Acls, Aces, And Port Mirroring; Port Mirroring Considerations And Restrictions - Avaya 8800 Troubleshooting Manual

Troubleshooting tool fundamentals
power calculation tool. You can find the calculator at
the ERS 8800/8600 documentation.
Thorough engineering testing indicates that starting from release 7.1, RS modules can be
replaced with their 8800 series equivalents with no loss of configuration. For example, you can
replace an 8648GTRS module with an 8848GT module, on a chassis, with no loss of
configuration.
Important:
You can only replace a module with another module of the same type. For example, you
cannot replace a 48– port copper module with a fiber module. You can replace a copper
module with another copper module, or a fiber module with another fiber module.

ACLs, ACEs, and port mirroring

For R series modules, you can configure the ACL global action or the ACE debug action to
mirror. If you use the global action, mirroring applies to all ACEs that match in an ACL.
For Release 5.0. to decouple flow-based mirrors from port-based mirrors, ACEs use a new
parameter called debug mirror enable. In the ACE, you can specify the egress ports, the egress
MLT-ID, and the egress VLAN.
Use filters to reduce the amount of mirrored traffic. To use filters with port mirroring for an R
or RS/8800 module, you must use an ACL-based filter. Apply an ACL to the mirrored port in
the egress, ingress, or both directions. Traffic patterns that match the ACL/ACE with an action
of permit are forwarded to the destination and to the mirroring port. Traffic patterns that match
an ACE with an action of drop (deny) are not forwarded to the destination, but still reach the
mirroring port For example, for an ACL/ACE with a match action of permit and debug mirroring
enabled, packets are mirrored to the specified mirroring destination on the ACE. If a port or
VLAN filter is enabled, that filter is used as the mirroring filter.
You can specify more than one mirroring destination by using multiple ACEs. Use each ACE
to specify a different destination.
You cannot configure a port-based and a flow-based mirroring filter on the same port. If such
a case occurs, then the flow-based mirror takes precedence.
For more information about configuring ACLs and ACEs, see Avaya Ethernet Routing Switch
8800/8600 Configuration — QoS and IP Filtering, NN46205-507.

Port mirroring considerations and restrictions

With R, RS, and 8800 modules, you can configure the Ethernet Routing Switch 8800/8600 to
monitor both ingress and egress traffic.
Mirrored traffic shares ingress queue, egress queue, and fabric bandwidth with normal traffic
and can impact normal traffic. Therefore, enable these features only for troubleshooting,
34 Troubleshooting
Comments? infodev@avaya.com
www.avaya.com/support with the rest of
July 2013