1-3Table 1-1 Ports involved in the mirroring operationSwitch Ports involved FunctionSource portPort monitored. It copies packets to the reflector portthrough local port mirroring. There can be more thanone source port.Reflector port Receives packets from the source port andbroadcasts the packets in the remote-probe VLAN.Source switchTrunk port Sends mirrored packets to the intermediate switch orthe destination switch.Intermediateswitch Trunk portSends mirrored packets to the destination switch.Two trunk ports are necessary for the intermediateswitch to connect the devices at the source switchside and the destination switch side.Trunk port Receives remote mirrored packets.Destination switchDestination port Receives packets forwarded from the trunk port andtransmits the packets to the data detection device.z Do not configure a default VLAN, a management VLAN, or a dynamic VLAN as the remote-probeVLAN.z Configure all ports connecting the devices in the remote-probe VLAN as trunk ports, and ensurethe Layer 2 connectivity from the source switch to the destination switch over the remote-probeVLAN.z Do not configure a Layer 3 interface for the remote-probe VLAN, run other protocol packets, orcarry other service packets on the remote-prove VLAN and do not use the remote-prove VLAN asthe voice VLAN and protocol VLAN; otherwise, remote port mirroring may be affected.MAC-Based MirroringWith MAC-based mirroring configured, a device mirrors packets matching the specified MAC address tothe destination port, including:z Packets with the source MAC address matching the specified MAC address.z Packets with the destination MAC address matching the specified MAC address.Compared with port mirroring, MAC-based mirroring is more precise and it can be used to monitorpackets of specific device in the network.VLAN-Based MirroringWith VLAN-based mirroring configured, a device mirrors packets received on all ports in the specifiedVLAN to the destination port.Compared with port mirroring, VLAN-based mirroring is more extensive and it can be used to monitorpackets of a specific VLAN or VLANs in the network.
