show mirror

show mirror [mirror_name | mirror_name_li] | [all | enabled]

Description

Displays various show output for mirror instances.

Syntax Description

mirror_name Displays the mirror name.
mirror_name_li Displays mirror instance name for Lawful Intercept account only. You must have lawful intercept user privileges to specify this variable.
all Displays all mirror instances.
enabled Displays only enabled mirror instances.

Default

N/A.

Usage Guidelines

Use this command to display mirror statistics and determine if mirroring is enabled or disabled on the switch.

For mirror instances to remote IP addresses, one the following statuses appears:
  • Disabled—User has disabled the mirror instance.
  • Down. No route—No route is available to reach the remote IP address.
  • Down. IP forwarding not enabled on VLAN to route—Route is available to reach the remote IP address, but egress VLAN does not have IP forwarding enabled (see enable ipforwarding).
  • Down. Ping timed out—Route is available, IP address forwarding is enabled on the egress VLAN, but ping check is “on” and a timely ping response from the remote IP address was not received during three consecutive ping requests, sent every five seconds.
  • Up—Remote IP address is reachable and ARP entry is resolved. Ping health check is either “off”, or is “on” and a timely ping response was received.
Note

Note

The mirror instance for a remote IP address is only installed in hardware if the status is “Up”.

Example

The following command displays switch mirroring statistics:

show mirror all   
Mirror MyDebugMirror (Disabled)       
    Description: This mirror sends traffic to PC-based Wireshark       
    Mirror to ports: 4-5 Loopback port: 6
  Number of Mirroring filters:7       
  Mirroring filters configured:             
    Port number 7 in all vlans  (ingress)           
    Port number 8 in vlan Default  (ingress-and-egress)           
    Port number 9 in all vlans   (egress)           
    Port number 10 in all vlans   (ingress-and-egress)           
    Port number 11 in vlan Default    (ingress) 
    Port number 12 in vlan Default    (ingress)           
    Port number 13 in vlan Default    (ingress)       
    Active ACL target action:  Yes        

Mirror DefaultMirror (Enabled)       
  Description: This mirror is used for debugging VRRP       
  Mirror to port: 15 is up       
  Number of Mirroring filters:1       
  Mirroring filters configured:             
    Port number 17 in vlan to_oslo  (ingress)      
  Active ACL target action:  Yes  

The following example displays output for a lawful intercept user session:

* show mirror       
DefaultMirror   (Disabled)       
    Description:    Default Mirror Instance, created automatically       
    Mirror to port: -       

law_mirror   (Enabled)       
    Description:    user for lawful intercept       
    Mirror to port: 3       
    Source filter instances used :  2           
        Port 7, all vlans, ingress only           
        Port 8, all vlans, ingress only       

main_mirror   (Enabled)       
    Description:   
        Mirror instance for Admin       
        Mirror to port: 2       
        Source filter instances used :  1           
        Port 10, all vlans, ingress only       

Mirrors defined:          3   
Mirrors enabled:          2 (0 with egress filters)   
HW filter instances used: 3 (Maximum 128)

The following example shows mirroring to remote IP addresses:

# show mirror

analytics_chicago_1   (Enabled)
    Description:    
    Mirror to remote IP: 1.2.3.4            VR        : VR-Default
    From IP            : Auto source IP     Ping check: On
    Status             : Up
    Source filter instances used :  1
        All ports, vlan v1, ingress only

analytics_seattle_2   (Enabled)
    Description:    
    Mirror to remote IP: 5.6.7.8            VR        : VR-Default
    From IP            : 10.1.1.1           Ping check: Off
    Status             : Down. No route
    Source filter instances used :  1
        Port 2, vlan v2, ingress only

bldg_1_sniffer   (Enabled)
    Description:    
    Mirror to port: 5
    Source filter instances used :  1
        All ports, vlan v3, ingress only

DefaultMirror   (Disabled)
    Description:    Default Mirror Instance, created automatically
    Mirror to port: -

Mirrors defined:          4 
Mirrors enabled:          3 (Maximum 4)
HW filter instances used: 3 (Maximum 128)
HW mirror instances used: 3 ingress, 0 egress (Maximum 4 total, 2 egress)

History

This command was first available in ExtremeXOS 15.3.

The mirror_name_li variable was added in ExtremeXOS 15.3.2.

Mirroring to remote IP addresses information was added in ExtremeXOS 22.4.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.