Install Guide

Enabling Flow-Based Monitoring
Flow-based monitoring is supported on the platform.
Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead of all traffic on the interface. This
feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress traffic. You can
specify traffic using standard or extended access-lists.
1. Enable flow-based monitoring for a monitoring session.
MONITOR SESSION mode
flow-based enable
2. Define access-list rules that include the keyword monitor. Dell Networking OS only considers port monitoring traffic that
matches rules with the keyword monitor.
CONFIGURATION mode
ip access-list
For more information, see Access Control Lists (ACLs).
3. Apply the ACL to the monitored port.
INTERFACE mode
ip access-group access-list
To view an access-list that you applied to an interface, use the show ip accounting access-list command from EXEC
Privilege mode.
Configuring IP Mirror Access Group
To configure an IP mirror access group on an interface, use the following commands:
1. Allocate CAM profile for IPv4 ACL.
CONFIGURATION mode
cam-acl {default | l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number
l2pt number ipmacacl number [vman-qos | vman-qos—dual— number | vman-qos—dual—fp number]
ipv4pbr number} ecfmacl number [nlbclusteraclnumber]fcoeacl number iscsioptacl number
ipv4udfmirracl number | ipv4mirracl number}
2. Create a monitor session.
CONFIGURATION mode
monitor session session-ID [type { rpm | erpm [set ip dscp dscp_value | set ip ttl
ttl_value]}] [drop]
Dell(conf)#monitor session 65535 type erpm
3. Create an IP access-list.
CONFIGURATION mode
ip access-list {standard | extended} access-list-name
Dell(conf)#ip access-list standard test
4. Configure a filter to permit the IP packets.
CONFIGURATION—STANDARD—ACCESS—LIST mode
CONFIGURATION—EXTENDED—ACCESS—LIST mode
permit {source mask | any | host ip-address} {destination mask | any | host ip-address}
[count [bytes]] [dscp value] [order] [fragments] [monitor [session-id]] [no-drop]
Dell(config-ext-nacl)#permit ip any any count monitor 65535
5. Associate the IP access list to an interface.
INTERFACE mode
ip mirror-access-group access-list-name {in | out} [implicit-permit] [vlan vlan-id]
[optimized]
Dell(conf-if-te-0/4)#ip mirror-access-group acl3 in
104
Access Control Lists (ACLs)