A summary of various models of switch Port mirroring configuration Method-routers, switches

A lot of friends are asking  about the image of the switch. Through my existing data and documents, the various models of the switch mirroring methods are summarized. So that friends can easily check! Before the configuration, the basic concept of port mirroring is still a certain understanding!
First, the concept of port mirroring:
Port Mirror is used for network performance monitoring. It can be understood that a mirroring relationship is established between Port A and port B so that data transmitted over port A is replicated to Port B at the same time to facilitate performance analysis or fault diagnosis for the analyzer or analysis software that is connected on port B.

Second, port mirroring configuration

"Environment configuration Parameters"

1. PC1 connected to the switch E0/1 port, IP address 1.1.1.1/24

2. PC2 connected to the switch E0/2 port, IP address 2.2.2.2/24

3. E0/24 for switch uplink port

4. Server is connected to the switch E0/8 port, which acts as a mirrored port

"Networking Requirements"

1. Use the server to monitor business messages for both PCs using the switch port mirroring function.

2. Configure in different ways of mirroring:

1 Port based mirroring

2) based on the image of the stream

2 Data configuration steps
"Port Mirroring Data Flow"

A port based mirror is a full copy of the incoming and outgoing data messages from the mirrored port to the mirror port, which allows for traffic observation or fault location.

"3026-like switch mirroring"

S2008/S2016/S2026/S2403H/S3026 and other switches support port based mirroring, there are two ways:

Method One

1. Configure Mirror (observation) port

[Switcha]monitor-port E0/8

2. Configure the mirrored port

[Switcha]port Mirror Ethernet 0/1 to Ethernet 0/2

Method Two

1. Can define mirror and mirrored port at a one-time

[Switcha]port Mirror Ethernet 0/1 to Ethernet 0/2 observing-port Ethernet 0/8

"8016 Switch Port Mirroring Configuration"

1. Assuming that the 8016 switch Mirror Port is E1/0/15 and the mirror Port is e1/0/0, set the port 1/0/15 as the observation port for port mirroring.

[SwitchA] Port monitor Ethernet 1/0/15

2. Set the port 1/0/0 to be mirrored port, mirroring its input and output data.

[SwitchA] Port mirroring Ethernet 1/0/0 both Ethernet 1/0/15

You can also mirror the input and output data separately through two different ports

1. Set E1/0/15 and e2/0/0 as mirror (observation) ports

[SwitchA] Port monitor Ethernet 1/0/15

2. Set port 1/0/0 to be mirrored port, using E1/0/15 and e2/0/0 to mirror input and output data respectively.

[SwitchA] Port mirroring gigabitethernet 1/0/0 Ingress Ethernet 1/0/15

[SwitchA] Port mirroring gigabitethernet 1/0/0 Egress Ethernet 2/0/0



"Data flow based on stream mirroring"

A stream-mirrored switch is mirrored for some streams, each with a two-directional stream of data, and the two streams are mirrored separately for the switch.

"3500/3026e/3026f/3050"

Based on three laminar mirrors

1. Define an extended access control list

[Switcha]acl Num 100

2. Define a rule message source address for 1.1.1.1/32 go to all destination addresses

[switcha-acl-adv-101]rule 0 Permit IP Source 1.1.1.1 0 Destination any

3. Define a rule message source address for all source addresses the destination address is 1.1.1.1/32

[switcha-acl-adv-101]rule 1 Permit IP source any destination 1.1.1.1 0

4. Mirroring the above ACL rules to the E0/8 port

[Switcha]mirrored-to Ip-group interface E0/8



Based on two laminar mirrors

1. Define an ACL

[Switcha]acl Num 200

2. Define a rule to send packets from E0/1 to all other ports

[Switcha]rule 0 Permit Ingress Interface ETHERNET0/1 Egress interface ETHERNET0/2

3. Define a rule from all other ports to the E0/1 port packet

[Switcha]rule 1 Permit Ingress Interface ETHERNET0/2 Egress interface ETHERNET0/1

4. Mirroring packets that meet the above ACL to E0/8

[Switcha]mirrored-to Link-group interface E0/8



"5516/6506/6503/6506R"

Currently, the three products support mirroring of inbound port traffic

1. Define Mirror Port

[Switcha]monitor-port Ethernet 3/0/2

2. Define mirrored port

[Switcha]mirroring-port Ethernet 3/0/1 Inbound



"Supplementary Notes"

1. Mirroring can generally achieve high-speed port mirroring low rate ports, such as 1000M ports can mirror 100M ports, the other is not possible

2.8016 supports mirrored port mirroring configuration across a single board port

"Environment configuration Parameters"

1. PC1 connected to the switch E0/1 port, IP address 1.1.1.1/24

2. PC2 connected to the switch E0/2 port, IP address 2.2.2.2/24

3. E0/24 for switch uplink port

4. Server is connected to the switch E0/8 port, which acts as a mirrored port

"Networking Requirements"

1. Use the server to monitor business messages for both PCs using the switch port mirroring function.

2. Configure in different ways of mirroring:

1 Port based mirroring

2) based on the image of the stream

2 Data configuration steps
"Port Mirroring Data Flow"

A port based mirror is a full copy of the incoming and outgoing data messages from the mirrored port to the mirror port, which allows for traffic observation or fault location.

"3026-like switch mirroring"

S2008/S2016/S2026/S2403H/S3026 and other switches support port based mirroring, there are two ways:

Method One

1. Configure Mirror (observation) port

[Switcha]monitor-port E0/8

2. Configure the mirrored port

[Switcha]port Mirror Ethernet 0/1 to Ethernet 0/2

Method Two

1. Can define mirror and mirrored port at a one-time

[Switcha]port Mirror Ethernet 0/1 to Ethernet 0/2 observing-port Ethernet 0/8

"8016 Switch Port Mirroring Configuration"

1. Assuming that the 8016 switch Mirror Port is E1/0/15 and the mirror Port is e1/0/0, set the port 1/0/15 as the observation port for port mirroring.

[SwitchA] Port monitor Ethernet 1/0/15

2. Set the port 1/0/0 to be mirrored port, mirroring its input and output data.

[SwitchA] Port mirroring Ethernet 1/0/0 both Ethernet 1/0/15

You can also mirror the input and output data separately through two different ports

1. Set E1/0/15 and e2/0/0 as mirror (observation) ports

[SwitchA] Port monitor Ethernet 1/0/15

2. Set port 1/0/0 to be mirrored port, using E1/0/15 and e2/0/0 to mirror input and output data respectively.

[SwitchA] Port mirroring gigabitethernet 1/0/0 Ingress Ethernet 1/0/15

[SwitchA] Port mirroring gigabitethernet 1/0/0 Egress Ethernet 2/0/0



"Data flow based on stream mirroring"

A stream-mirrored switch is mirrored for some streams, each with a two-directional stream of data, and the two streams are mirrored separately for the switch.

"3500/3026e/3026f/3050"

Based on three laminar mirrors

1. Define an extended access control list

[Switcha]acl Num 100

2. Define a rule message source address for 1.1.1.1/32 go to all destination addresses

[switcha-acl-adv-101]rule 0 Permit IP Source 1.1.1.1 0 Destination any

3. Define a rule message source address for all source addresses the destination address is 1.1.1.1/32

[switcha-acl-adv-101]rule 1 Permit IP source any destination 1.1.1.1 0

4. Mirroring the above ACL rules to the E0/8 port

[Switcha]mirrored-to Ip-group interface E0/8



Based on two laminar mirrors

1. Define an ACL

[Switcha]acl Num 200

2. Define a rule to send packets from E0/1 to all other ports

[Switcha]rule 0 Permit Ingress Interface ETHERNET0/1 Egress interface ETHERNET0/2

3. Define a rule from all other ports to the E0/1 port packet

[Switcha]rule 1 Permit Ingress Interface ETHERNET0/2 Egress interface ETHERNET0/1

4. Mirroring packets that meet the above ACL to E0/8

[Switcha]mirrored-to Link-group interface E0/8



"5516/6506/6503/6506R"

Currently, the three products support mirroring of inbound port traffic

1. Define Mirror Port

[Switcha]monitor-port Ethernet 3/0/2

2. Define mirrored port

[Switcha]mirroring-port Ethernet 3/0/1 Inbound

Attention! Here to remind you that the same model of different versions of the equipment, configuration methods are sometimes different, and ultimately to the version of the corresponding operation manual.