Mac-Based Mirroring; Vlan-Based Mirroring - 3Com WX3000 Series Operation Manual

Table 1-1 Ports involved in the mirroring operation
Switch
Source switch
Intermediate
switch
Destination switch
Do not configure a default VLAN, a management VLAN, or a dynamic VLAN as the remote-probe
VLAN.
Configure all ports connecting the devices in the remote-probe VLAN as trunk ports, and ensure
the Layer 2 connectivity from the source switch to the destination switch over the remote-probe
VLAN.
Do not configure a Layer 3 interface for the remote-probe VLAN, run other protocol packets, or
carry other service packets on the remote-prove VLAN and do not use the remote-prove VLAN as
the voice VLAN and protocol VLAN; otherwise, remote port mirroring may be affected.

MAC-Based Mirroring

With MAC-based mirroring configured, a device mirrors packets matching the specified MAC address to
the destination port, including:
Packets with the source MAC address matching the specified MAC address.
Packets with the destination MAC address matching the specified MAC address.
Compared with port mirroring, MAC-based mirroring is more precise and it can be used to monitor
packets of specific device in the network.

VLAN-Based Mirroring

With VLAN-based mirroring configured, a device mirrors packets received on all ports in the specified
VLAN to the destination port.
Compared with port mirroring, VLAN-based mirroring is more extensive and it can be used to monitor
packets of a specific VLAN or VLANs in the network.
Ports involved
Source port
Reflector port
Trunk port
Trunk port
Trunk port
Destination port
1-3
Function
Port monitored. It copies packets to the reflector port
through local port mirroring. There can be more than
one source port.
Receives packets from the source port and
broadcasts the packets in the remote-probe VLAN.
Sends mirrored packets to the intermediate switch or
the destination switch.
Sends mirrored packets to the destination switch.
Two trunk ports are necessary for the intermediate
switch to connect the devices at the source switch
side and the destination switch side.
Receives remote mirrored packets.
Receives packets forwarded from the trunk port and
transmits the packets to the data detection device.