Download complete user manual (PDF). - Brocade

1
ACL-based inbound mirroring
Specifying the destination mirror port for physical ports
You must specify a destination port for traffic that has been selected by ACL-based Inbound
Mirroring. This configuration is performed at the Interface Configuration of the port whose traffic
you are mirroring. In the following example, ACL mirroring traffic from port 1/1 is mirrored to port
1/3.
Brocade(config)# interface ethernet 1/1
Brocade(config-if-e10000-1/1)# acl-mirror-port ethernet 1/3
You can also use the ACL-mirroring feature to mirror traffic from multiple ports to a single port using
the Multiple Interface Configuration (MIF) mode as shown in the following example.
Brocade(config)# interface ethernet 1/1 to 1/2
Brocade(config-mif-e10000-1/1-1/2)# acl-mirror-port ethernet 1/3
Syntax: [no] acl-mirror-port ethernet [slot/port]
The [slot/port] variable specifies port that ACL-mirror traffic from the configured interface will be
mirrored to.
Specifying the destination mirror port for a LAG
You can mirror the traffic that has been selected by ACL-based inbound mirroring from all ports in a
LAG by configuring a destination (monitor) port for the LAG at the interface configuration level of
the LAG’s primary port. Configuring mirroring on the primary port of the LAG causes ACL-selected
traffic from all ports in the LAG (including any ports subsequently added to the LAG dynamically on
the Brocade NetIron XMR and Brocade MLX series) to be mirrored to the monitor port. For example,
in the following configuration all traffic on LAG “mylag” will be mirrored to port 10/4:
Brocade(config)# lag mylag static
Brocade(config-lag-mylag)# ports ethernet 10/1 to 10/3
Brocade(config-lag-mylag)# primary-port 10/1
Brocade(config-lag-mylag)# deploy
Brocade(config-lag-mylag)# exit
Brocade(config)# interface ethernet 10/1
Brocade(config-if-e1000-10/1)# acl-mirror-port ethernet 10/4
Syntax: [no] acl-mirror-port ethernet slot/port
The ethernet slot/port variable specifies the port that ACL-mirror traffic from the LAG will be
mirrored to.
The following considerations apply when configuring ACL-based mirroring with LAGs:
• You must configure ACL-mirroring for an individual member port from the LAG configuration
level. Attempting to configure ACL-mirroring at the interface level for an individual member port
will fail and display the following message.
Error: please use config level to configure ACL based mirroring on port.
• If an individual port is configured for ACL-based mirroring, you cannot add it to a LAG. If you
want to add it to a LAG, you must remove it from ACL-based mirroring first. Then you can add it
to a LAG. It can then be configured for either ACL-based LAG mirroring or for mirroring an
individual port within a LAG.
If you attempt to add a port that is configured for ACL-based mirroring to a LAG, the following
message will display.
ACL port is configured on port 2/1, please remove it and try again.
transaction failed: Config Vetoed
18 Multi-Service IronWare Switching Configuration Guide
53-1002820-02