Example for Configuring MQC-based Local Traffic Mirroring

Procedure

1. Configure an observing port.

   # Configure GE0/0/2 of the Switch as a local observing port.

   <HUAWEI> system-view
   [HUAWEI] sysname Switch
   [Switch] observe-port 1 interface gigabitethernet 0/0/2     //Configure GE0/0/2 as a local observing port 1.

2. Configure a traffic classifier.

   # Create a traffic classifier c1 on the Switch, and configure rules to match two types of traffic: traffic with source network segment 10.1.1.0/24 and destination TCP port number WWW and traffic with source network segment 10.1.1.0/24 and destination network segment 10.1.2.0/24.

   [Switch] acl number 3000     //Create ACL 3000 to allow the packets with source network segment 10.1.1.0/24 and destination TCP port number WWW to pass through.
   [Switch-acl-adv-3000] rule permit tcp source 10.1.1.0 0.0.0.255 destination-port eq www
   [Switch-acl-adv-3000] quit
   [Switch] acl number 3001     //Create ACL 3001 to allow the packets with source network segment 10.1.1.0/24 and destination network segment 10.1.2.0/24 to pass through.
   [Switch-acl-adv-3001] rule permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0 0.0.0.255
   [Switch-acl-adv-3001] quit
   [Switch] traffic classifier c1 operator or     //Create a traffic classifier c1, and match ACL 3000 or ACL 3001.
   [Switch-classifier-c1] if-match acl 3000
   [Switch-classifier-c1] if-match acl 3001
   [Switch-classifier-c1] quit

3. Configure a traffic behavior.

   # Create a traffic behavior b1 on the Switch, and define traffic mirroring in the traffic behavior to copy specified traffic to local observing port GE0/0/2.

   [Switch] traffic behavior b1     //Create a traffic behavior b1 to mirror specified traffic to observing port 1.
   [Switch-behavior-b1] mirroring to observe-port 1
   [Switch-behavior-b1] quit

   

   For fixed switches S6720-EI and S6720S-EI as well as cards (except X series cards) on modular switches, when configuring outbound traffic mirroring, do not configure other traffic behaviors (except the traffic statistics function of modular switches running V100R006 and earlier versions). From V200R001 to V200R010, the permit action generated by default when a traffic behavior is created on modular switches must also be deleted; otherwise, outbound traffic mirroring is ineffective.

4. Configure a traffic policy and apply the traffic policy to an interface.

   # Create a traffic policy named p1 on the Switch, bind the traffic behavior and traffic classifier to the traffic policy, and apply the traffic policy to the inbound direction of GE0/0/1 to monitor specified traffic of the science and technology department.

   [Switch] traffic policy p1     //Create a traffic policy p1 and bind the traffic behavior and traffic classifier to the traffic policy.
   [Switch-trafficpolicy-p1] classifier c1 behavior b1
   [Switch-trafficpolicy-p1] quit
   [Switch] interface gigabitethernet 0/0/1
   [Switch-GigabitEthernet0/0/1] traffic-policy p1 inbound     //Apply the traffic policy p1 to the inbound direction of GE0/0/1.
   [Switch-GigabitEthernet0/0/1] return

5. Verify the configuration.

   # Check the traffic classifier configuration.

   <Switch> display traffic classifier user-defined c1
     User Defined Classifier Information:
      Classifier: c1
       Operator: OR
       Rule(s) : if-match acl 3000
                 if-match acl 3001

   # Check the traffic policy configuration.

   <Switch> display traffic policy user-defined p1
     User Defined Traffic Policy Information:
     Policy: p1
      Classifier: c1
       Operator: OR
        Behavior: b1
         Mirroring  to observe-port 1

   # Check the observing port configuration.

   <Switch> display observe-port
     ----------------------------------------------------------------------
     Index          : 1
     Untag-packet   : No
     Interface      : GigabitEthernet0/0/2
     ----------------------------------------------------------------------

   # Check the mirroring configuration.

   <Switch> display port-mirroring
     ----------------------------------------------------------------------
     Observe-port 1 : GigabitEthernet0/0/2
     ----------------------------------------------------------------------
     Stream-mirror:
     ----------------------------------------------------------------------
          Behavior                  Direction  Observe-port
     ----------------------------------------------------------------------
     1    b1                        -          Observe-port 1
     ----------------------------------------------------------------------