User's Manual

Configuration Guide of XGS-5240-Series
28-1
Chapter 28 Flow-based Redirection
28.1 Introduction to Flow-based Redirection
Flow-based redirection function enables the switch to transmit the data frames meeting
some special condition (specified by ACL) to another specified port. The fames meeting a
same special condition are called a class of flow, the ingress port of the data frame is called
the source port of redirection, and the specified egress port is called the destination port of
redirection. Usually there are two kinds of application of flow-based redirection: 1.
connecting a protocol analyzer (for example, Sniffer) or a RMON monitor to the destination
port of redirection, to monitor and manage the network, and diagnose the problems in the
network; 2. Special transmission policy for a special type of data frames.
The switch can only designate a single destination port of redirection for a same class
of flow within a source port of redirection, while it can designate different destination ports of
redirection for different classes of flows within a source port of redirection. The same class of
flow can be applied to different source ports.
28.2 Flow-based Redirection Configuration Task
Sequence
1. Flow-based redirection configuration
2. Check the current flow-based redirection configuration
1．
1. Flow-based redirection configuration
2. Check the current flow-based redirection configuration
Command
Explanation
Physical Interface Configuration Mode
access-group <aclname
> redirect to interface
[ethernet <IFNAME>|<IFNAME>]
no access-group <aclname> redirect
Specify flow-based redirectio
n for the port; the “no acce
ss-group <aclname> redire
ct” command is used to del
ete flow-based redirection.