Characteristics Of The Source Port; Characteristics Of The Monitor Session; Characteristics Of The Destination Port - Cisco 6000 Series Configuration Manual

Characteristics of the Source Port

Characteristics of the Source Port
A source port, also called a monitored port, is a routed port that you monitor for network traffic analysis. In
a single traffic mirroring session, you can monitor source port traffic. Your router can support any number of
source ports (up to a maximum number of 800).
A source port has these characteristics:
• It can be any port type, such as Bundle Interface, 100-Gigabit Ethernet, or 10-Gigabit Ethernet.
• Each source port can be monitored in only one traffic mirroring session.
• It cannot be a destination port.
• Interfaces over which mirrored traffic may be routed must not be configured as a source port.
• Each source port can be configured with a direction (ingress, egress, or both) to monitor for local traffic
In the figure above, the network analyzer is attached to a port that is configured to receive a copy of every
packet that host A sends. This port is called a traffic mirroring port.

Characteristics of the Monitor Session

A monitor session is a collection of traffic mirroring configurations consisting of a single destination and,
potentially, many source interfaces. For any given monitor session, the traffic from the source interfaces
(called source ports) is sent to the monitoring port or destination port. If there is more than one source port
in a monitoring session, the traffic from the several mirrored traffic streams is combined at the destination
port. The result is that the traffic that comes out of the destination port is a combination of the traffic from
one or more source ports.
Monitor sessions have these characteristics:
• A single Cisco NCS 5500 Series Router can have a maximum of eight monitor sessions.
• A single monitor session can have only one destination port.
• A single destination port can belong to only one monitor session.
• A monitor session can have a maximum of 800 source ports, as long as the maximum number of source

Characteristics of the Destination Port

Each session must have a destination port that receives a copy of the traffic from the source ports.
Interface and Hardware Component Configuration Guide for Cisco NCS 6000 Series Routers, IOS XR Release 6.4.x
98
Note Bridge group virtual interfaces (BVIs) are not supported.
mirroring. Remote traffic mirroring is supported in the ingress direction only. For bundles, the monitored
direction applies to all physical ports in the group.
ports from all monitoring sessions does not exceed 800.
Configuring Traffic Mirroring