How to change observing ports on S series switches

6

For S series switches (except S1700 switches), the method for changing observing ports that are bound during mirroring configuration varies depending on the switch model and version.
- For S series modular and fixed switches (S5700EI/S5710EI/S5720EI/S5700HI/S5710HI/S5720HI/S6700EI running a version from V200R005 to V200R007, and fixed switches running a version later than V200R008):
Find the index for an observing port, and change these port. Assume that the mirrored port is GE1/0/1, observing port GE2/0/1 is bound to the mirrored port, and the index for the observing port is 1. To change the observing port to GE2/0/2, run the observe-port 1 interface gigabitethernet 2/0/2 command in the system view.
- For S series fixed switches (switches running a version earlier than V200R005, and the S1720GFR/S2720/S2750/S5700LI/S5700S-LI/S5700-C-LI/S5700SI running a version from V200R005 to V200R007):
You cannot directly change an observing port, but need to perform the following steps. (The following uses local port mirroring as an example.) Assume that the mirrored port is GE0/0/1, observing port GE0/0/2 is bound to the mirrored port, and the index for the observing port is 1. To change the observing port to GE0/0/3, perform the following steps:
1. In the view of the mirrored port, delete the binding between the observing port and mirrored port.
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] undo port-mirroring to observe-port 1 inbound
[HUAWEI-GigabitEthernet0/0/1] quit
2. Delete observing port GE0/0/2. This step is optional. Skip this step if you want to reserve the observing port. If this observing port does not need to be bound to any other mirrored port, you are advised to delete it, so that the related index resource and physical port resource can be released.
[HUAWEI] undo observe-port 1
3. Create a new observing port and bind it to the mirrored port.
[HUAWEI] observe-port 1 interface gigabitethernet 0/0/3
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] port-mirroring to observe-port 1 inbound
[HUAWEI-GigabitEthernet0/0/1] quit

Other related questions:
How to delete an observing port on S series switches
For S series switches (except S1700 switches), perform the following configurations to delete an observing port: 1. Delete the binding between the observing port and mirrored port. - Port mirroring [HUAWEI] interface gigabitethernet x/x/x [HUAWEI-GigabitEthernetx/x/x] undo port-mirroring to observe-port x inbound/outbound/both [HUAWEI-GigabitEthernetx/x/x] quit - MQC-based traffic mirroring a. Delete the traffic policy applied to the system, a VLAN, or an interface. In the following example, a traffic policy applied to an interface is deleted. [HUAWEI] interface gigabitethernet x/x/x [HUAWEI-GigabitEthernetx/x/x] undo traffic-policy inbound/outbound [HUAWEI-GigabitEthernetx/x/x] quit b. Delete the traffic policy in the system view. [HUAWEI] undo traffic policy xxx c. Delete the traffic behavior containing the traffic mirroring action in the system view. [HUAWEI] undo traffic behavior xxx - ACL-based traffic mirroring Delete ACL-based traffic mirroring configured in the system or interface view. In the following example, ACL-based traffic mirroring is deleted in the system view. [HUAWEI] interface gigabitethernet x/x/x [HUAWEI-GigabitEthernetx/x/x] undo traffic-mirror inbound acl xxx [HUAWEI-GigabitEthernetx/x/x] quit - VLAN mirroring [HUAWEI] vlan xxx [HUAWEI-vlanxxx] undo mirroring inbound [HUAWEI-vlanxxx] quit - MAC address mirroring [HUAWEI] vlan xxx [HUAWEI-vlanxxx] undo mac-mirroring xxx inbound [HUAWEI-vlanxxx] quit 2. Delete the observing port configuration in the system view. [HUAWEI] undo observe-port x

Observing port configuration on S series switch
A physical port must be configured as an observing port before the mirroring function is configured. For S series switches (except S1700 switches), you can configure a single observing port or multiple observing ports in a batch. If multiple observing ports are configured in a batch, they are considered an observing port group. The group is bound to a mirrored port when the port is configured. Therefore, batch configuration is often used to simplify the configuration of 1:N mirroring. - Configure a single observing port. Configure a local observing port, which is directly connected to the monitoring device. [HUAWEI] observe-port 1 interface gigabitethernet 1/0/1 Configure a Layer 2 remote observing port, which forwards mirrored packets to the monitoring device across a Layer 2 network. [HUAWEI] observe-port 1 interface gigabitethernet 1/0/1 vlan 10 Configure a Layer 3 remote observing port, which forwards mirrored packets to the monitoring device across a Layer 3 network (supported only by S series modular switches). [HUAWEI] observe-port 1 interface gigabitethernet 1/0/1 destination-ip 10.1.1.1 source-ip 10.2.2.2 - Configure observing ports in a batch (supported by switches running V200R005 or a later version). Configure local observing ports in a batch, which are directly connected to the monitoring device. [HUAWEI] observe-port 1 interface-range gigabitethernet 1/0/1 to gigabitEthernet 1/0/3 Configure Layer 2 remote observing ports in a batch, which forward mirrored packets to the monitoring device across a Layer 2 network. [HUAWEI] observe-port 1 interface-range gigabitethernet 1/0/1 to gigabitEthernet 1/0/3 vlan 10 Layer 3 remote observing ports cannot be configured in a batch.

Can other services be configured on observing ports of S series switches
Generally, observing ports on S series switches are only used to forward mirrored packets. Therefore, it is not recommended that other services be configured on observing ports. If other services are configured on observing ports, mirrored packets and other service packets may affect each other.

Differences between mirrored ports and observing ports on S series switches
For S series switches: - A mirrored port is a monitored port. All the packets that pass through a mirrored port are copied to a port connected to a monitoring device. - An observing port is connected to a monitoring device and used to send packets from a mirrored port to the monitoring device.

Do observing ports and mirrored ports on S series switches need to have the same bandwidth
For S series switches, if a mirrored port and an observing port provide different bandwidth, for example, 1000 Mbit/s on the mirrored port and 100 Mbit/s on the observing port, the observing port may fail to forward all mirrored packets in a timely manner because of insufficient bandwidth, leading to packet loss. Therefore, ensure that the bandwidth of an observing port is larger than that of a mirrored port. The bandwidth of an observing port can also be the total bandwidth of multiple observing ports in 1: N mirroring. For details, see Mirroring �?an Effective Network Monitoring Tool (Specifications).

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top