White Papers

DellEMC(conf-mon-sess-0)#source port-channel 1 direction tx
DellEMC(conf-mon-sess-0)#erpm source-ip 1.1.1.1 dest-ip 7.1.1.2 gre-protocol 111
DellEMC(conf-mon-sess-0)#no disable
DellEMC(conf)#monitor session 1 type erpm
DellEMC(conf-mon-sess-1)#source vlan 11 direction rx
DellEMC(conf-mon-sess-1)#erpm source-ip 5.1.1.1 dest-ip 3.1.1.2 gre-protocol 139
DellEMC(conf-mon-sess-1)#flow-based enable
DellEMC(conf-mon-sess-1)#no disable
DellEMC# show monitor session
SessID Source Destination Dir Mode Source IP Dest IP DSCP TTL Drop Rate
Gre-Protocol FcMonitor Status
------ ------ ----------- --- ---- --------- -------- ---- --- ---- ----
------------ --------- -------
0 Te 0/9 remote-ip rx Port 1.1.1.1 7.1.1.2 0 255 No 100 111
No Enabled
0 Po 1 remote-ip tx Port 1.1.1.1 7.1.1.2 0 255 No 100 111
No Enabled
1 Vl 11 remote-ip rx Flow 5.1.1.1 3.1.1.2 0 255 No 100 139
No Enabled
The next example shows the configuration of an ERPM session in which VLAN 11 is monitored as the source interface and a
MAC ACL filters the monitored ingress traffic.
DellEMC(conf)#mac access-list standard flow
DellEMC(config-std-macl)#seq 5 permit 00:00:0a:00:00:0b count monitor
DellEMC#show running-config interface vlan 11
!
interface Vlan 11
no ip address
tagged TenGigabitEthernet 0/1-3
mac access-group flow in
shutdown
Port Monitoring on VLT
Devices on which VLT is configured are seen as a single device in the network. You can apply port monitoring function on the
VLT devices in the network.
Port monitoring enables ingress or egress traffic traversing on a port to be sent to another port so that the traffic can be
analyzed. The port to which traffic is sent for analysis is called the mirroring port. This port is connect to a port analyzer, which
performs the traffic analysis function.
Depending up on the location of the port to which the port analyzer is connected, port monitoring is classified into three
categories: local Port mirroring, remote port mirroring (RPM), and encapsulated remote port mirroring (ERPM).
NOTE: For more information on port monitoring, see Port Monitoring.
The port monitoring or mirroring function when applied to VLT devices works as expected except with some restrictions. You
can configure RPM or ERPM monitoring between two VLT peers. As VLT devices are seen as a single device in the network,
when a fail over occurs, the source or destination port on one of the VLT peers becomes inactive causing the monitoring session
to fail. As a result, Dell EMC Networking OS does not allow local Port mirroring based monitoring to be configured between VLT
peers. However, you can create local Port mirroring monitoring sessions separately on individual devices that are a part of the
VLT configuration.
NOTE: For more information on configuring VLT, see Configuring VLT on page 883.
VLT Non-fail over Scenario
Consider a scenario where port monitoring is configured to mirror traffic on a VLT device's port or LAG to a destination port on
some other device (TOR) on the network. When there is no fail over to the VLT peer, the VLTi link (ICL LAG) also receives the
mirrored traffic as the VLTi link is added as an implicit member of the RPM vlan. As a result, the mirrored traffic also reaches the
peer VLT device effecting VLTi link's bandwidth usage.
Port Monitoring
625