-view [H3C] acl number 2000 [H3C-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255 [H3C-acl-basic-2000] rule deny source any...
Need help?
Do you have a question about the S7500 Series and is the answer not in the manual?
Questions and answers