H3C S7500 Series Manuale utente

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 Mirroring Configuration ..............................................................................................1-1

1.1 Overview............................................................................................................................1-1

1.1.1 Port Mirroring...........................................................................................................1-1

1.1.2 Remote Port Mirroring.............................................................................................1-1

1.1.3 Traffic Mirroring.......................................................................................................1-4

1.1.4 Remote Traffic Mirroring .........................................................................................1-4

1.2 Mirroring Supported by S7500...........................................................................................1-5

1.3 Mirroring Configuration......................................................................................................1-5

1.3.1 Configuring Port Mirroring.......................................................................................1-5

1.3.2 Configuring Remote Port Mirroring .........................................................................1-7

1.3.3 Configuring Traffic Mirroring.................................................................................. 1-13

1.3.4 Configuring Remote Traffic Mirroring.................................................................... 1-16

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-1

Chapter 1 Mirroring Configuration

When configuring mirroring, go to these sections for information you are interested in:

zOverview

zMirroring Supported by S7500

zMirroring Configuration

1.1 Overview

Mirroring refers to the process of copying packets that meet the specified rules to a

destination port. Generally, a destination port is connected to a data detect device,

through which users can analyze the mirrored packets for monitoring and

troubleshooting the network.

Data detect device

Network

Source port

Destination port

Figure 1-1 Mirrorin

1.1.1 Port Mirroring

Port mirroring refers to the process of copying the packets received or sent by the

specified port to the specified local port.

1.1.2 Remote Port Mirroring

Remote port mirroring eliminates the limitation that the source port and the destination

port must be located on the same switch. This feature makes it possible for the source

port and the destination port to be located on different devices in the network, and

facilitates the network administrator to manage remote switches.

The implementation of remote port mirroring is illustrated in the following figure:

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-2

Source

Switch Intermediate Switch

Reflector port

Source Port

Destination

Switch

Trunkport

Destination port

Remote-probe VLAN

Source

Switch Intermediate Switch

Reflector port

Source Port

Destination

Switch

Trunkport

Destination port

Remote-probe VLAN

Figure 1-2 Remote port mirroring implementation

With the remote port mirroring function enabled, a switch plays one of the following

three roles.

zSource switch: The switch to which the monitored port belongs. The source switch

copies the mirrored traffic flows to the remote-probe VLAN, and then through

Layer 2 forwarding, the mirrored flows are sent to an intermediate switch or

destination switch.

zIntermediate switch: Switches between the source switch and destination switch

on the network. An intermediate switch forwards mirrored flows to the next

intermediate switch or the destination switch. No intermediate switch is required if

a direct connection exists between the source and destination switches.

zDestination switch: The switch to which the destination port for remote mirroring

belongs. It forwards mirrored flows it received from the remote-probe VLAN to the

monitoring device through the destination port.

Note:

When a switch acts as an intermediate switch or destination switch for the remote

mirroring, to realize the data mirroring successfully, you are recommended to configure

redirection on the inbound interface and redirect all the packets in the remote-probe

VLAN to the corresponding outbound interface (intermediate switch) or mirroring

destination port (destination switch).

Table 1-1 describes how the ports on various switches are involved in the mirroring

operation.

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-3

Table 1-1 Ports involved in the mirroring operation

Switch Ports involved Function

Source port

Port to be mirrored; copies user data

packets to the specified reflector port

through local port mirroring. There can be

more than one source port.

Reflector port Receives user data packets that are

mirrored on a local port.

Source switch

Trunk port Sends mirrored packets to the intermediate

switch or the destination switch.

Intermediate

switch Trunk port

Sends mirrored packets to the destination

switch.

Two Trunk ports are necessary for the

intermediate switch to be connected to

devices that are connected to the source

switch and the destination switch.

Trunk port Receives remote mirrored packets.

Destination

switch Destination port Monitors remote mirrored packets

To implement remote port mirroring, you need to define a special VLAN, called

remote-probe VLAN, on all the three types of switches. In this VLAN, no normal data

but only mirrored packets are transmitted. All mirrored packets will be transferred to the

specified port of the destination switch from the source switch through this VLAN. Thus,

the destination switch can monitor the port packets sent from the remote ports of the

source switch. Remote-probe VLAN requires that:

zYou are recommended to configure all ports connecting the devices in

remote-probe VLAN as Trunk ports.

zThe default VLAN and management VLAN cannot be configured as remote-probe

VLAN.

zRequired configurations are performed to ensure Layer 2 connectivity between the

source and destination switches over the remote-probe VLAN.

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-4

Caution:

To ensure the normal packet mirroring, you are not recommended to perform anyof the

following operations on the remote-probe VLAN:

zConfiguring a source port to the remote-probe VLAN that is used by the local

mirroring group;

zConfiguring a Layer 3 interface for the remote-probe VLAN;

zRunning other protocol packets, or bearing other service packets;

zUsing remote-probe VLAN as a special type of VLAN, such as voice VLAN or

protocol VLAN;

zConfiguring other VLAN-related functions.

1.1.3 Traffic Mirroring

Traffic mirroring maps traffic flows that match specific ACL rules to the specified local

port for packetanalysis and monitoring. Before configuring traffic mirroring, you need to

define ACL rules required for flow identification.

1.1.4 Remote Traffic Mirroring

Remote traffic mirroring copies traffic flows that match specific ACLs to the reflector

port of the specified mirroring group. Then, after corresponding configurations of

remote port mirroring, the matching traffic flows are finally copied to the specified ports

of other switches. Similar to configuring local traffic mirroring, you need to define ACL

rules required for flow identification first. Otherwise, you need to complete all

configurations of remote port mirroring (except the configuration of source port for

mirroring).

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-5

1.2 Mirroring Supported by S7500

Table 1-2 Mirroring functions supported by S7500 and related commands

Function Specifications Related command Related

section

Support port

mirroring

mirroring-group

mirroring-group mirroring-port

mirroring-group monitor-port

Configuring

Port Mirroring

Support remote

port mirroring

mirroring-group

mirroring-group mirroring-port

mirroring-group monitor-port

mirroring-group reflector-port

mirroring-group remote-probe

vlan

remote-probe vlan enable

Configuring

Remote Port

Mirroring

Support traffic

mirroring

mirroring-group

mirroring-group mirroring-port

mirroring-group monitor-port

mirrored-to

Configuring

Traffic

Mirroring

Support remote

traffic mirroring

mirroring-group

mirroring-group monitor-port

mirroring-group reflector-port

mirroring-group remote-probe

vlan

remote-probe vlan enable

mirrored-to

Configuring

Remote

Traffic

Mirroring

1.3 Mirroring Configuration

For mirroring features, see section Overview.

1.3.1 Configuring Port Mirroring

I. Configuration prerequisites

zThe source port is specified and whether the packets to be mirrored are inbound or

outbound is specified.

zThe destination port is specified.

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-6

II. Configuring port mirroring in Ethernet port view

To do… Use the command… Remarks

Enter system view system-view —

Create a port mirroring

group mirroring-group group-id

local Required

Enter Ethernet port view

of the destination port interface interface-type

interface-number —

Define the current port as

the destination port mirroring-group group-id

monitor-port

Required

LACP and STP must be

disabled on the

destination port

Exit current view quit —

Enter Ethernet port view

of the source port interface interface-type

interface-number —

Configure the source port

and specify the direction

of the packets to be

mirrored

mirroring-group group-id

mirroring-port { both |

inbound | outbound } Required

Display parameter

settings of the mirroring display mirroring-group

{ all | local }

Required

This command can be

executed in any view.

III. Configuring port mirroring in system view

To do… Use the command… Remarks

Enter system view system-view —

Create a port mirroring

group mirroring-group group-id

local Required

Configure the destination

port

mirroring-group group-id

monitor-port

Required

LACP and STP must be

disabled on the

destination port.

Configure the source port

and specify the direction

of the packets to be

mirrored

mirroring-group group-id

mirroring-port

mirroring-port-list { both |

inbound | outbound }

Required

Display parameter

settings of the mirroring display mirroring-group

{ all | local }

Optional

This command can be

executed in any view.

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-7

IV. Configuration Example

zThe source port is GigabitEthernet 2/0/1. Mirror all packets received and sent via

this port.

zThe destination port is GigabitEthernet 2/0/4.

1) Configuration procedure 1:

<H3C> system-view

[H3C] mirroring-group 1 local

[H3C] interface GigabitEthernet 2/0/4

[H3C-GigabitEthernet2/0/4] mirroring-group 1 monitor-port

[H3C-GigabitEthernet2/0/4] quit

[H3C] interface GigabitEthernet 2/0/1

[H3C-GigabitEthernet2/0/1] mirroring-group 1 mirroring-port both

2) Configuration procedure 2:

<H3C> system-view

[H3C] mirroring-group 1 local

[H3C] mirroring-group 1 monitor-port GigabitEthernet 2/0/4

[H3C] mirroring-group 1 mirroring-port GigabitEthernet 2/0/1 both

1.3.2 Configuring Remote Port Mirroring

I. Configuration prerequisites

zThe source switch, intermediate switch, and the destination switch have been

determined.

zThe source port, the reflector port, the destination port, and the remote-probe

VLAN have been determined.

zRequired configurations are performed to ensure Layer 2 connectivity between the

source and destination switches over the remote-probe VLAN.

zThe direction of the packets to be monitored has been determined.

zThe remote-probe VLAN is enabled.

II. Configuring remote port mirroring on the source switch

To do… Use the command… Remarks

Enter system view system-view —

Create a VLAN and enter

its VLAN view vlan vlan-id vlan-id is the ID of the

destination remote-probe

VLAN.

Define the current VLAN

as a remote-probe VLAN remote-probe vlan

enable Required

Exit current view quit —

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-8

To do… Use the command… Remarks

Enter port view of ports

that connected to the

intermediate switch or

destination switch

interface interface-type

interface-number —

Configure the current port

as a trunk port port link-type trunk Required

By default, the type of the

port is access.

Configure Trunk port to

permit packets from the

remote-probe VLAN

port trunk permit vlan

remote-probe-vlan-id

Required

This setting is required for

source switch ports that

connected with the

intermediate switch or

destination switch.

Exit current view quit —

Configure a remote

source mirroring group mirroring-group group-id

remote-source Required

Configure a source port

for remote mirroring

mirroring-group group-id

mirroring-port

mirroring-port-list { both |

inbound | outbound }

Required

Configure a remote

reflector port

mirroring-group group-id

reflector-port

Required

The remote reflector port

must be of the Access

type. LACP and STP must

be disabled on this port.

After a port is configured

as a reflector port, the

switch does not allow you

to perform any of the

following configurations:

zChanging the port type

and its default VLAN

zAdd it to another VLAN

Configure the

remote-probe VLAN for

the remote source

mirroring group

mirroring-group group-id

remote-probe vlan

remote-probe-vlan-id Required

Display the configuration

of the remote source

mirroring group

display mirroring-group

remote-source

Optional

This command can be

executed in any view.

Operation Manual – Mirroring

H3C S7500 Series Ethernet Switches Chapter 1 Mirroring Configuration

1-9

Note:

zTo mirror tagged packets, you need to configure VLAN VPN on the reflector port.

zThe reflector port cannot forward traffics as a normal port. Therefore, it is

recommended that you use a idle and in-down-state port as the reflector port, and

be careful to not add other settings on this port.

zBe sure not to configure a port used to connect the intermediate and destination

switches as the mirroring source port. Otherwise traffic disorder may occur in the

network.

III. Configuring remote port mirroring on the intermediate switch

To do… Use the command… Remarks

Enter system view system-view —

Create a remote-probe VLAN

and enter VLAN view vlan vlan-id vlan-id is the ID of the

remote-probe VLAN.

Define the current VLAN as a

remote-probe VLAN remote-probe vlan

enable Required

Exit current view quit —

Enter Ethernet port view of the

port through which the

intermediate switch is

connected to the source

switch, destination switch or

another intermediate switch

interface

interface-type

interface-number —

Configure the current port as a

trunk port port link-type trunk Required

By default, the type of the

port is access.

Configure Trunk port to permit

packets from the

remote-probe VLAN

port trunk permit

vlan

remote-probe-vlan-id

Required

This configuration is

necessary for ports on the

intermediate switch that

are connected to the

source switch or the

destination switch.

Altri manuali per S7500 Series

Indice

Altri manuali H3C Interruttore

H3C

H3C S3100V2 Series Manuale utente

H3C

H3C S9500 Series Manuale utente

H3C

H3C S6550X-HI Series Manuale di installazione

H3C

H3C S3100 Series Istruzioni per l'installazione

H3C

H3C S6520-SI Series Manuale di installazione

H3C

H3C S12500X-AF Series Manuale utente

H3C

H3C LS-S5600-26C-OVS Manuale utente

H3C

H3C S9500 Series Manuale utente

H3C

H3C S3100-SI Series Manuale utente

H3C

H3C S3100 Series Manuale utente

H3C

H3C S6890 Series Guida rapida

H3C

H3C S9500 Series Istruzioni per l'installazione

H3C

H3C Mini Series Manuale utente

H3C

H3C S5500-SI Series Manuale utente

H3C

H3C S6890 Series Manuale di installazione

H3C

H3C S3610 Series Manuale utente

H3C

H3C S7500E-XS Series Manuale di installazione

H3C

H3C SecPath T9000-S Manuale utente

H3C

H3C WX5004 Manuale utente

H3C

H3C s5820x series Manuale di installazione

H3C

H3C S12500-X Manuale utente

H3C

H3C LS-3100-52P-OVS-H3 Manuale utente

H3C

H3C S9500E Series Manuale utente

H3C

H3C S5130S-EI series Manuale utente

Manuali Interruttore popolari di altre marche

URC

URC Total Control MFS-8 Manuale utente

Azbil

Azbil HPQ-D11 Manuale utente

Sony

Sony DFS-900M Manuale utente

SICK

SICK i17S Manuale utente

F&F

F&F SZR-277 Manuale utente

Shure

Shure UAMS/BK Manuale utente

Dräger

Dräger X-zone Switch Off Manuale utente

Asco

Asco Joucomatic 349 Series Manuale utente

BT Mini Hub Manuale utente

D-Link

D-Link DES-1226G Manuale utente

Johnson Controls

Johnson Controls FS80-C Manuale utente

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuale utente

MicroNet

MicroNet SP1200A Manuale utente

Ruijie

Ruijie RG-PF2920 Series Manuale di installazione e funzionamento

Altinex

Altinex DA1914SX Manuale utente

MiLAN

MiLAN MIL-SM2401M Manuale utente

RJM

RJM MASTERMIND PBC/6X Manuale utente

Atlas

Atlas MMK-KVM8 Manuale utente