Remote Mirroring with EAPS

In the following figure, the traffic from switch A is mirrored to the two ports 8:2 and 1:48 to connect to the destination switch. Using the configuration shown in the following figure, remote mirrored packets have a loop-free redundant path through the network using EAPS (Extreme Automatic Protection Switching).

Click to expand in new window
Remote Mirroring with EAPS
../Graphics/eaps_remote_mirroring.png

The configuration for the topology in the above figure is given in the following sections.

Switch A Configuration

enable mirror to port-list 8:2,1:48 loopback-port 8:1 remote-tag 1000 
configure mirror add port 8:35 create vlan eaps_control 
configure vlan eaps_control tag 1001 
configure vlan eaps_control add ports 8:2,1:48 tag 
create eaps eaps1 
configure eaps1 mode master 
configure eaps1 primary port 8:2 
configure eaps1 secondary port 1:48 
configure eaps1 add control eaps_control 
configure eaps1 add protected internalMirrorLoopback 
enable eaps1 
enable eaps

Switch B Configuration

create vlan remote_vlan
configure vlan remote_vlan tag 1000 remote-mirroring
configure vlan remote_vlan add ports 19,9 tag
create vlan eaps_control
configure vlan eaps_control tag 1001
configure vlan eaps_control add ports 19,9 tag
create eaps eaps1
configure eaps1 mode transit
configure eaps1 primary port 19
configure eaps1 secondary port 9
configure eaps1 add control eaps_control
configure eaps1 add protected remote_vlan
enable eaps1
enable eaps

Switch C configuration

create vlan remote_vlan
configure vlan remote_vlan tag 1000 remote-mirroring
configure vlan remote_vlan add ports 31,45 tag
configure vlan remote_vlan add ports 1
create vlan eaps_control
configure vlan eaps_control tag 1001
configure vlan eaps_control add ports 31,45 tag
create eaps eaps1
configure eaps1 mode transit
configure eaps1 primary port 31
configure eaps1 secondary port 45
configure eaps1 add control eaps_control
configure eaps1 add protected remote_vlan
enable eaps1
enable eaps
Note

Note

The internalMirrorLoopback is an internal VMAN created when enabling mirroring to multiple ports. Depending on the platform, the internal VLAN or VMAN needs to be added as the protected VLAN in the source switch in order to block the ports for mirroring when EAPS is complete.