Meaning of port mirroring for the USG2000&5000 series

5

To locate network problems by capturing and analyzing session packets without interrupting services, you should configure port mirroring.
Port mirroring copies packets on the specified service interface to a non-service interface. When a session is abnormal, you can locate the fault by viewing the protocol analyzer connected to the non-service interface without affecting services. The service interface is known as the mirroring port and the non-service interface known as the observing port.

Other related questions:
The USG2000 & 5000 & 6000 series is configured with port mirroring.
Note: Enabling the port mirroring feature helps to locate the network, but because the function may affect the performance of the device to a certain extent, use it with caution. After the network problem is finished, turn off port mirroring. To prevent the problem that the mirroring packets can not be received due to the different transmission rate of the interface, make sure that the transmission rate of the observing port and the mirroring port are the same. Steps 1. Run the system-view command to enter the system view. 2, the implementation of the command observing-port observing-port, configure the observation port. The observing port is a non-service interface for transmitting traffic packets that are mirrored to the port. You can observe the packets passing through the corresponding port through the observing port. Run the port-mirroring mirroring-port {both | inbound | outbound} observing-port [acl-number acl-number] command to enable port mirroring. The mirroring port is a service port for sending and receiving service packets. Before you enable port mirroring, the corresponding observing port must already be configured with the observing-port command.

Configuring port mirroring on the USG2000&5000&6000 series
Note: Enabling port mirroring helps locate network faults. However, this function compromises device performance. Exercise caution when you use this function. Disable port mirroring immediately after fault location. Different transmission rates cause failure to completely receive all mirroring packets. To avoid this problem, ensure that the transmission rates of the observing port and the mirroring port are the same. Operation steps 1. Run the system-view command to access the system view. 2. Run the observing-port observing-port command to configure the observing port. The observing port is a non-service port and transmits service packets mirrored to this port. You can observe packets passing through the corresponding mirroring port through the observing port. 3. Run the port-mirroring mirroring-port { both | inbound | outbound } observing-port [ acl-number acl-number ] command to enable port mirroring. Specify the mirroring port as a service port for sending and receiving service packets. Before you enable port mirroring, ensure that the observing port has been configured using the observing-port command.

Meaning of port mirroring for the USG6000 series
To locate network problems by capturing and analyzing session packets without interrupting services, you should configure port mirroring. Port mirroring copies packets on the specified service interface to a non-service interface. When a session is abnormal, you can locate the fault by viewing the protocol analyzer connected to the non-service interface without affecting services. The service interface is known as the mirroring port and the non-service interface known as the observing port.

Meaning of quintuple packet capture for the USG2000&5000 series
Quintuple packet capture enables the USG2000&5000 series to copy the passing packets and save or display them in a certain format on the USG. If the USG or service is faulty and the fault cannot be located after you check the configuration and statistics, you can enable quintuple packet capture for the USG to capture packets of specified flows for fault analysis.

Configuration of traffic mirroring on the CLI for the USG2000&5000 series
The USG2000&5000 series does not support traffic mirroring.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top