Configuring Port Mirroring - Huawei Quidway S3900 Series Operation Manual

Operation Manual – Mirroring
Quidway S3900 Series Ethernet Switches
Table 1-5 Combined application of ACLs
Apply all rules in an IP type ACL (either a
basic or an advanced ACL) separately
Apply one rule in an IP type ACL separately
Apply all rules in a Layer 2 ACL separately
Apply one rule in a Layer 2 ACL separately
Apply one rule in a user-defined ACL
separately
Apply all rules in a user-defined ACL
separately
Apply one rule in an IP type ACL and one
rule in a Layer 2 ACL simultaneously
III. Configuration example
1) Network requirements:
GigabitEthernet 1/1/1 on the switch is connected to the 10.1.1.1/24 network
segment.
Mirror the packets from the 10.1.1.1/24 network segment to GigabitEthernet 1/1/4,
the destination port.
2) Configuration procedure:
<Quidway> system-view
[Quidway] acl number 2000
[Quidway-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[Quidway-acl-basic-2000] rule deny source any
[Quidway-acl-basic-2000] quit
[Quidway] interface gigabitEthernet 1/1/4
[Quidway-GigabitEthernet1/1/4] monitor-port
[Quidway-GigabitEthernet1/1/4] quit
[Quidway] interface gigabitEthernet 1/1/1
[Quidway-GigabitEthernet1/1/1]
monitor-interface

1.3.2 Configuring Port Mirroring

I. Configuration prerequisites
The source port is specified and whether the packets to be mirrored are inbound or
outbound is specified: inbound: only mirrors the packets received via the port;
Combination mode
Huawei Technologies Proprietary
Chapter 1 Mirroring Configuration
ip-group acl-number
ip-group acl-number rule rule-id
link-group acl-number
link-group acl-number rule rule-id
user-group acl-number
user-group acl-number rule rule-id
ip-group acl-number rule rule-id
link-group acl-number rule rule-id
mirrored-to inbound
1-6
Form of acl-rule
ip-group 2000