Configuring Observing Ports

Context

You must dedicate observing ports for mirroring use and do not configure other services on them to prevent mirrored traffic and other service traffic from affecting each other.

You can configure observing ports in two ways:

Configure a single observing port.
Configure an observing port group. This method is often used in 1:N mirroring to simplify the configuration and save observing port indexes. This is because an observing port group occupies only one observing port index regardless of how many ports are configured in the group.

Only S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support the configuration of an observing port group.

The management interface cannot be configured as an observing port.

Procedure

Configure local observing ports.

Configuration	Procedure
Configure a single local observing port.	Run the system-view command to enter the system view. (Optional) Run the observe-port observe-port-index dynamic-allocation enable command to enable the function of dynamically applying for observing port resources. Perform this step when the following conditions are met: The same observing port is configured for outbound mirroring and inbound mirroring, and multiple mirrored ports reside on the same switch. The switch where mirrored ports reside is an S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735-S-I, or S5735S-S. Run the observe-port [ observe-port-index ] interface interface-type interface-number [ untag-packet ] command to configure a single local observing port. (Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets. By default, an observing port forwards data packets.
Configure a local observing port group.	Run the system-view command to enter the system view. Run the observe-port [ observe-port-index ] interface-range { interface-type interface-number [ to interface-type interface-number ] } &<1-n> [ untag-packet ] command to configure a local observing port group. In &<1-n>, n is 4 on S5720-EI, S6720-EI, and S6720S-EI or 8 on S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S. (Optional) Run the observe-port observe-port-index interface-range { add \| delete } interface-type interface-number command to add or delete specified observing ports to or from the local observing port group. (Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets. By default, an observing port forwards data packets.

Configuration

Procedure

Configure a single local observing port.

Run the system-view command to enter the system view.
(Optional) Run the observe-port observe-port-index dynamic-allocation enable command to enable the function of dynamically applying for observing port resources.
Perform this step when the following conditions are met:
- The same observing port is configured for outbound mirroring and inbound mirroring, and multiple mirrored ports reside on the same switch.
- The switch where mirrored ports reside is an S5735-L, S5735S-L, S5735S-L-M, S5735-S, S5735-S-I, or S5735S-S.
Run the observe-port [ observe-port-index ] interface interface-type interface-number [ untag-packet ] command to configure a single local observing port.
(Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets.

By default, an observing port forwards data packets.

Configure a local observing port group.

Run the system-view command to enter the system view.
Run the observe-port [ observe-port-index ] interface-range { interface-type interface-number [ to interface-type interface-number ] } &<1-n> [ untag-packet ] command to configure a local observing port group.

In &<1-n>, n is 4 on S5720-EI, S6720-EI, and S6720S-EI or 8 on S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S.
(Optional) Run the observe-port observe-port-index interface-range { add | delete } interface-type interface-number command to add or delete specified observing ports to or from the local observing port group.
(Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets.

By default, an observing port forwards data packets.

Configure Layer 2 remote observing ports.

Configuration	Command
Configure a single Layer 2 remote observing port.	Run the system-view command to enter the system view. Run the observe-port [ observe-port-index ] interface interface-type interface-number vlan vlan-id command to configure a single Layer 2 remote observing port and specify the Layer 2 remote mirroring VLAN. (Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets. By default, an observing port forwards data packets.
Configure a Layer 2 remote observing port group.	Run the system-view command to enter the system view. Run the observe-port [ observe-port-index ] interface-range { interface-type interface-number [ to interface-type interface-number ] } &<1-n> vlan vlan-id command to configure a Layer 2 remote observing port group and specify the Layer 2 remote mirroring VLAN. In &<1-n>, n is 4 on S5720-EI, S6720-EI, and S6720S-EI or 8 on S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S. (Optional) Run the observe-port observe-port-index interface-range { add \| delete } interface-type interface-number command to add or delete specified observing ports to or from the Layer 2 remote observing port group. (Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets. By default, an observing port forwards data packets.

Configuration

Command

Configure a single Layer 2 remote observing port.

Run the system-view command to enter the system view.
Run the observe-port [ observe-port-index ] interface interface-type interface-number vlan vlan-id command to configure a single Layer 2 remote observing port and specify the Layer 2 remote mirroring VLAN.
(Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets.

By default, an observing port forwards data packets.

Configure a Layer 2 remote observing port group.

Run the system-view command to enter the system view.
Run the observe-port [ observe-port-index ] interface-range { interface-type interface-number [ to interface-type interface-number ] } &<1-n> vlan vlan-id command to configure a Layer 2 remote observing port group and specify the Layer 2 remote mirroring VLAN.

In &<1-n>, n is 4 on S5720-EI, S6720-EI, and S6720S-EI or 8 on S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S.
(Optional) Run the observe-port observe-port-index interface-range { add | delete } interface-type interface-number command to add or delete specified observing ports to or from the Layer 2 remote observing port group.
(Recommended) Run the observe-port observe-port-index forwarding disable command to disable the specified observing port from forwarding data packets.

By default, an observing port forwards data packets.

Verifying the Configuration

# Run the display observe-port command to view the observing port configuration. The following is a sample command output.

<HUAWEI> display observe-port
  ----------------------------------------------------------------------
  Index          : 1
  Untag-packet   : No
  Forwarding     : Yes
  Interface      : GigabitEthernet0/0/1
  ----------------------------------------------------------------------
  Index          : 2
  Untag-packet   : No
  Forwarding     : Yes
  Interface-range: GigabitEthernet0/0/2
  Vlan           : 20
  ----------------------------------------------------------------------
  Index          : 3
  Untag-packet   : No
  Forwarding     : Yes
  Interface-range: GigabitEthernet0/0/3 to GigabitEthernet0/0/5
  ----------------------------------------------------------------------