Reference Guide

2 Return to CONFIGURATION mode.
exit
3 Create an access list in CONFIGURATION mode.
ip access-list access-list-name
4 Dene access-list rules using seq, permit, and deny statements in CONFIG-ACL mode. The ACL rules describe the trac you
want to monitor. Flow monitoring is supported for IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
seq sequence-number {deny | permit} {source [mask] | any | host ip-address} [count [byte]]
[fragments] [threshold-in-msgs count] [capture session session-id]
5 Return to CONFIGURATION mode.
exit
6 Apply the ow-based monitoring ACL to the monitored source port in CONFIGURATION mode (up to 140 characters).
ip access-group access-list-name {in | out}
7 Save the conguration.
do commit
Enable ow-based monitoring
OS10(config)# monitor session 1
OS10(conf-mon-local-1)# flow-based enable
OS10(conf-mon-local-1)# do commit
OS10(conf-mon-local-1)# exit
OS10(config)# ip access-list ipacl1
OS10(conf-ipv4-acl)# deny ip host 1.1.1.23 any capture session 1 count
OS10(conf-ipv4-acl)# exit
OS10(config)# mac access-list mac1
OS10(conf-mac-acl)# deny any any capture session 1
OS10(conf-mac-acl)# exit
OS10(config)# interface ethernet 1/1/9
OS10(conf-if-eth1/1/9)# mac access-group mac1 in
OS10(conf-if-eth1/1/9)# end
OS10# show mac access-lists in
Ingress MAC access-list mac1
Active on interfaces :
ethernet1/1/9
seq 10 deny any any capture session 1 count (0 packets)
Remote port mirroring
Remote port mirroring allows you to monitor L2 and L3 ingress and/or egress trac on multiple source ports of multiple devices and
forward the mirrored trac to multiple destination ports on dierent remote devices. Remote port mirroring helps network administrators
monitor and analyze trac to troubleshoot network problems in a time-saving and ecient way.
In a remote-port mirroring session, monitored trac is tagged with a VLAN ID and switched on a user-dened, non-routable L2 VLAN. The
VLAN is reserved in the network to carry only mirrored trac, which is forwarded on all egress ports of the VLAN. You must congure each
intermediate switch that participates in the transport of mirrored trac with the reserved L2 VLAN. Remote port monitoring supports
mirroring sessions in which multiple source and destination ports distribute across multiple network devices.
Layer 2
187