No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Network Management and Monitoring

S2720, S5700, and S6720 V200R013C00

This document describes the configurations of Network Management and Monitoring, including SNMP, RMON, RMON2, LLDP, Performance Management, iPCA, NQA, Service Diagnosis, Mirroring, Packet Capture, NetStream, sFlow, TWAMP Light, NETCONF, ECA, Intelligent Video O&M, eMDI, and Network Deception.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Licensing Requirements and Limitations for Mirroring

Licensing Requirements and Limitations for Mirroring

Involved Network Elements

The switch needs to work with a monitoring server, which analyzes the mirrored packets sent to it.

Licensing Requirements

Mirroring is a basic feature of a switch and is not under License control.

Version Requirements

Table 8-1  Products and versions supporting mirroring
Product Product Model Software Version
S2700 S2700SI

V100R005C01, V100R006(C00&C01&C03&C05)

Only local port mirroring is supported.

S2700EI

V100R005C01, V100R006(C00&C01&C03&C05)

S2710SI

V100R006(C03&C05)

Only local port mirroring and local inbound traffic mirroring are supported.

S2720EI

V200R006C10, V200R009C00, V200R010C00, V200R011C10, V200R012C00, V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S2750EI

V200R003C00, V200R005C00SPC300, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00

(Outbound traffic mirroring and remote traffic mirroring are not supported. Remote MAC address mirroring is supported in V200R005 and later versions.)
S3700 S3700SI, S3700EI

V100R005C01, V100R006(C00&C01&C03&C05)

(Outbound traffic mirroring is not supported.)
S3700HI

V100R006C01, V200R001C00

(Outbound traffic mirroring is not supported.)
S5700 S5700LI

V200R001C00, V200R002C00, V200R003(C00&C02&C10), V200R005C00SPC300, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00

(Outbound traffic mirroring and remote traffic mirroring are not supported. Remote VLAN mirroring is supported in V200R002 and later versions, and remote MAC address mirroring is supported in V200R005 and later versions.)
S5700S-LI

V200R001C00, V200R002C00, V200R003C00, V200R005C00SPC300, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00

(Outbound traffic mirroring and remote traffic mirroring are not supported. Remote VLAN mirroring is supported in V200R002 and later versions, and remote MAC address mirroring is supported in V200R005 and later versions.)
S5720LI, S5720S-LI

V200R010C00, V200R011C00, V200R011C10, V200R012(C00&C20), V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)

S5710-C-LI

V200R001C00

Only port mirroring, local VLAN mirroring, local MAC address mirroring, and local inbound traffic mirroring are supported.

S5710-X-LI

V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S5700SI

V100R005C01, V100R006C00, V200R001C00, V200R002C00, V200R003C00, V200R005C00

(Outbound traffic mirroring and remote traffic mirroring are not supported. Remote VLAN mirroring is supported in V200R002 and later versions, and remote MAC address mirroring is supported in V200R005 and later versions.)
S5720SI, S5720S-SI

V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S5720I-SI

V200R012C00, V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S5730SI

V200R011C10, V200R012C00, V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S5730S-EI

V200R011C10, V200R012C00, V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S5700EI

V100R005C01, V100R006(C00&C01), V200R001(C00&C01), V200R002C00, V200R003C00, V200R005(C00&C01&C02&C03)

(Outbound traffic mirroring is supported in V200R005 and later versions.)
S5710EI

V200R001C00, V200R002C00, V200R003C00, V200R005(C00&C02)

(Outbound traffic mirroring is supported in V200R005 and later versions.)
S5700HI

V100R006C01, V200R001(C00&C01), V200R002C00, V200R003C00, V200R005(C00SPC500&C01&C02)

(Outbound traffic mirroring is supported in V200R005 and later versions.)
S5710HI

V200R003C00, V200R005(C00&C02&C03)

(Outbound traffic mirroring is supported in V200R005 and later versions.)
S5720EI

V200R007C00, V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00

S5720HI

V200R006C00, V200R007(C00&C10), V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00

Only port mirroring and traffic mirroring are supported.

S5730HI

V200R012C00, V200R013C00

Only port mirroring and traffic mirroring are supported.

S6700 S6700EI

V100R006C00, V200R001(C00&C01), V200R002C00, V200R003C00, V200R005(C00&C01&C02)

(Outbound traffic mirroring is supported in V200R005 and later versions.)
S6720LI, S6720S-LI

V200R011C00, V200R011C10, V200R012C00, V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S6720SI, S6720S-SI

V200R011C00, V200R011C10, V200R012C00, V200R013C00

(Outbound traffic mirroring and remote traffic mirroring are not supported.)
S6720EI

V200R008C00, V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00

S6720S-EI

V200R009C00, V200R010C00, V200R011C00, V200R011C10, V200R012C00, V200R013C00

S6720HI

V200R012C00, V200R013C00

Only port mirroring and traffic mirroring are supported.

NOTE:
For details about software mappings, visit Hardware Query Tool and search for the desired product model.

Feature Limitations

Support for the mirroring function:
  • Only the S5700HI, S5710EI, S5710HI, S5720EI, S5720HI, S5730HI, S6700EI, S6720EI, S6720HI, and S6720S-EI series switches support 1:N mirroring and M:N mirroring in V200R005 and later versions.

  • All switch models support N:1 mirroring.

  • In a stack, packets can be mirrored from one member switch to another.

  • Packets mirrored to an observing port cannot be mirrored again on the same device.

  • The S5720HI, S5730HI, and S6720HI do not support VLAN mirroring or MAC address mirroring. You can configure traffic mirroring with traffic classification rules VLAN ID and MAC address.

  • On the S5720HI, S5730HI, and S6720HI, a physical port cannot be configured as an observing port and mirrored port simultaneously.

  • On the S2720EI, S2750EI, S5700LI, S5700S-LI, S5700SI, S5710-C-LI, S5710-X-LI, S5720I-SI, S5720LI, S5720S-LI, S5720S-SI, S5720SI, S5730S-EI, S5730SI, S6720LI, S6720S-LI, S6720S-SI, and S6720SI, a physical port cannot be configured as an observing port and outbound mirrored port simultaneously.

  • On the S5700HI, S5710EI, S5710HI, S5720EI, S5720HI, S5730HI, S6700EI, S6720EI, S6720HI, and S6720S-EI running V200R005 or a later version, an Eth-Trunk can function as an observing port. In a stack, Eth-Trunk member ports can be located on different member switches.
  • For the S5720EI, if a total of four remote observing ports are bound in both the inbound and outbound directions of all mirrored ports, of those bound in the inbound direction, at least one must be different from those bound in the outbound direction.
Notes about mirroring of outbound packets:
  • For the S6720EI and S6720S-EI, outbound traffic mirroring only copies known unicast packets. When outbound traffic mirroring is configured in a traffic behavior, other actions cannot be configured in the traffic behavior; otherwise, outbound traffic mirroring is ineffective.

  • On switches of versions earlier than V200R005, S5700EI, S6700EI, S6720S-EI, and S6720EI of V200R005 and later versions, the copy of outbound packets may be different from the original packets because the mirroring operation is performed before other forwarding operations on the original packets. For example, if the DSCP value of the original packets needs to be changed, the copied packets are different from the original packets because they have been copied to the observing port before the change.

Other configuration guidelines:
  • You must dedicate observing ports for mirroring use and do not configure other services on them to prevent mirrored traffic and other service traffic from affecting each other. Do not configure any member port of an Eth-Trunk as an observing port. If you must do so, ensure that the bandwidth of service traffic on this port and the bandwidth occupied by the mirrored traffic do not exceed the bandwidth limit of the port.

  • If the mirroring function is deployed on many ports of a device, a great deal of internal forwarding bandwidth will be occupied, which affects the forwarding of other services. Additionally, if the mirrored port bandwidth is higher than the observing port bandwidth, for example, 1000 Mbit/s on a mirrored port and 100 Mbit/s on an observing port, the observing port will fail to forward all mirrored packets in a timely manner because of insufficient bandwidth, leading to packet loss.

  • When configuring remote mirroring, you are advised not to perform other service configuration in the VLAN associated with the observing port, that is, the VLAN used to transmit mirrored packets to the monitoring device. On the intermediate device between the observing port and monitoring device, run the mac-address learning disable command in the VLAN associated with the observing port to disable MAC address learning, and run the undo mac-address vlan vlan-id command in the system view to delete all MAC address entries in this VLAN.

  • If both port mirroring and traffic mirroring are configured simultaneously for the same packets on the S2720EI, S2750EI, S5700LI, S5700S-LI, S5700SI, S5710-C-LI, S5710-X-LI, S5720I-SI, S5720LI, S5720S-LI, S5720S-SI, S5720SI, S5730S-EI, S5730SI, S6720LI, S6720S-LI, S6720S-SI, and S6720SI, port mirroring takes effect. On other switch models, traffic mirroring takes precedence over port mirroring.

  • For the S2720EI, S2750EI, S5700LI, S5700S-LI, S5700SI, S5710-C-LI, S5710-X-LI, S5720I-SI, S5720LI, S5720S-LI, S5720S-SI, S5720SI, S5730S-EI, S5730SI, S6720LI, S6720S-LI, S6720S-SI, and S6720SI, if N:1 mirroring or multiple 1:1 mirroring configurations are implemented, mirrored packets may be lost.
  • An observing port in blocked state can still forward mirrored packets.

  • During the traffic mirroring configuration, the deny parameter cannot be configured in the ACL referenced in a traffic classifier. Otherwise, the packets matching the deny parameter can still be mirrored, but the original packets will be discarded. Therefore, to mirror only the specified service packets, set the permit parameter in all ACL rules.

Translation
Download
Updated: 2019-04-20

Document ID: EDOC1100065680

Views: 58579

Downloads: 514

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next