Configure Traffic Mirroring - Cisco 6000 Series Configuration Manual

Configuring Traffic Mirroring
A destination port has these characteristics:
• A destination port must reside on the same router as the source port for local traffic mirroring. For remote
• A destination port for local mirroring can be any Ethernet physical port, EFP, and GRE tunnel interface,
• A destination port can be a trunk (main) interface or a subinterface.
• At any one time, a destination port can participate in only one traffic mirroring session. A destination
• A destination port cannot also be a source port.
Note 1. Source traffic mirroring ports (can be ingress or egress traffic ports).
2. Destination traffic mirroring port.

Configure Traffic Mirroring

/* Configure remote
Router# configure
Router(config)# monitor-session session-name mpls-ipv4
Router(config)# destination interface tunnel-ip
Router(config)# exit
Router(config)# interface HundredGigE 0/1/0/1
Router(config-if)# monitor-session mon1 mpls-ipv4 direction rx-only
Router(config-if)# end
/* Attach the configurable source interface. */
Router# configure
Router(config)# interface HundredGigE 0/1/0/1
Router(config-if)# monitor-session mon1 mpls-ipv4 direction rx-only
Router(config-if-mon)# acl acl1
Router(config-if-mon)# end
/* Configure UDF-based ACL for traffic mirroring.*/
Router# configure
Router(config)# udf udf3 header outer 14 0 length
Router(config-if)# ipv4 access-list acl1
Router(config-ipv4-acl)#10 permit ipv4 any any udf udf1 0x1234 0xffff udf3 0x56 0xff
Router(config-ipv4-acl)# exit
Router(config)# interface HundredGigE 0/2/0/2
Router(config-if)# monitor-session mon1 mpls-ipv4 direction rx-only
Router(config-if-mon)# acl acl1
Router(config-if-mon)# commit
Interface and Hardware Component Configuration Guide for Cisco NCS 6000 Series Routers, IOS XR Release 6.4.x
mirroring the destination is always a GRE tunnel.
but not a bundle interface. It can be a Layer 2 or Layer 3 transport interface.
port in one traffic mirroring session cannot be a destination port for a second traffic mirroring session.
In other words, no two monitor sessions can have the same destination port.
traffic mirroring. */
Configure Traffic Mirroring
99