H3C S5500-EI series Bedienungsanleitung

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 Port Mirroring Configuration......................................................................................1-1

1.1 Introduction to Port Mirroring.............................................................................................1-1

1.1.1 Classification of Port Mirroring................................................................................1-1

1.1.2 Implementing Port Mirroring....................................................................................1-2

1.1.3 Other Functions Supported by Port Mirroring.........................................................1-3

1.2 Configuring Local Port Mirroring........................................................................................1-3

1.3 Configuring Remote Port Mirroring....................................................................................1-4

1.3.1 Configuring a Remote Source Mirroring Group ......................................................1-4

1.3.2 Configuring a Remote Destination Port Mirroring Group........................................1-5

1.4 Displaying and Maintaining Port Mirroring.........................................................................1-7

1.5 Port Mirroring Configuration Examples..............................................................................1-7

1.5.1 Local Port Mirroring Configuration Example...........................................................1-7

1.5.2 Remote Port Mirroring Configuration Example.......................................................1-8

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-1

Chapter 1 Port Mirroring Configuration

When configuring port mirroring, go to these sections for information you are interested

in:

zIntroduction to Port Mirroring

zConfiguring Local Port Mirroring

zConfiguring Remote Port Mirroring

zDisplaying and Maintaining Port Mirroring

zPort Mirroring Configuration Examples

1.1 Introduction to Port Mirroring

Port mirroring allows you to duplicate the packets passing specified ports to the

destination mirroring port. As destination mirroring ports usually have data monitoring

devices connected to them, you can analyze the packets duplicated to the destination

mirroring port on these devices so as to monitor and troubleshoot the network.

Host

Data monitoring device

Network

Source

mirroring port

Destination

mirroring port

Figure 1-1 A port mirroring implementation

1.1.1 Classification of Port Mirroring

There are two kinds of port mirroring: local port mirroring and remote port mirroring.

zLocal port mirroring copies packets passing through one or more ports (known as

source ports) of a device to the monitor port (also destination port) for analysis and

monitoring purpose. In this case, the source ports and the destination port are

located on the same device.

zRemote port mirroring implements port mirroring between multiple devices. That is,

the source ports and the destination port can be located on different devices in a

network. Currently, remote port mirroring can only be implemented on Layer 2.

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-2

1.1.2 Implementing Port Mirroring

Port mirroring is implemented through port mirroring groups, which fall into these three

categories: local port mirroring group, remote source port mirroring group, and remote

destination port mirroring group. Two port mirroring implementation modes are

introduced in the following section.

I. Local port mirroring

Local port mirroring is implemented by local port mirroring group.

In this mode, the source ports and the destination port are in the same local port

mirroring group. Packets passing through the source ports are duplicated and then

forwarded to the destination port.

II. Remote port mirroring

Remote port mirroring is achieved through the cooperation of remote source port

mirroring group and remote destination port mirroring group.

Figure 1-2 illustrates a remote port mirroring implementation.

Figure 1-2 A remote mirroring implementation

The devices in Figure 1-2 function as follows:

zSource device

Source device contains source mirroring ports, and remote source port mirroring

groups are created on source devices. Asource device duplicates the packets passing

the source ports on it and sends them to the outbound port. The packets are then

broadcast in the remote mirroring VLAN and are received by the intermediate device or

destination device.

zIntermediate device

Intermediate devices are used to connect source devices and destination devices. An

intermediate device forwards the mirrored packets to the next intermediate device or

the destination device. If the source device is directly connected to the destination

device, no intermediate device is needed. In a remote mirroring VLAN, the source

devices and the destination device need to be able to communicate with one another

on Layer 2.

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-3

zDestination device

Destination device contains destination mirroring port, and remote destination port

mirroring groups are created on destination devices. Upon receiving a mirrored packet,

the destination device checks to see if the VLAN ID of the received packet is the same

as that of the remote mirroring VLAN of the remote destination port mirroring group. If

yes, the destination device forwards the packet to the monitoring device through the

destination mirroring port.

1.1.3 Other Functions Supported by Port Mirroring

In addition, in a port mirroring group, a destination port can monitor multiple source

ports simultaneously in the mirroring group.

1.2 Configuring Local Port Mirroring

Follow these steps to configure local port mirroring:

To do… Use the command… Remarks

Enter system view system-view —

Create a local mirroring

group mirroring-group group-id

local Required

In system

view

mirroring-group group-id

mirroring-port

mirroring-port-list { both |

inbound |outbound }

interface interface-type

interface-number

[mirroring-group group-id ]

mirroring-port { both |

inbound | outbound }

Add ports

to the port

mirroring

group as

source

ports In

interface

view

quit

Use either approach.

You can add ports to a

port mirroring group as

source ports in either

system view or

interface view.

In system view, you

can add multiple ports

to a port mirroring

group at one time.

While in interface view,

you can only add the

current port to a port

mirroring group.

In system

view mirroring-group group-id

monitor-port monitor-port-id

interface interface-type

interface-number

Add a port

to the

mirroring

group as

the

destination

port

interface

view [mirroring-group group-id ]

monitor-port

Use either approach.

You can add a

destination port to a

port mirroring group in

either system view or

interface view. They

achieve the same

purpose.

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-4

Note:

zA local mirroring group is effective only when it has both source ports and the

destination port configured.

zIt is not recommended to enable STP, RSTP or MSTP on the destination port;

otherwise, the mirroring function may be affected.

zDo not use the destination mirroring port for any purpose other than port mirroring.

zThe source ports and the destination port cannot be the member ports of the current

mirroring group.

zBefore adding the destination port for a port mirroring group, make sure the port

mirroring group exists. A mirroring group can have only one destination port.

1.3 Configuring Remote Port Mirroring

1.3.1 Configuring a Remote Source Mirroring Group

Follow these steps to configure a remote port mirroring group

To do… Use the command… Remarks

Enter system view system-view —

Create a remote

source mirroring group mirroring-group group-id

remote-source Required

In system

view

mirroring-group group-id

mirroring-port mirroring-port-list

{ both | inbound |outbound }

interface interface-type

interface-number

[ mirroring-group group-id ]

mirroring-port { both |inbound

| outbound }

Add ports

to the

mirroring

group as

source

ports

interface

view

quit

Use either approach.

You can add ports to

a source port

mirroring group in

either system view or

interface view. They

achieve the same

purpose.

In system

view

mirroring-group group-id

monitor-egress

monitor-egress-port-id

interface interface-type

interface-number

mirroring-group group-id

monitor-egress

Add a

port to

the

mirroring

group as

the

outbound

mirroring

port

interface

view

quit

Use either approach.

You can add ports to

a source mirroring

group in either system

view or interface view.

They achieve the

same purpose.

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-5

To do… Use the command… Remarks

Configure the remote

port mirroring VLAN for

the mirroring group

mirroring-group group-id

remote-probe vlan

rprobe-vlan-id Required

Note:

zAll ports in a remote mirroring group belong to the same device. A remote source

mirroring group can have only one outbound mirroring port.

zThe outbound mirroring port cannot be a member port of the current mirroring

group.

zIt is not recommended to add the source ports to a remote VLAN, whichcan be used

for remote mirroring only.

zIt is not recommended to configure STP, RSTP, MSTP, 802.1x, IGMP Snooping,

static ARP and MAC address learning on the outbound mirroring port; otherwise,

the mirroring function may be affected.

zOnly existing static VLANs can be configured as remote port mirroring VLANs. To

remove a VLAN operating as aremote port mirroring VLAN, you need to restore it to

a normal VLAN first. A remote port mirroring group gets invalid if the corresponding

remote port mirroring VLAN is removed.

zA port can belong to only one port mirroring group. A VLAN can be the remote port

mirroring VLAN of only one port mirroring group.

1.3.2 Configuring a Remote Destination Port Mirroring Group

Follow these steps to configure a remote destination port mirroring group:

To do… Use the command… Remarks

Enter system view system-view —

Create a remote

destination port mirroring

group

mirroring-group group-id

remote-destination Required

Configure the remote port

mirroring VLAN for the port

mirroring group

mirroring-group group-id

remote-probe vlan

rprobe-vlan-id Required

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-6

To do… Use the command… Remarks

In system

view mirroring-group group-id

monitor-port monitor-port-id

interface interface-type

interface-number

[mirroring-group group-id ]

monitor-port

Add a port

to the port

mirroring

group as

the

destination

port

In interface

view

quit

Use either

approach.

You can add a

port to a remote

port mirroring

group as the

destination port in

either system

view or interface

view. They

achieve the same

purpose.

Enter destination interface

view interface interface-type

interface-number —

The port is

an access

port port access vlan rprobe-vlan-id

The port is a

trunk port port trunk permit vlan

rprobe-vlan-id

Add the

port to the

remote

port

mirroring

VLAN The port is a

hybrid port port hybrid vlan rprobe-vlan-id

{ tagged | untagged }

Perform one of

these three

operations

according to the

port type.

Note:

zThe remote destination mirroring port cannot be a member port of the current

mirroring group.

zThe remote destination mirroring port can be an access, trunk, or hybrid port. It must

be assigned to the remote mirroring VLAN.

zDo not enable STP, RSTP or MSTP on the remote destination mirroring port.

Otherwise, the mirroring function may be affected.

zDo not use the remote destination mirroring port for any purpose other than port

mirroring.

zOnly existing static VLANs can be configured as remote port mirroring VLANs. To

remove a VLAN operating as aremote port mirroring VLAN, you need to restore it to

a normal VLAN first. A remote port mirroring group gets invalid if the corresponding

remote port mirroring VLAN is removed.

zUse a remote port mirroring VLAN for remote port mirroring only.

zA port can belong to only one port mirroring group. A VLAN can be the remote port

mirroring VLAN of only one port mirroring group.

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-7

1.4 Displaying and Maintaining Port Mirroring

To do… Use the command… Remarks

Display the configuration

of a port mirroring group

display mirroring-group

{group-id |all | local |

remote-destination |

remote-source }

Available in any view

1.5 Port Mirroring Configuration Examples

1.5.1 Local Port Mirroring Configuration Example

I. Network requirements

The departments of a company connect to each other through Ethernet switches:

zResearch and Development (R&D) department is connected to Switch C through

GigabitEthernet 1/0/1.

zMarketing department is connected to Switch C through GigabitEthernet 1/0/2.

zData monitoring device is connected to Switch C through GigabitEthernet 1/0/3

The administrator wants to monitor the packets received on and sent from the R&D

department and the marketing department through the data monitoring device.

Use the local port mirroring function to meet the requirement. Perform the following

configurations on Switch C.

zConfigure GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 as mirroring source

ports.

zConfigure GigabitEthernet 1/0/3 as the mirroring destination port.

II. Network diagram

Switch C Data monitoring

device

R&D

department

Switch A

Switch B

GE1/0/2

GE1/0/1

GE1/0/3

Marketing

department

Figure 1-3 Network diagram for local port mirroring configuration

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-8

III. Configuration procedure

Configure Switch C.

# Create a local port mirroring group.

<SwitchC> system-view

[SwitchC] mirroring-group 1 local

# Add port GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to the port mirroring group

as source ports. Add port GigabitEthernet 1/0/3 to the port mirroring group as the

destination port.

[SwitchC] mirroring-group 1 mirroring-port GigabitEthernet 1/0/1

GigabitEthernet 1/0/2 both

[SwitchC] mirroring-group 1 monitor-port GigabitEthernet 1/0/3

# Display the configuration of all the port mirroring groups.

[SwitchC] display mirroring-group all

mirroring-group 1:

type: local

status: active

mirroring port:

GigabitEthernet1/0/1 both

GigabitEthernet1/0/2 both

monitor port: GigabitEthernet1/0/3

After finishing the configuration, you can monitor all the packets received and sent by

R&D department and Marketing department on the Data monitoring device.

1.5.2 Remote Port Mirroring Configuration Example

I. Network requirements

The departments of a company connect to each other through Ethernet switches:

zDepartment 1 is connected to GigabitEthernet 1/0/1 of Switch A.

zDepartment 2 is connected to GigabitEthernet 1/0/2 of Switch A.

zGigabitEthernet 1/0/3 of Switch A connects to GigabitEthernet 1/0/1 of Switch B.

zGigabitEthernet 1/0/2 of Switch B connects to GigabitEthernet 1/0/1 of Switch C.

zThe data monitoring device is connected to GigabitEthernet 1/0/2 of Switch C.

The administrator wants to monitor the packets sent from Department 1 and 2 through

the data monitoring device.

Use the remote port mirroring function to meet the requirement. Perform the following

configurations:

zUse Switch A as the source device, Switch B as the intermediate device, and

Switch C as the destination device.

Operation Manual – Port Mirroring

H3C S5500-EI Series Ethernet Switches Chapter 1 Port Mirroring Configuration

1-9

zOn Switch A, create a remote source mirroring group; create VLAN 2 and

configure it as the remote port mirroring VLAN; add port GigabitEthernet 1/0/1 and

GigabitEthernet 1/0/2 to the port mirroring group as two source ports. Configure

port GigabitEthernet 1/0/3 as the outbound mirroring port.

zConfigure port GigabitEthernet 1/0/3 of Switch A, port GigabitEthernet 1/0/1 and

GigabitEthernet 1/0/2 of Switch B, and port GigabitEthernet 1/0/1 of Switch C as

trunk ports and configure them to permit packets of VLAN 2.

zCreate a remote destination mirroring group on Switch C. Configure VLAN 2 as

the remote port mirroring VLAN and port GigabitEthernet 1/0/2, to which the data

monitoring device is connected, as the destination port.

II. Network diagram

Figure 1-4 Network diagram for remote port mirroring configuration

III. Configuration procedure

1) Configure Switch A (the source device).

# Create a remote source port mirroring group.

<SwitchA> system-view

[SwitchA] mirroring-group 1 remote-source

# Create VLAN 2.

[SwitchA] vlan 2

[SwitchA-vlan2] quit

# Configure VLAN 2 as the remote port mirroring VLAN of the remote port mirroring

group. Add port GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to the remote port

mirroring group as source ports. Configure port GigabitEthernet 1/0/3 as the outbound

mirroring port.

[SwitchA] mirroring-group 1 remote-probe vlan 2

[SwitchA] mirroring-group 1 mirroring-port GigabitEthernet 1/0/1

GigabitEthernet 1/0/2 inbound

[SwitchA] mirroring-group 1 monitor-egress GigabitEthernet 1/0/3

Andere Handbücher für S5500-EI series

Inhaltsverzeichnis

Andere H3C Schalten Handbücher

H3C

H3C LS-3100-16TP-EI-H3-A-O Bedienungsanleitung

H3C

H3C S5560S-EI Series Bedienungsanleitung

H3C

H3C S5500-SI Series Bedienungsanleitung

H3C

H3C S6800-54QT Bedienungs- und Wartungshandbuch

H3C

H3C S6800-2C-FC Bedienungs- und Wartungshandbuch

H3C

H3C S6812 Series Bedienungsanleitung

H3C

H3C S9505 SRP Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C s5820x series Installationshandbuch

H3C

H3C S6800 Series Installationshandbuch

H3C

H3C s5800 series Bedienungsanleitung

H3C

H3C H3C S5800-32F Bedienungsanleitung

H3C

H3C S12500X-AF Series Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S5560X-EI Series Installationshandbuch

H3C

H3C S5500-28C-EI-DC Bedienungsanleitung

H3C

H3C SecPath T9000-S Bedienungsanleitung

H3C

H3C s5820x series Bedienungsanleitung

H3C

H3C S5560S Series Bedienungsanleitung

H3C

H3C S5830V2 series Bedienungsanleitung

H3C

H3C s5820x series Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S3100 Series Bedienungsanleitung

H3C

H3C S5120-HI Series Bedienungsanleitung

Beliebte Schalten Handbücher anderer Marken

URC

URC Total Control MFS-8 Bedienungsanleitung

Azbil

Azbil HPQ-D11 Bedienungsanleitung

Sony

Sony DFS-900M Bedienungsanleitung

SICK

SICK i17S Bedienungsanleitung

F&F

F&F SZR-277 Bedienungsanleitung

Shure

Shure UAMS/BK Bedienungsanleitung

Dräger

Dräger X-zone Switch Off Bedienungsanleitung

Asco

Asco Joucomatic 349 Series Bedienungsanleitung

BT Mini Hub Bedienungsanleitung

D-Link

D-Link DES-1226G Bedienungsanleitung

Johnson Controls

Johnson Controls FS80-C Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Bedienungsanleitung

MicroNet

MicroNet SP1200A Bedienungsanleitung

Ruijie

Ruijie RG-PF2920 Series Installations- und Betriebsanleitung

Altinex

Altinex DA1914SX Bedienungsanleitung

MiLAN

MiLAN MIL-SM2401M Bedienungsanleitung

RJM

RJM MASTERMIND PBC/6X Bedienungsanleitung

Atlas

Atlas MMK-KVM8 Bedienungsanleitung