Got it

Limitations of mirroring

Created: Apr 29, 2020 12:43:24Latest reply: Apr 30, 2020 01:19:05 478 9 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Dear I have NE40E V8R11. I need the limitations for using mirror filtering. also please provide example configuration for mirror filtering.

Featured Answers
Popeye_Wang
Admin Created Apr 30, 2020 01:11:40

Hello,

Kindly refer to the below configurations.

#

acl number 2001

 rule 5 permit source 2.2.2.2 0

#

traffic classifier a operator or

 if-match acl 2001

#

traffic behavior e

 port-mirroring enable

#

traffic policy 1

 classifier a behavior e

#

interface GigabitEthernet1/0/1

 traffic-policy 1 inbound

#

interface GigabitEthernet1/0/3

 port-observing observe-index 3

#

slot 1

 mirror to observe-index 3

#


Refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100075471&id=dc_ne_portmirror_cfg_0020&lang=en

View more
  • x
  • convention:

Zahid_27
Zahid_27 Created Apr 30, 2020 06:06:12 (0) (0)
Thanks dear , i more think will this increase CPU usage or memory usage?  
All Answers
You mean port mirroring?
View more
  • x
  • convention:

yes using filter on port mirroring. like i want some of traffic to be mirrored not all
View more
  • x
  • convention:

Posted by Zahid_27 at 2020-04-29 12:56 yes using filter on port mirroring. like i want some of traffic to be mirrored not all
Please try filtering the mirroring traffic on the observe port.
As far as I know, it's supported to filter the mirroring traffic on the observe port.
View more
  • x
  • convention:

any example for configuration?
View more
  • x
  • convention:

  • x
  • convention:

gisellecar
gisellecar Created Jan 5, 2021 23:53:13 (0) (0)
 

Hello,

Kindly refer to the below configurations.

#

acl number 2001

 rule 5 permit source 2.2.2.2 0

#

traffic classifier a operator or

 if-match acl 2001

#

traffic behavior e

 port-mirroring enable

#

traffic policy 1

 classifier a behavior e

#

interface GigabitEthernet1/0/1

 traffic-policy 1 inbound

#

interface GigabitEthernet1/0/3

 port-observing observe-index 3

#

slot 1

 mirror to observe-index 3

#


Refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100075471&id=dc_ne_portmirror_cfg_0020&lang=en

View more
  • x
  • convention:

Zahid_27
Zahid_27 Created Apr 30, 2020 06:06:12 (0) (0)
Thanks dear , i more think will this increase CPU usage or memory usage?  
Configuring Port Mirroring:
By configuring port mirroring, you can copy the traffic on a specified mirroring port to an observing port for analysis. In this manner, you can know the status of the traffic passing through the mirroring port.

Procedure:
Common mirroring mode
a. Run system-view
The system view is displayed.

b. (Optional) Run observe user-defined-filter
A user-defined any byte matching rule for packet mirroring is configured.

c. Run interface interface-type interface-number
The interface view is displayed.

d. Perform either of the following configurations based on requirements:
- Run the port-mirroring { inbound [ cpu-packet ] | outbound } [ user-defined-filter user-defined-filter-id ] command to configure port mirroring.
Note:
If the cpu-packet keyword is configured, only packets to be sent to the CPU are mirrored on the interface.
- Run the port-mirroring { inbound | outbound } vlan vlan-id1 [ to vlan-id2 ] command to configure VLAN-based mirroring.
- Run the port-mirroring { inbound | outbound } pe-vid low-vid [ to high-vid ] ce-vid ce-vlan-id-begin [ to ce-vlan-id-end ] command to configure mirroring based on VLAN segments for inner and outer VLAN tags.
- Run the port-mirroring { inbound | outbound } fragment command to configure the mirroring function in the MP-group interface view.
Note:
This command applies only to the MP-group interface view.
e. Run commit
The configuration is committed.

https://support.huawei.com/enterprise/en/doc/EDOC1100055025/f5bf45d5/configuring-port-mirroring#dc_ne_portmirror_cfg_0025

View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.