Configuring a remote source group (on the source device)
This section describes how to configure a remote source group on the source device.
Creating a remote source group
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Create a remote source group. | mirroring-group group-id remote-source | By default, no remote source group exists on a device. |
Configuring source ports for a remote source group
CAUTION: Do not assign a source port to the remote probe VLAN. | ||
Either you can configure a list of source ports for a mirroring group in system view, or you can assign only the current port to the a mirroring group as a source port in interface view. To assign multiple ports to the mirroring group as source ports in interface view, repeat the step.
When you configure source ports for the remote source group, follow these guidelines:
A mirroring group can contain multiple source ports.
On the HPE 5800 switch series, one mirroring resource is used for mirroring unidirectional traffic on a source port and two mirroring resources are used for mirroring bidirectional traffic on a source port. A source port on the HPE 5800 is assigned a maximum of four mirroring resources. Therefore, a port, when serving as a unidirectional source port, can be added to up to four mirroring groups. When serving as a bidirectional port can be added to up to two mirroring groups, and when serving as a bidirectional source port and two unidirectional ports can be added to up to three mirroring groups.
On the HPE 5820X switch series, each port, serving as a unidirectional or bidirectional source port, can be added to up to two mirroring groups.
To configure source ports for a remote source group in system view:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure source ports for a remote source group. | mirroring-group group-id mirroring-port mirroring-port-list { both | inbound | outbound } | By default, no source port is configured for a remote source group. |
To configure a source port for a remote source group in interface view:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter interface view. | interface interface-type interface-number | N/A |
3. Configure the current port as a source port for a remote source group. | [ mirroring-group group-id ] mirroring-port { both | inbound | outbound } | By default, a port does not serve as a source port for any remote source group. |
Configuring source CPUs for a remote source group
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure source CPUs for a remote source group. | mirroring-group group-id mirroring-cpu slot slot-number-list { both | inbound | outbound } | By default, no source CPU is configured for a remote source group. |
NOTE: A mirroring group can contain multiple source CPUs. | ||
Configuring the egress port for a remote source group
CAUTION: Disable these functions on the egress port: spanning tree, 802.1X, IGMP snooping, static ARP, and MAC address learning. | ||
Either you can configure the egress port for a mirroring group in system view, or you can assign the current port to it as the egress port in interface view. The two configuration methods lead to the same result.
When you configure the egress port for the remote source group, follow these guidelines:
A mirroring group contains only one egress port.
A port of an existing mirroring group cannot be configured as an egress port.
To configure the egress port for a remote source group in system view:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure the egress port for a remote source group. | mirroring-group group-id monitor-egress monitor-egress-port | By default, no egress port is configured for a remote source group. |
To configure the egress port for a remote source group in interface view:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter interface view. | interface interface-type interface-number | N/A |
3. Configure the current port as the egress port for a remote source group. | mirroring-group group-id monitor-egress | By default, a port does not serve as the egress port for any remote source group. |
Configuring the remote probe VLAN for a remote source group
Before configuring a remote probe VLAN, create a static VLAN that serves as the remote probe VLAN for the remote source group.
When you configure the remote probe VLAN for the remote source group, follow these guidelines:
A VLAN can serve for only one mirroring group.
When a VLAN is configured as a remote probe VLAN, you must remove the remote probe VLAN configuration before deleting the VLAN.
When you remove the configuration of a remote probe VLAN, an active mirroring group becomes inactive.
When a VLAN is configured as a remote probe VLAN, use the remote probe VLAN for port mirroring exclusively. Do not configure a VLAN interface or any other features for the VLAN.
The remote mirroring groups on the source device and destination device must use the same remote probe VLAN.
To configure the remote probe VLAN for a remote source group:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure the remote probe VLAN. | mirroring-group group-id remote-probe vlan rprobe-vlan-id | By default, no remote probe VLAN is configured for a remote source group. |