Reference Guide

T Po40
A Eth1/1/3:1
Supported Releases 10.2.0E or later
Port monitoring
Port monitoring enables mirroring of ingress or egress trac of one port to another for analysis. A mirroring port (MG) or destination port,
is the port where the mirrored trac is sent for analysis. A monitored port (MD) is the source interface which is monitored for trac
analysis, also called source port.
Depending on the location of the destination interface, port monitoring is performed as follows:
• Local port mirroring — The port monitoring is performed in the same switch. The switch forwards a copy of incoming and outgoing
trac from one port to another port for further analysis.
• Remote port mirroring (RPM/RSPAN) — The port monitoring is performed on trac running across a remote device in the same
network. The mirrored trac is carried over the L2 network.
Congure local monitoring session
1
Verify that the intended monitoring port has no conguration other than no shutdown and no switchport.
show running-configuration
2 Create a monitoring session in CONFIGURATION mode.
monitor session session-id [local]
3 Enter the source and direction of monitored trac in MONITOR-SESSION mode.
source interface interface-type {both | rx | tx}
4 Enter the destination of trac in MONITOR-SESSION mode.
destination interface interface-type
Create monitoring session
OS10(config)# monitor session 1
OS10(conf-mon-local-1)#
Congure source and destination port, and trac direction
OS10(conf-mon-local-1)# source interface ethernet 1/1/7-1/1/8 rx
OS10(conf-mon-local-1)# destination interface port-channel 10
OS10(conf-mon-local-1)# no shut
View congured monitoring sessions
In the State eld, true indicates that the port is enabled. In the Reason eld, Is UP indicates that hardware resources are allocated.
OS10# show monitor session all
S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason
----------------------------------------------------------------------
1 ethernet1/1/7 port-channel10 rx N/A N/A N/A N/A true Is UP
Flow-based monitoring
Flow-based monitoring conserves bandwidth by inspecting only specied trac instead of all interface trac. Using ow-based monitoring,
you can monitor only trac received by the source port that matches criteria in ingress access-lists.
1 Enable ow-based monitoring for a monitoring session in MONITOR-SESSION mode.
flow-based enable
Layer 2
215