Acl-Based Inbound Mirroring; Configuring Acl-Based Inbound Mirroring; Creating An Acl With A Mirroring Clause - Dell PowerConnect B-RX Configuration Manual

21

ACL-based inbound mirroring

ACL-based inbound mirroring
ACLs can be used to select traffic for mirroring from one port to another. Using this feature, you can
monitor traffic in the mirrored port using a protocol analyzer.
Considerations when configuring ACL-based inbound
mirroring
The following must be considered when configuring ACL-based Inbound Mirroring:
•
•
•
•
•
Configuring a common destination ACL mirror port for all ports of a PPCR
All ports using the same PPCR must have a Common Destination ACL mirror Port when configuring
ACL-based Inbound Mirroring. For Example, where ports 4/1 and 4/2 belong to the same PPCR, the
following configuration that configures them with different destination ACL mirror ports will fail and
generate an error message as shown.
BigIron RX(config)# interface ethernet 4/1
BigIron RX(config-if-e10000-4/1)# acl-mirror-port ethernet 6/1
BigIron RX(config-if-e10000-4/1)# interface ethernet 4/2
BigIron RX(config-if-e10000-4/2)# acl-mirror-port ethernet 6/2
Error: 4/2 and 4/1 should have the same ACL mirror port

Configuring ACL-based inbound mirroring

The following sections describe how to configure ACL-based Inbound Mirroring on a BigIron RX
router:
•
•
•
•

Creating an ACL with a mirroring clause

The mirror keyword has been added for inclusion in IPv4, L2 and IPv6 ACL clauses to direct traffic
that meets the clause to be sent to another port. In the following examples, the ACL is used to
direct IP traffic to a mirror port.
Example of ACL-based Mirroring Supported for IPv4 ACLs.
BigIron RX(config)#access-list 101 permit ip any any mirror
526
Configuring a Common Destination ACL Mirror Port for All Ports of a PPCR
Support with ACL CAM Sharing Enabled.
The mirror and copy-sflow keywords are mutually exclusive on a per-ACL clause basis.
ACL-based inbound mirroring and port-based inbound mirroring are mutually exclusive on a
per-port basis.
Mirror (analyzer) ports cannot be assigned to the 16x10G module. You can monitor traffic on
16x10 ports.
Creating an ACL with a Mirroring Clause
Applying the ACL to an Interface
Specifying a Destination Mirror Port
Specifying the Destination Mirror Port for IP Receive ACLs
BigIron RX Series Configuration Guide
53-1002253-01