Policy Mirrors (S-, K-Series)

The mirror destination mirrors only the received traffic specified in an associated policy. If a source port is associated with both a port mirror and a policy mirror destination, the policy mirror destination takes precedence over the port mirror: the source port traffic specified in the associated policy is mirrored only at the policy mirror destination port, not at the port mirror.

For example, a port mirror is created to mirror, on the destination port ge.1.2, the traffic received at source port ge.1.1. Port ge.1.1 is also associated with a policy for Web traffic. That policy has a policy mirror destination with ge.1.3 as the destination port. Because the policy mirror destination takes precedence over the port mirror, the Web traffic for port ge.1.1 is mirrored to port ge.1.3 only. Port ge.1.2 mirrors all other traffic with the exception of the Web traffic.

Note

The S-Series hardware does not support both port mirroring and outbound rate limiting of a frame. Port mirroring of an outbound rate limited frame is disabled by default. Use the set port mirroring orl enable command to enable port mirroring and disable outbound rate limiting of outbound rate limited frames.