518 BigIron RX Series Configuration Guide53-1001986-01ACL-based inbound mirroring21ACL-based inbound mirroringWith IronWare Release 02.4.00, the Multi-Service IronWare software supports using an ACL toselect traffic for mirroring from one port to another. Using this feature, you can monitor traffic in themirrored port using a protocol analyzer.Considerations when configuring ACL-based inboundmirroringThe following must be considered when configuring ACL-based Inbound Mirroring:• Configuring a Common Destination ACL Mirror Port for All Ports of a PPCR• Support with ACL CAM Sharing Enabled.• The mirror and copy-sflow keywords are mutually exclusive on a per-ACL clause basis.• ACL-based inbound mirroring and port-based inbound mirroring are mutually exclusive on aper-port basis.• Mirror (analyzer) ports cannot be assigned to the 16x10G module. You can monitor traffic on16x10 ports.Configuring a common destination ACL mirror port for all ports of a PPCRAll ports using the same PPCR must have a Common Destination ACL mirror Port when configuringACL-based Inbound Mirroring. For Example, where ports 4/1 and 4/2 belong to the same PPCR, thefollowing configuration that configures them with different destination ACL mirror ports will fail andgenerate an error message as shown.BigIron RX(config)# interface ethernet 4/1BigIron RX(config-if-e10000-4/1)# acl-mirror-port ethernet 6/1BigIron RX(config-if-e10000-4/1)# interface ethernet 4/2BigIron RX(config-if-e10000-4/2)# acl-mirror-port ethernet 6/2Error: 4/2 and 4/1 should have the same ACL mirror portConfiguring ACL-based inbound mirroringThe following sections describe how to configure ACL-based Inbound Mirroring on a BigIron RXrouter:• Creating an ACL with a Mirroring Clause• Applying the ACL to an Interface• Specifying a Destination Mirror Port• Specifying the Destination Mirror Port for IP Receive ACLsCreating an ACL with a mirroring clauseThe mirror keyword has been added for inclusion in IPv4, L2 and IPv6 ACL clauses to direct trafficthat meets the clause to be sent to another port. In the following examples, the ACL is used todirect IP traffic to a mirror port.Example of ACL-based Mirroring Supported for IPv4 ACLs.
