Configure Acl Criteria To Select Inbound; Interface Monitor Ip Access-Group; Configuring A Destination Switch In A Remote Mirroring Session - HP Aruba JL253A Management And Configuration Manual

Configures traffic direction criteria for specific traffic

Configure ACL criteria to select inbound

interface monitor ip access-group

Syntax
[no] [interface <PORT> <TRUNK> <MESH>|vlan <VID-#>] monitor ip access—group <ACL—NAME> inmirror [1–4|<NAME-STR>] [1 — 4|<NAME-STR . . .>]
Configuring a destination switch in a remote mirroring
session
CAUTION: When configuring a remote mirroring session, always configure the destination switch
first. Configuring the source switch first can result in a large volume of mirrored, IPv4-encapsulated
traffic arriving at the destination without an exit path, which can slow switch performance.
Syntax
mirror endpoint ip src-ip src-udp-port dst-ip exit-port-# no mirror endpoint ip src-ip src-udp-port dst-ip
Used on a destination switch to configure the remote endpoint of a mirroring session. The command uniquely
associates the mirrored traffic from the desired session on a monitored source with a remote exit port on the
destination switch. You must use the same set of source and destination parameters used when you configure the
same session on both the source and destination switches.
For a given mirroring session, the same src-ip , src-udp-port and dst-ip values must be entered with
the mirror endpoint ip command on the destination switch, and later with the mirror remote ip
command on the source switch.
CAUTION: Do not remove the configuration of a remote mirroring endpoint support for a given
session if there are source switches currently configured to mirror traffic to the endpoint.
src-ip
src-udp-port
dst-ip
exit-port-#
The no form of the command deletes the mirroring endpoint for the configured session on the remote destination
switch.
410
Must exactly match the src-ip address you configure on the source switch for the
remote session.
Must exactly match the src-udp-port value you configure on the source switch
for the remote session. The recommended port range is 7933 to 65535.This setting
associates the monitored source with the desired remote endpoint in the remote
session by using the same, unique UDP port number to identify the session on the
source and remote switches.
Must exactly match the dst-ip setting you configure on the source switch for the
remote session.
Exit port for mirrored traffic in the remote session, to which a traffic analyzer or IDS
is connected.
Aruba 2930F / 2930M Management and Configuration Guide
for ArubaOS-Switch 16.08