Command Reference

S7700 and S9700 V200R011C10

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.

About This Document
Using the Command Query Tool to Query Product Command Information
Basic Configurations Commands
- CLI Overview Commands
- EasyDeploy Commands
- USB-based Deployment Configuration Commands
- First Login Commands
- UI Configuration Commands
- User Login Configuration Commands
- File Management Commands
- Configuring System Startup Commands
- ISSU Configuration Commands
- Upgrade Commands
- Open Source Software Declaration Information Checking Commands
Device Management Commands
- Device Status Checking Commands
- Hardware Configuration Commands
- Information Center Configuration Commands
- Fault Management Commands
- NTP Configuration Commands
- PTP Configuration Commands
- Clock Syntonization Commands
- Energy-saving Configuration Commands
- PoE Configuration Commands
- CSS Configuration Commands
- SVF Configuration Commands
Interface Management Commands
- Basic Interface Configuration Commands
- Ethernet Interface Configuration Commands
- Logical Interface Configuration Commands
Ethernet Switching Configuration Commands
- MAC Address Table Configuration Commands
- Link Aggregation Commands
- VLAN Configuration Commands
- VLAN Aggregation Configuration Commands
- VLAN Switch Configuration Commands
- MUX VLAN Configuration Commands
- VLAN Termination Configuration Commands
- Voice VLAN Configuration Commands
- QinQ Configuration Commands
- VLAN Mapping Configuration Commands
- GVRP Configuration Commands
- VCMP Configuration Commands
- STP/RSTP/MSTP/VBST Configuration Commands
- SEP Configuration Commands
- RRPP Configuration Commands
- ERPS (G.8032) Configuration Commands
- Loop Detection Configuration Commands
- Loopback Detection Configuration Commands
- HVRP Configuration Commands
- Layer 2 Protocol Transparent Transmission Commands
IP Service Commands
- IPv4 Configuration Commands
- ARP Configuration Commands
- DHCP Configuration Commands
- DNS Configuration Commands
- mDNS Gateway Configuration Commands
- mDNS Relay Configuration Commands
- UDP Helper Configuration Commands
- IP Performance Optimization Configuration Commands
- Basic IPv6 Configuration Commands
- DHCPv6 Configuration Commands
- IPv6 DNS Configuration Commands
- IPv6 over IPv4 Tunnel Configuration Commands
- IPv4 over IPv6 Tunnel Configuration Commands
IP Unicast Routing Commands
- Static Route Configuration Commands
- RIP Configuration Commands
- RIPng Configuration Commands
- OSPF Configuration Commands
- OSPFv3 Configuration Commands
- IPv4 IS-IS Configuration Commands
- IPv6 IS-IS Configuration Commands
- BGP Configuration Commands
- Routing Policy Configuration Commands
- IP Routing Table Management Commands
- PBR Configuration Commands
IP Multicast Commands
- IGMP Configuration Commands
- MLD Configuration Commands
- PIM (IPv4) Configuration Commands
- PIM (IPv6) Configuration Commands
- MSDP Configuration Commands
- Multicast VPN Configuration Commands
- Layer 3 Multicast CAC Commands
- Multicast Route Management (IPv4) Commands
- Multicast Route Management (IPv6) Commands
- VLAN-based IGMP Snooping Configuration Commands
- VSI-based IGMP Snooping Configuration Commands
- MLD Snooping Configuration Commands
- Static Multicast MAC Address Configuration Commands
- Multicast VLAN Configuration Commands
- VLAN-based Layer 2 Multicast CAC Commands
- VSI-based Layer 2 Multicast CAC Commands
- Multicast Network Management Commands
MPLS Configuration Commands
- Basic MPLS Configuration Commands
- MPLS QoS Configuration Commands
- MPLS TE Configuration Commands
- MPLS OAM Configuration Command
VPN Configuration Commands
- GRE Configuration Commands
- IPSec Configuration Commands (IPSec Encryption)
- BGP/MPLS IP VPN Configuration Commands
- VLL Configuration Commands
- PWE3 Configuration Commands
- VPLS Configuration Commands
- L2VPN Access to L3VPN Configuration Commands
WLAN-AC Commands
- WLAN Service Configuration Commands
- WLAN Radio Resource Management Configuration Commands
- WLAN Spectrum Analysis Configuration Commands
- WLAN Roaming Commands
- WLAN QoS Configuration Commands
- WLAN Location Configuration Commands
- WLAN Security Configuration Commands
- WLAN WDS Configuration Commands
- WLAN Mesh Configuration Commands
- Vehicle-Ground Fast Link Handover Configuration Commands
- IoT AP Configuration Commands
- WLAN Traffic Optimization Commands
- WLAN Reliability Commands
Reliability Commands
- BFD Configuration Commands
- VRRP Configuration Commands
- NSR Configuration Commands
- DLDP Configuration Commands
- Smart Link And Monitor Link Configuration Commands
- MAC Swap Loopback Configuration Commands
- EFM Configuration Commands
- CFM Configuration Commands
- Y.1731 Configuration Commands
User Access and Authentication Commands
- AAA Configuration Commands
- RADIUS Configuration Commands
- HWTACACS Configuration Commands
- DAA Configuration Commands
- IP Session Configuration Commands
- NAC Configuration Commands (Unified Mode)
- NAC Configuration Commands (Common Mode)
- Policy Association Configuration Commands
- PPPoE Configuration Commands
Security Commands
- ACL Configuration Commands
- Reflective ACL Commands
- Local Attack Defense Configuration Commands
- Attack Defense Configuration Commands
- MFF Configuration Commands
- Traffic Suppression and Storm Control Configuration Commands
- ARP Security Configuration Commands
- Port Security Configuration Commands
- DHCP Snooping Configuration Commands
- ND Snooping Configuration Commands
- PPPoE+ Configuration Commands
- IP Source Guard Configuration Commands
- SAVI Configuration Commands
- URPF Configuration Commands
- Keychain Configuration Commands
- MPAC Configuration Commands
- Traffic Isolation Between the Service and Management planes Configuration Commands
- Security Risk Commands
- PKI Configuration Commands
QoS Commands
- MQC Configuration Commands
- Priority Mapping Commands
- Traffic Policing, Traffic Shaping, and Interface-based Rate Limiting Commands
- Congestion Avoidance and Congestion Management Commands
- Filtering Configuration Commands
- Redirection Configuration Commands
- Statistics Configuration Commands
- ACL-based Simplified Traffic Policy Commands
- HQoS Commands
Network Management and Monitoring Commands
- SNMP Configuration Commands
- RMON and RMON2 Configuration Commands
- LLDP Configuration Commands
- Performance Management Commands
- iPCA Configuration Commands
- NQA Configuration Commands
- Service Diagnosis Configuration Commands
- Mirroring Configuration Commands
- Packet Capture Configuration Command
- Traffic Distribution Commands
- NetStream Configuration Commands
- sFlow Configuration Commands
- Ping and Tracert Configuration Commands
- TWAMP Light Configuration Commands
- NETCONF Configuration Commands
Free Mobility and Service Chaining Commands
- Free Mobility Configuration Commands
- Service Chain Configuration Commands
VXLAN Commands
- VXLAN Configuration Commands
Upgrade-compatible Commands Reference
- Basic Configuration Compatible Commands
- Device Management Compatible Commands
- Interface Management Compatible Commands
- Ethernet Switching Compatible Commands
- IP Service Compatible Commands
- IP Routing Compatible Commands
- IP Multicast Compatible Commands
- MPLS compatible command
- VPN compatible command
- WLAN Compatible Commands
- Reliability Compatible Commands
- User Access and Authentication Compatible Commands
- Security Compatible Commands
- QoS Compatible Commands
- Network Management Compatible Commands

Rate and give feedback:

Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).

Mirroring Configuration Commands

NOTE:

The device supports the mirroring function, which is mainly used for network monitoring and fault management and may use user communication information. Huawei will not collect or save user communication information independently. You must use this function in compliance with applicable laws and regulations. Ensure that your customers' privacy is protected when you are using or saving communication information.

Command Support
display observe-port
display port-mirroring
mirroring to cpu
mirroring to observe-port
observe-port (local observing port)
observe-port (remote observing port)
port-mirroring to observe-port

Command Support

Commands provided in this section and all the parameters in the commands are supported by all switch models by default, unless otherwise specified. For details, see specific commands.

display observe-port

Function

The display observe-port command displays the observing port configuration.

Format

display observe-port

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After observing ports are configured using the observe-port (local observing port) or observe-port (remote observing port) command in the system view, you can run the display observe-port command to check detailed information about the configured observing ports.

Example

# Display the observing port configuration.

<HUAWEI> display observe-port
  ----------------------------------------------------------------------
  Index          : 1
  Untag-packet   : No
  Interface      : GigabitEthernet1/0/1
  ----------------------------------------------------------------------
  Index          : 2
  Untag-packet   : No
  Interface-range: GigabitEthernet2/0/1 to GigabitEthernet2/0/3
  ----------------------------------------------------------------------
  Index          : 3
  Untag-packet   : No
  Interface-range: GigabitEthernet3/0/1 to GigabitEthernet3/0/3
  Vlan           : 2
  ----------------------------------------------------------------------

Table 16-80 Description of the display observe-port command output

Item	Description
Index	Index of an observing port. This parameter is configured using the observe-port (local observing port) or observe-port (remote observing port) command.
Untag-packet	Whether to remove VLAN tags of mirrored packets. This parameter is configured using the observe-port (local observing port) command. NOTE: VLAN tags of mirrored packets can be removed only when local observing ports are configured on X series cards and packets are mirrored to local observing ports. Each mirrored packet can have at most two VLAN tags removed.
Interface	Observing ports configured one by one. This parameter is configured using the observe-port (local observing port) or observe-port (remote observing port) command.
Interface-range	Observing ports configured in a batch. This parameter is configured using the observe-port (local observing port) or observe-port (remote observing port) command.
Vlan	VLAN ID This parameter is configured using the observe-port (remote observing port) command.

display port-mirroring

Function

The display port-mirroring command displays the mirroring configuration.

Format

display port-mirroring

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After observing ports and mirrored ports are configured on the switch, you can run the display port-mirroring command to check detailed mirroring configuration on the switch.

Example

# Display the mirroring configuration.

<HUAWEI> display port-mirroring
  ----------------------------------------------------------------------
  Observe-port 1 : GigabitEthernet4/0/1
  Observe-port 2 : GigabitEthernet4/0/2
  ----------------------------------------------------------------------
  Port-mirror:
  ----------------------------------------------------------------------
       Mirror-port               Direction  Observe-port
  ----------------------------------------------------------------------
  1    GigabitEthernet4/0/10     Inbound    Observe-port 1
  ----------------------------------------------------------------------
  Stream-mirror:
  ----------------------------------------------------------------------
       Behavior                  Direction  Observe-port
  ----------------------------------------------------------------------
  1    b1                        -          Observe-port 2
  ----------------------------------------------------------------------

Table 16-81 Description of the display port-mirroring command output

Item	Description
Port-mirror	Port mirroring configuration.
Mirror-port	Mirrored port. This parameter is configured using the port-mirroring to observe-port command.
Direction	Direction of mirrored packets: Inbound Outbound This parameter is configured using the port-mirroring to observe-port command.
Observe-port	Observing port to which mirrored packets are sent. This parameter is configured using the observe-port (local observing port) or observe-port (remote observing port) command.
Stream-mirror	Traffic mirroring configuration.
Behavior	Traffic behavior of traffic mirroring. In MQC-based traffic mirroring, this parameter is configured using the mirroring to observe-port command. In ACL-based traffic mirroring, this parameter is configured using the traffic-mirror (system view) or traffic-mirror (interface view) command.

mirroring to cpu

Function

The mirroring to cpu command copies traffic matching rules to the CPU.

The undo mirroring command cancels copying traffic matching rules to the CPU.

By default, traffic matching rules is not copied to the CPU.

Format

mirroring to cpu

undo mirroring

Parameters

None

Views

Traffic behavior view

Default Level

3: Management level

Usage Guidelines

When configuring MQC-based traffic mirroring, you can run the mirroring to cpu command to copy traffic matching rules to the CPU of an LPU for analysis.

Running this command will affect the CPU of an LPU. Therefore, use this command with caution.

Example

# Copy traffic matching rules to the CPU.

<HUAWEI> system-view
[HUAWEI] traffic behavior tb1
[HUAWEI-behavior-tb1] mirroring to cpu

mirroring to observe-port

Function

The mirroring to observe-port command copies traffic matching rules to observing ports.

The undo mirroring command cancels copying traffic matching rules to observing ports.

By default, traffic matching rules is not copied to observing ports.

Format

mirroring to observe-port observe-port-index

undo mirroring

Parameters

Parameter	Description	Value
observe-port-index	Specifies the index of observing ports.	The value is an integer that ranges from 1 to 8.

Views

Traffic behavior view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When configuring MQC-based traffic mirroring, you can run the mirroring to observe-port command to copy traffic matching rules to a specified observing port.

Prerequisites

Observing ports have been configured using the observe-port (local observing port) or observe-port (remote observing port) command in the system view.

Precautions

On the EH1D2G48TBC0 and EH1D2G48SBC0 cards of the S9700 and ES1D2G48TBC0 and ES1D2G48SBC0 cards of the S7700, outbound traffic mirroring does not take effect on Eth-Trunks. On other series cards, outbound traffic mirroring is invalid for inter-card traffic.

Example

# Copy traffic matching rules to observing ports with index 1.

<HUAWEI> system-view
[HUAWEI] observe-port 1 interface gigabitethernet 1/0/1
[HUAWEI] traffic behavior tb1
[HUAWEI-behavior-tb1] mirroring to observe-port 1

Related Topics

observe-port (local observing port)

observe-port (remote observing port)

observe-port (local observing port)

Function

The observe-port command configures local observing ports.

The undo observe-port command deletes local observing ports.

By default, no local observing ports are configured.

Format

observe-port [ observe-port-index ] interface interface-type interface-number [ untag-packet ] (single configuration)

observe-port [ observe-port-index ] interface-range { interface-type interface-number [ to interface-type interface-number ] } &<1-8> [ untag-packet ] (batch configuration)

observe-port observe-port-index interface-range { add | delete } interface-type interface-number

undo observe-port observe-port-index

Parameters

Parameter	Description	Value
observe-port-index	Specifies the index of observing ports.	The value is an integer that ranges from 1 to 8.
interface-type interface-number	Specifies the type and number of an interface.	-
add	Adds observing ports to the observing ports configured in a batch.	-
delete	Deletes observing ports from the observing ports configured in a batch.	-
untag-packet	Removes VLAN tags of mirrored packets. NOTE: VLAN tags of mirrored packets can be removed only when a mirrored port belongs to X series cards, and each mirrored packet can have at most two VLAN tags removed. That is, during observing port configuration, the untag-packet parameter can be configured on ports of any card. If you configure the port-mirroring to observe-port command to bind a mirrored port to an observing port, the function of removing VLAN tags of mirrored packets takes effect only when the mirrored port belongs to X series cards.	-

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When an observing port is directly connected to a monitoring host, you can run the observe-port command to configure a local observing port. Observing ports can be configured one by one or in a batch. The single configuration and batch configuration modes can be used simultaneously. If multiple observing ports are configured in a batch, these observing ports are bound to the same mirrored port. Therefore, batch configuration is often used to simplify the configuration of 1:N mirroring.

Precautions

The management interface cannot be configured as an observing port.
If you configure observing ports without specifying observe-port-index, the system selects the smallest unused indexes and assigns the indexes to the observing ports in sequence.
If you need to update the observing ports configured in a batch, run the observe-port observe-port-index interface-range { add | delete } interface-type interface-number command to add or delete observing ports to or from the configured observing ports.
In 1:N mirroring, if you configure packets (in the inbound or outbound direction) on a mirrored port to be copied to multiple observing ports configured in a batch, the packets cannot be copied to other observing ports.
Both Ethernet ports and Eth-Trunks can be configured as observing ports.
An observing port in blocked state can still forward mirrored packets.
The maximum number of observing ports varies depending on device models. For details, see Observing Port Specifications in "Mirroring Configuration" in the S7700 and S9700 V200R011C10 Configuration Guide - Network Management and Monitoring.
An observing port is dedicated to forwarding mirrored traffic. Do not configure other services on an observing port; otherwise, mirrored traffic and other service traffic interfere with each other. Do not configure any member port of an Eth-Trunk as an observing port. If you must do so, ensure that the bandwidth of service traffic on this port and the bandwidth occupied by the mirrored traffic do not exceed the bandwidth limit of the port.

Example

# Configure GigabitEthernet1/0/1 as a local observing port.

<HUAWEI> system-view
[HUAWEI] observe-port 1 interface gigabitethernet 1/0/1

# Configure GigabitEthernet1/0/1 through GigabitEthernet1/0/3 as local observing ports in a batch.

<HUAWEI> system-view
[HUAWEI] observe-port 1 interface-range gigabitethernet 1/0/1 to gigabitethernet 1/0/3

Related Topics

display observe-port

observe-port (remote observing port)

Function

The observe-port command configures remote observing ports.

The undo observe-port command deletes remote observing ports.

By default, no remote observing ports are configured.

Format

observe-port [ observe-port-index ] interface interface-type interface-number vlan vlan-id (Layer 2 remote observing port configured one by one)

observe-port [ observe-port-index ] interface-range { interface-type interface-number [ to interface-type interface-number ] } &<1-8> vlan vlan-id (Layer 2 remote observing ports configured in a batch)

observe-port observe-port-index interface-range { add | delete } interface-type interface-number

undo observe-port observe-port-index

Parameters

Parameter	Description	Value
observe-port-index	Specifies the index of observing ports.	The value is an integer that ranges from 1 to 8.
interface-type interface-number	Specifies the type and number of an interface.	-
add	Adds observing ports to the observing ports configured in a batch.	-
delete	Deletes observing ports from the observing ports configured in a batch.	-
vlan vlan-id	Specifies the VLAN ID encapsulated into mirrored packets.	The value is an integer that ranges from 1 to 4094.

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

In remote mirroring, a monitoring device and monitored device where an observing port resides are connected through a Layer 2 network. The monitored device adds a specified VLAN tag to mirrored packets, and then the observing port broadcasts the mirrored packets in a specified VLAN so that the mirrored packets can be sent to the monitoring device.

Observing ports can be configured one by one or in a batch. The single configuration and batch configuration modes can be used simultaneously. If multiple observing ports are configured in a batch, these observing ports are bound to the same mirrored port. Therefore, batch configuration is often used to simplify the configuration of 1:N mirroring.

Precautions

The management interface cannot be configured as an observing port.
If you configure observing ports without specifying observe-port-index, the system selects the smallest unused indexes and assigns the indexes to the observing ports in sequence.
If you need to update the observing ports configured in a batch, run the observe-port observe-port-index interface-range { add | delete } interface-type interface-number command to add or delete observing ports to or from the configured observing ports.
In 1:N mirroring, if you configure packets (in the inbound or outbound direction) on a mirrored port to be copied to multiple observing ports configured in a batch, the packets cannot be copied to other observing ports.
Both Ethernet ports and Eth-Trunks can be configured as observing ports.
An observing port in blocked state can still forward mirrored packets.
The maximum number of observing ports varies depending on device models. For details, see Observing Port Specifications in "Mirroring Configuration" in the S7700 and S9700 V200R011C10 Configuration Guide - Network Management and Monitoring.
An observing port is dedicated to forwarding mirrored traffic. Do not configure other services on an observing port; otherwise, mirrored traffic and other service traffic interfere with each other. Do not configure any member port of an Eth-Trunk as an observing port. If you must do so, ensure that the bandwidth of service traffic on this port and the bandwidth occupied by the mirrored traffic do not exceed the bandwidth limit of the port.

Example

# Configure GigabitEthernet1/0/1 as a Layer 2 remote observing port, and bind the port to VLAN 10.

<HUAWEI> system-view
[HUAWEI] observe-port 1 interface gigabitethernet 1/0/1 vlan 10

# Configure GigabitEthernet1/0/1 through GigabitEthernet1/0/3 as Layer 2 remote observing ports in a batch, and bind these ports to VLAN 10.

<HUAWEI> system-view
[HUAWEI] observe-port 2 interface-range gigabitethernet 1/0/1 to gigabitethernet 1/0/3 vlan 10

Related Topics

display observe-port

observe-port (local observing port)

port-mirroring to observe-port

Function

The port-mirroring to observe-port command copies packets on a mirrored port to observing ports.

The undo port-mirroring command cancels copying packets on a mirrored port to observing ports.

By default, packets on a mirrored port are not copied to observing ports.

Format

port-mirroring to observe-port observe-port-index { both | inbound | outbound }

undo port-mirroring [ to observe-port observe-port-index ] { both | inbound | outbound }

Parameters

Parameter	Description	Value
observe-port-index	Specifies the index of observing ports.	The value is an integer that ranges from 1 to 8.
both	Copies inbound and outbound packets on a mirrored port to observing ports.	-
inbound	Copies inbound packets on a mirrored port to observing ports.	-
outbound	Copies outbound packets on a mirrored port to observing ports.	-

Views

Ethernet interface view, GE interface view, XGE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

In port mirroring, you can run the port-mirroring to observe-port command to copy packets that pass through a mirrored port to specified observing ports.

Prerequisites

Observing ports have been configured using the observe-port (local observing port) or observe-port (remote observing port) command in the system view.

Precautions

To prevent mirrored packets from being lost, ensure that mirrored and monitoring ports have the same port type and bandwidth.

Both physical interfaces and Eth-Trunks can be configured as mirrored ports. If an Eth-Trunk is configured as a mirrored port, its member ports cannot be configured as observing ports.

Example

# Configure port mirroring for inbound packets on GigabitEthernet1/0/1.

<HUAWEI> system-view
[HUAWEI] observe-port 1 interface gigabitethernet 1/0/2
[HUAWEI] interface gigabitethernet 1/0/1
[HUAWEI-GigabitEthernet1/0/1] port-mirroring to observe-port 1 inbound

Related Topics

observe-port (local observing port)

observe-port (remote observing port)

Command Support
display observe-port
display port-mirroring
mirroring to cpu
mirroring to observe-port
observe-port (local observing port)
observe-port (remote observing port)
port-mirroring to observe-port

Translation

简体中文

Download

Updated: 2019-10-18

Document ID: EDOC1000178288

Downloads: 109

Average rating:

This Document Applies to these Products

Related Version

Reminder

Enterprise

Corporate

Consumer

Carrier

Africa

Latin America

Middle East

Asia Pacific

North America

Europe

Command Reference

S7700 and S9700 V200R011C10

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.

Mirroring Configuration Commands

Command Support

display observe-port

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

display port-mirroring

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

mirroring to cpu

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

mirroring to observe-port

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

observe-port (local observing port)

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

observe-port (remote observing port)

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

port-mirroring to observe-port

Function

Format

Parameters

Views

Default Level

Usage Guidelines

Example

About Huawei

How to Buy

Partner

Resources

Others

Enterprise App