Policy Mirror Destinations (S-, K-Series)

This section describes how to display, create, enable, disable, and delete mirror destinations that are associated with a specific policy rule or profile.

The mirror destination mirrors only the traffic specified in an associated policy. If a source port is associated with both a physical port mirror and a policy mirror destination, the policy mirror destination takes precedence over the physical port mirror: the source port traffic specified in the associated policy is mirrored only at the policy mirror destination port, not at the physical port mirror.

For example, consider a physical port mirror, such that the traffic received at source port ge.1.1 is mirrored on the destination port ge.1.2. Port ge.1.1 is also associated with a policy for Web traffic (TCP port 80). That policy has a policy mirror destination with ge.1.3 as the destination port. Because the policy mirror destination takes precedence over the physical port mirror, the Web traffic for port ge.1.1 is mirrored to port ge.1.3 only. Port ge.1.2 mirrors all other traffic with the exception of the Web traffic.