Port Mirroring Model
592
G8264CS Application Guide for ENOS 8.4
The G8264CS supports a "many to one" mirroring model. As shown in Figure
selected traffic for ports 1 and 2 is being monitored by port 3. In the example, both
ingress traffic and egress traffic on port 2 are copied and forwarded to the monitor.
However, port 1 mirroring is configured so that only ingress traffic is copied and
forwarded to the monitor. A device attached to port 3 can analyze the resulting
mirrored traffic.
Figure 62. Mirroring Ports
Mirrored Ports
Monitor Port
Ingress
Connected to
Both
Traffic
sniffer device
1
2
3
4
Specified traffic is copied
and forwarded to Monitor Port
The G8264CS supports four monitor ports. Each monitor port can receive mirrored
traffic from any number of target ports.
Enterprise NOS does not support "one to many" or "many to many" mirroring
models where traffic from a specific port traffic is copied to multiple monitor ports.
For example, port 1 traffic cannot be monitored by both port 3 and 4 at the same
time, nor can port 2 ingress traffic be monitored by a different port than its egress
traffic.
Ingress and egress traffic is duplicated and sent to the monitor port after
processing.
62,