Specifications

552 SSR Command Line Interface Reference Manual
target-port <port list>
The port(s) for which you want to monitor activity. You can specify a single port or a
comma-separated list of ports.
target-profile <acl name>
The name of the ACL that specifies the profile of the traffic that you want to
monitor. The ACL must be a previously created IP ACL. The ACL may contain
either permit or deny keywords. The port mirroring command only looks at the
following ACL rule parameter values: protocol, source IP address, destination IP
address, source port, destination port, and TOS.
Restrictions
Even though multiple target ports may be defined for a given SSR, only one monitor port
may be defined. Also, Cabletron recommends that you monitor Gigabit ports through
other Gigabit ports—you would almost certainly experience speed-inconsistency-related
problems monitoring a Gigabit port through a 10Base-T or 100Base-TX port.
Known Problems
• Packets that are lost due to CRC and BUFFER_OVERFLOW errors are not mirrored to
the monitor-port.
• In the example below, routed packets from source A to destination B on link 2 are seen
as leaving src mac of SSR when port 1.2 is being monitored.
Examples
To mirror traffic on ethernet ports et.2.2-4 to port et1.2:
After configuring et.1.2 as a monitor-port, et.1.2 is unusable for any other function in the
system. This is indicated by a A LINK_DOWN message. However, et.1.2 is capable of
transmitting TX packets and its LED will be lit while in operation.
To mirror traffic that is specified by the profile in the ACL “101” to port et1.2:
A
B
SSR
link 2link 1
port 1.2
ssr(config)# port mirroring monitor-port et.1.2 target-port
et.2.2, et.2.3, et.2.4
ssr(config)# port mirroring monitor-port et.1.2 target-profile 101