Setting Port or VLAN Mirroring

Use this command to create a new mirroring relationship, or to enable or disable an existing mirroring relationship. Optionally, you can specify whether to mirror received frames, transmitted frames, or both:

set port mirroring {create | disable | enable} source destination [both | rx | tx]

If not specified, both received and transmitted frames will be mirrored.

The K-Series hardware does not support tx port mirror sources to IDS.

The S- and K-Series hardware does not support both port mirroring and outbound rate limiting of a frame. Outbound rate limiting is enabled and port mirroring is disabled by default for outbound rate limited frames. Use this command to set port mirroring behavior for outbound rate limited frames:

set port mirroring orl {enable | disable}

Note

Note

By default, when you create a port mirror, the port mirror is enabled.

This example shows how to create a port mirror to mirror frames sourced on port ge.1.4 and received on port ge.1.11:

System(rw)->set port mirroring create ge.1.4 ge.1.11 rx

This example shows how to create a many-to-one mirroring configuration between source ports ge.1.2, ge.1.3 and ge.1.4, and target port ge.1.10. On the S-Series, frames in both directions will be monitored by default:

System(rw)->set port mirroring create ge.1.2-4 ge.1.10

This example enables port mirroring and enables outbound rate limiting of outbound rate limited frames (S-, K-Series):

System(rw)->set port mirroring orl enable

This example shows how to configure mirroring from source port 5 to destination port 1 in slot 1 (ge.1.1):

System(rw)->set vlan interface 5 create
System(rw)->set port mirroring create vtap.0.5 ge.1.1
System(rw)->show port mirror
Port Mirroring
==============
 Source Port        = vtap.0.5
 Target Port        = ge.1.1
 Frames Mirrored    = Rx and Tx
 Admin Status       = enabled
 Operational Status = Unavailable resources
Mirror Outbound Rate Limited Frames : Disabled
Note

Note

If you configure a port mirror on an uplink (tagged) port, make sure the port is assigned to egress frames with that VLAN tag. Refer to VLAN Configuration for more information about configuring VLANs.