Reference Guide

Encapsulated remote port monitoring
The monitored traffic can also be transmitted over an L3 network to a remote analyzer. The encapsulated remote port
monitoring (ERPM) session mirrors traffic from the source ports/lags or source VLANs and forwards the traffic using routable
GRE-encapsulated packets to the destination IP address specified in the session.
Consider the following points while configuring an ERPM session:
● OS10 supports only the ERPM source session. The encapsulated packets terminate at the destination IP address, the remote
analyzer.
● The source IP address must be a valid local IP address for the session to be up.
●
The destination IP address must be on a remote L3 node that supports standard GRE decapsulation.
● If the destination IP address is not reachable, the session goes down.
● OS10 does not support ERPM destination session and decapsulation of ERPM packets at the destination switch.
● You can configure a maximum of 4 ERPM sessions with a maximum of 128 source ports in each session. You can configure
these 4 ERPM sessions in one of the following methods:
○ Single directional with either 4 ingress or 4 egress sessions.
○ Bidirectional with 2 ingress and 2 egress sessions.
● You can monitor a source VLAN only through flow-based monitoring. Only ingress is supported in a flow-based source VLAN
monitoring.
● You cannot configure an interface with ERPM traffic as a source for an ERPM session.
● You cannot monitor an RPM VLAN as a source.
●
You cannot configure the same destination IP address for two sessions.
● You cannot configure an interface that serves as egress for GRE tunnel as a source interface.
● ERPM supports only GRE over IPv4 tunneling.
● ERPM does not support ECMP.
● You can use third party devices as only tunnel-transit devices.
● OS10 does not support monitoring VLAN sub-interfaces and CPU generated packets.
Configure encapsulated remote port monitoring
Encapsulated remote port monitoring requires valid source and destination IP addresses. Ensure that the source IP address is
local and destination IP address is remote. You can also configure the TTL and DSCP values.
Create monitoring session
OS10(config)# monitor session 10 type erpm-source
S10(conf-mon-erpm-source-10)#
Configure source port, source and destination IP addresses, and protocol type
OS10(conf-mon-erpm-source-10)# source interface ethernet 1/1/2
OS10(conf-mon-erpm-source-10)# source-ip 1.1.1.1 destination-ip 3.3.3.3 gre-protocol
35006
OS10(conf-mon-erpm-source-10)# ip ttl 16
OS10(conf-mon-erpm-source-10)# ip dscp 63
OS10(conf-mon-erpm-source-10)# no shut
View configured ERPM session
OS10(conf-mon-erpm-source-6)# do show monitor session all
S.Id Source Destination Dir Mode Source IP Dest IP DSCP
TTL Gre-Protocol State Reason
-----------------------------------------------------------------------------------------
------------------------------------
6 ethernet1/1/2 remote-ip both port 1.1.1.1 3.3.3.3 63
16 35006 true Is UP
View running configuration of monitor session
OS10# show running-configuration monitor
!
monitor session 10 type erpm-source
246
Layer 2