Acl Port Mirroring; Viewing Acl Statistics - Lenovo RackSwitch G8264 Application Manual

ACL Port Mirroring

Viewing ACL Statistics

130
G8264 Application Guide for ENOS 8.4
For IPv4 ACLs and VMaps, packets that match the filter can be mirrored to another
switch port for network diagnosis and monitoring.
The source port for the mirrored packets cannot be a portchannel, but may be a
member of a portchannel.
The destination port to which packets are mirrored must be a physical port.
The action (permit, drop, etc.) of the ACL or VMap must be configured before
assigning it to a port.
Use the following commands to add mirroring to an ACL:
 For IPv4 ACLs:
RS G8264(config)# access­control list <ACL number> mirror port <destination
port>
The ACL must be also assigned to it target ports as usual (see "Assigning
Individual ACLs to a Port" on page
 For VMaps (see "VLAN Maps" on page
RS G8264(config)# access­control vmap <VMap number> mirror port <monitor
destination port>
See the configuration example on page
ACL statistics display how many packets have "hit" (matched) each ACL. Use
ACL statistics to check filter performance or to debug the ACL filter configuration.
You must enable statistics for each ACL that you wish to monitor:
RS G8264(config)# access­control list <ACL number> statistics
128).
136):
137.