Example for Configuring VLAN Port Mirroring (1:N Scenario)

This section provides an example for configuring local port mirroring in a 1:N scenario to copy packets received by a mirrored port to multiple observing ports.

Networking Requirements

As shown in Figure 1, user packets from VLAN 10 and VLAN 20 are sent to the Device through a switch. To monitor VLAN10 packets that the Device receives through interface 1, configure interface 2 and interface 3 on the Device as observing ports, and interface 1 as a mirrored port. Enable the port mirroring function for traffic of VLAN 10. Then, map the mirrored port to the observing ports. In this manner, all the packets of VLAN 10 received by interface 1 can be copied to interface 2 and interface 3.

Figure 1 Networking diagram for configuring port mirroring in a 1:N scenario

The configurations in this example are performed on the Device. The HUAWEI NetEngine 8000 F Series can function as a Device.
Interfaces 1 through 3 in this example represent GE 0/1/0, GE 0/1/8, and GE 0/1/16, respectively.

Device Name	Interface Name	IP Address
Device	GE 0/1/0	-
Device	GE 0/1/8	10.10.1.1/24
Device	GE 0/1/16	10.1.1.2/24

Precautions

An interface cannot function as both an observing port and a mirrored port.

Configuration Roadmap

The configuration roadmap is as follows:

Configure GE 0/1/8 and GE 0/1/16 on the Device as observing ports.
Configure GE 0/1/0 of the Device as a mirrored port and enable the port mirroring function for VLAN 10.
Map the mirrored port to the observing ports and enable the mirroring analysis on GE 0/1/0.

Data Preparation

To complete the configuration, you need the following data:

Types and numbers of the observing ports and mirrored port

Procedure

Configure an IP address for each interface and ensure that the routes are reachable on the router. For configuration details, see Configuration Files in this section.

Configure GE 0/1/8 and GE 0/1/16 as observing ports.

<Device> system-view
[~Device] interface gigabitethernet0/1/8
[~Device-GigabitEthernet0/1/8] port-observing observe-index 1
[*Device-GigabitEthernet0/1/8] commit
[~Device-GigabitEthernet0/1/8] quit
[~Device] interface gigabitethernet0/1/16
[~Device-GigabitEthernet0/1/16] port-observing observe-index 2
[~Device-GigabitEthernet0/1/16] commit
[~Device-GigabitEthernet0/1/16] quit

Enable the mirroring function for packets of VLAN 10 on the upstream interface named GE 0/1/0.

[~Device] vlan 10
[*Device-vlan10] commit
[~Device-vlan10] quit
[~Device] interface gigabitethernet0/1/0
[~Device-GigabitEthernet0/1/0] portswitch
[*Device-GigabitEthernet0/1/0] port default vlan 10
[*Device-GigabitEthernet0/1/0] port-mirroring inbound vlan 10
[*Device-GigabitEthernet0/1/0] commit
[~Device-GigabitEthernet0/1/0] quit

Map the mirrored port GE 0/1/0 to the observing ports GE 0/1/8 and GE 0/1/16.

[~Device] interface gigabitethernet0/1/0
[~Device-GigabitEthernet0/1/0] port-mirroring to observe-index 1 2
[*Device-GigabitEthernet0/1/0] commit
[~Device-GigabitEthernet0/1/0] quit

After the configuration is complete, the packets of VLAN 10 received by GE 0/1/0 are mirrored to GE 0/1/8 and GE 0/1/16.

Verify the configuration.

The switch sends 10 packets with the VLAN ID being 10 to the mirrored port GE 0/1/0 of the Device. The observing ports GE 0/1/8 and GE 0/1/16 can forward all the packets with the VLAN ID being 10 received by the mirrored port GE 0/1/0. Run the display interface command to check packet statistics on GE 0/1/8.

<Device> display interface gigabitethernet0/1/8
GigabitEthernet0/1/8 current state : UP
Line protocol current state : UP
Description:HUAWEI, GigabitEthernet0/1/8 Interface
Route Port,The Maximum Transmit Unit is 1500
Internet protocol processing : disabled
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc7d-a497
The Vendor PN is HFBR-5710L
Port BW: 1G, Transceiver max BW: 1G, Transceiver Mode: MultiMode
WaveLength: 850nm, Transmission Distance: 550m
 Loopback:none, full-duplex mode, negotiation: disable, Pause Flowcontrol:Send and Receive Enable
Statistics last cleared:never
    Last 300 seconds input rate: 0 bits/sec, 0 packets/sec
    Last 300 seconds output rate: 0 bits/sec, 0 packets/sec
    Input: 560 bytes, 10 packets
    Output: 560 bytes, 10 packets
    Input:
      Unicast: 0, Multicast: 0
      Broadcast: 0, JumboOctets: 0
      CRC: 0, Symbol: 0
      Overrun: 0 , InRangeLength: 0
      LongPacket: 0 , Jabber: 0, Alignment: 0
      Fragment: 0, Undersized Frame: 0
      RxPause: 0
    Output:
      Unicast: 10, Multicast: 0
      Broadcast: 0, Jumbo: 0
      Lost: 0, Overflow: 0, Underrun: 0
      TxPause: 0

Configuration Files

Device configuration file

#
 sysname Device
 vlan 10
#
 interface GigabitEthernet0/1/0
 portswitch
 port default vlan 10
 port-mirroring inbound vlan 10
 port-mirroring to observe-index 1 2
#
interface GigabitEthernet0/1/8
 ip address 10.10.1.1 255.255.255.0
 port-observing observe-index 1
#
interface GigabitEthernet0/1/16
 ip address 10.1.1.2 255.255.255.0
 port-observing observe-index 2
#
return