Example: Configuring an IDS Mirror (S-, K-Series)

S- and K-Series devices support IDS mirroring on ports that are members of a Link Aggregation Group (LAG). A maximum of eight ports are allowed per LAG port. Only manually formed (static) LAGs can be used as mirrored destination ports.

Configuring a Static LAG for an IDS Mirror shows how to create a static LAG and then create an IDS mirror to that LAG port destination. In this example, ports ge.1.1 through ge.1.5 are administratively set to form lag.0.21, which is then set to mirror traffic from port ge.1.10.

For more information on command parameters used in LAG configuration, refer to the Link Aggregation chapter.

Note

When creating a static LAG for port mirroring, you must assign a unique admin key to aggregating ports. If ports other than the desired underlying physical ports share the same admin key value, aggregation will fail or undesired aggregations will form.

Configuring a Static LAG for an IDS Mirror

Step	Task	Command(s)
1	Create a static LAG aggregating ports ge.1.1 through ge.1.5 into LAG port 21 and assign a unique admin key to that LAG port.	set lacp static lag.0.21 key 4000 ge.1.1-5
2	Create a port mirror between source port ge.1.10 and the static LAG. The both option is supported by the S-Series.	set port mirror create ge.1.10 lag.0.21 both