Comprehensive Explanation of port image configuration of Huawei Switches

It is very helpful to know about the vswitch port image configuration. Here we mainly analyze the knowledge and main steps of the Huawei switch port image configuration for Huawei switches in detail, hope to help you.

Vswitch port image configuration such as 3026]
Vswitches such as S2008/S2016/S2026/S2403H/S3026 support port-based images. There are two methods:

Method 1
1. Switch configuration image observation) Port
[SwitchA] monitor-port e0/8
2. vswitch port image Configuration
[SwitchA] port mirror Ethernet 0/1 to Ethernet 0/2

Method 2
[SwitchA] port mirror Ethernet 0/1 to Ethernet 0/2 observing-port Ethernet 0/8

8016 vswitch port image Configuration]
1. Assume that the image port of the 8016 switch is E1/0/15, the Image Port is E1/0/0, and Port 1/0/15 is the observation port of the port image.
[SwitchA] port monitor ethernet 1/0/15
2. Set Port 1/0/0 as the port to be mirrored, and image the input and output data.
[SwitchA] port bonding ing ethernet 1/0/0 both ethernet 1/0/15
You can also mirror the input and output data through two different ports.

1. Set E1/0/15 and E2/0/0 as mirror observation ports.
[SwitchA] port monitor ethernet 1/0/15
2. Set Port 1/0/0 as the mirrored port, and use E1/0/15 and E2/0/0 to mirror the input and output data respectively.
[SwitchA] port bonding ing gigabitethernet 1/0/0 ingress ethernet 1/0/15
[SwitchA] port bonding ing gigabitethernet 1/0/0 egress ethernet 2/0/0

Stream Image-based Data Flow]
A vswitch based on a flow image mirrors some streams. Each connection has two data streams. For a vswitch, these two data streams must be mirrored separately.

3500/3026 E/3026F/3050]
1. Define an extended access control list.
[SwitchA] acl num0 101
2. Define a rule message source address as 1.1.1.1/32 to go to all destination addresses.
[SwitchA-acl-adv-101] rule 0 permit ip source 1.1.1.1 0 destination any
3. Define a rule message source address as the destination address of all source addresses 1.1.1.1/32.
[SwitchA-acl-adv-101] rule 1 permit ip source any destination 1.1.1.1 0
4. mirror the packets that comply with the preceding ACL rules to the E0/8 port.
[SwitchA] mirrored-to ip-group 101 interface e0/8

Layer-2 stream-Based Image]
1. Define an ACL.
[SwitchA] acl num0 200
2. Define a rule to send data packets from E0/1 to all other ports.
[SwitchA] rule 0 permit ingress interface Ethernet0/1 (egress interface any)
3. Define a data packet from all other ports to E0/1.
[SwitchA] rule 1 permit (ingress interface any) egress interface Ethernet0/1
4. mirror the packets that match the preceding ACL to E0/8.
[SwitchA] mirrored-to link-group 200 interface e0/8

5516]
You can configure the port image of the incoming port traffic switch. Set the port Ethernet 3/0/1 as the monitoring port and the inbound traffic image of port Ethernet 3/0/2.
[SwitchA] mirror Ethernet 3/0/2 ingress-to Ethernet 3/0/1

6506/6503/6R]
Currently, the three products only support mirroring inbound port traffic. Although the outbount parameter exists, it cannot be configured.
The image group name is 1, the monitoring port is Ethernet4/0/2, and the inbound traffic on the port Ethernet4/0/1 is mirrored.
[SwitchA] grouping ing-group 1 inbound Ethernet4/0/1 mirrored-to Ethernet4/0/2

Additional description]
1. Images can generally achieve high-speed port mirroring with low-speed ports. For example, a port of M can mirror a port of M, and vice versa.
2. 8016 supports cross-board port mirroring.