No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Feature Description - Security 01

This is NE40E V800R010C10SPC500 Feature Description - Security
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Mirroring Fundamentals

Mirroring Fundamentals

In local mirroring, traffic on a port is copied and sent through another port of a local device. As shown in Figure 14-1, Port 1 is the local mirrored port and Port 3 is the local observing port.

Figure 14-1 Networking diagram of local mirroring

Mirroring can be classified into the following types based on mirroring policies:
  • Port mirroring: All traffic received and sent on a port is mirrored.

  • Flow mirroring: Traffic is mirrored only when it meets the configured filtering rules.

Introduction to the Principles of Features Supported in Local Mirroring

  • Mirrors data that is received or sent by a physical port.

    • Mirrors Layer 2 packets received by the mirrored port and sends the packets through a specified observing port.

    • Mirrors Layer 2 packets sent by the mirrored port and sends the packets through a specified observing port.

  • Mirrors data that is received or sent by a VLAN sub-interface.

    • Filters packets based on their VLAN ID, and mirrors only Ethernet packets containing an outer tag equal to a specified VLAN ID. These packets are then sent through a specified observing port.

  • Mirrors data based on traffic classification.

    • Filters packets based on multi-field (MF) classification, such as source IP addresses and destination IP addresses, mirrors these packets, and then sends them through a specified observing port.

  • Sets the CAR for mirrored traffic.

    • Sets the committed information rate (CIR) of the CAR to minimize the impact of mirrored packets on normal forwarding.

  • Mirrors packets to be sent to the CPU.

    • Mirrors only the packets that are sent to the CPU and sends the packets through a specified observing port.

  • Removes labels on an observing interface.

    • A maximum of two labels in a mirroring packet can be removed on an observing interface. Only main interfaces support label removal.

  • Configures whether a mirroring packet carries a Layer 2 header in local mirroring.

    • When a sub-interface functions as an observing interface, a Layer 2 header can be removed from the original packet. Only one layer of Layer 2 header is encapsulated into an outgoing packet.

  • Supports packet mirroring filter rules.

    • Supports filter rule configurations and filters packets based on filter rules.

Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055047

Views: 14046

Downloads: 34

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next