Why an interface on an S series modular switch cannot deliver the traffic policy containing outbound flow mirroring

1

For S series modular switches in the following software versions and models, when outbound flow mirroring is configured, other actions cannot be configured in the traffic behavior. If other actions are defined in the traffic behavior, the interface cannot deliver the traffic policy containing outbound flow mirroring.
- S9300 series switches running V200R001 and later versions.
- S7700 and S9700 series switches running V200R001 and later versions.
- S12700 series switches running all software versions.

Other related questions:
Why ICMP packets used to ping a host cannot be discarded using a traffic policy on an S series modular switch
An S series modular switch sends ICMP packets to the CPU based on an ACL and discards ICMP packets based on an ACL in a traffic policy. The two ACLs are used for packet sending to the CPU and packet discarding respectively, and the ACL with a higher priority takes effect. The ACL for sending ICMP packets to the CPU has a higher priority. Therefore, ICMP packets cannot be discarded by configuring a traffic policy. To discard the ICMP packets, configure a blacklist. If the switch sends ICMP packets to the CPU through a route, you can configure a traffic policy to discard ICMP packets.

Why does an inbound traffic policy fail to filter traffic or limit the rate of inbound packets on an S series modular switch
For S series modular switches, a traffic policy fails to filter traffic or limit the rate of packets for users matching DHCP snooping binding tables. You can run the following commands to check whether static or dynamic binding entries exist: - Run thedisplay dhcp { snooping | static } user-bind { interface interface-type interface-number | ip-address ip-address | mac-address mac-address | vlan vlan-id } * [ verbose ] command to check static or dynamic DHCP snooping binding entries on an interface. - Run the display dhcp { snooping | static } user-bind all [ verbose ] command to check static or dynamic DHCP snooping binding entries on all interfaces.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top