No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - Network Management and Monitoring

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R009

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring N:1 Local Port Mirroring

Example for Configuring N:1 Local Port Mirroring

Networking Requirements

As shown in Figure 10-5, the R&D department and marketing department are connected to Eth2/0/0 and Eth2/0/1 on the Router. The server (monitoring device) equipped with the monitoring software is connected to Eth2/0/2 on the Router to analyze the obtained packets. To ensure enterprise information security, the server is required to monitor all packets sent by the R&D department and marketing department.

Figure 10-5  Networking of local port mirroring

Configuration Roadmap

The configuration roadmap is as follows:
  1. Configure Eth2/0/2 as the local observing port.
  2. Configure Eth2/0/0 and Eth2/0/1 as the mirrored port to copy traffic from the R&D department and marketing department to the Internet to the local observing port.

Procedure

  1. Configure the local observing port.

    # Configure Eth2/0/2 on the Router as the observing port.

    <Huawei> system-view
    [Huawei] sysname Router
    [Router] observe-port interface ethernet 2/0/2
    

  2. Configure mirrored ports.

    # Configure Eth2/0/0 on the Router as the mirrored port to monitor the packets sent by the R&D department.

    [Router] interface ethernet 2/0/0
    [Router-Ethernet2/0/0] mirror to observe-port inbound
    [Router-Ethernet2/0/0] quit
    

    # Configure Eth2/0/1 on the Router as the mirrored port to monitor the packets sent by the marketing department.

    [Router] interface ethernet 2/0/1
    [Router-Ethernet2/0/1] mirror to observe-port inbound
    [Router-Ethernet2/0/1] return
    

  3. Verify the configuration.

    # Check the configuration of the observing port.

    <Router> display observe-port
      ---------------------------------------------------------------------------
      Index    : 1
      Interface: Ethernet2/0/2
      Used     : 2
      ---------------------------------------------------------------------------

    # Check the configuration of the mirrored ports.

    <Router> display mirror-port
      ----------------------------------------------------------------------
            Mirror-port             Direction         Observe-dest  
      ----------------------------------------------------------------------
       1    Ethernet2/0/0           Inbound           Ethernet2/0/2
       2    Ethernet2/0/1           Inbound           Ethernet2/0/2
      ----------------------------------------------------------------------
    

Configuration Files

  • Configuration file of the Router
    #
     sysname Router
    #
     observe-port interface Ethernet2/0/2
    #
    interface Ethernet2/0/0
     mirror to observe-port inbound
    #
    interface Ethernet2/0/1
     mirror to observe-port inbound
    #
    return
    
Translation
Download
Updated: 2019-05-17

Document ID: EDOC1000174072

Views: 120559

Downloads: 368

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next