EXEC modeEXEC Privilege modeshow run monitor sessionDell#show run monitor session!monitor multicast-queue 7Dell#Enabling Flow-Based MonitoringFlow-based monitoring conserves bandwidth by monitoring only specified traffic instead of all traffic on the interface. This feature isparticularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress traffic. You can specify traffic usingstandard or extended access-lists.NOTE: Flow-based monitoring is not supported for egress traffic.1 Enable flow-based monitoring for a monitoring session.MONITOR SESSION modeflow-based enable2 Define IP access-list rules that include the keyword monitor. For port monitoring, Dell Networking OS only considers traffic matchingrules with the keyword monitor.CONFIGURATION modeip access-listRefer to .3 Apply the ACL to the monitored port.INTERFACE modeip access-group access-listExample of the flow-based enable CommandTo view an access-list that you applied to an interface, use the show ip accounting access-list command from EXEC Privilegemode.Remote Port MirroringWhile local port monitoring allows you to monitor traffic from one or more source ports by directing it to a destination port on the sameswitch/router, remote port mirroring allows you to monitor Layer 2 and Layer 3 ingress and/or egress traffic on multiple source ports ondifferent switches and forward the mirrored traffic to multiple destination ports on different switches.Remote port mirroring helps network administrators monitor and analyze traffic to troubleshoot network problems in a time-saving andefficient way.In a remote-port mirroring session, monitored traffic is tagged with a VLAN ID and switched on a user-defined, non-routable L2 VLAN. TheVLAN is reserved in the network to carry only mirrored traffic, which is forwarded on all egress ports of the VLAN. Each intermediateswitch that participates in the transport of mirrored traffic must be configured with the reserved L2 VLAN. Remote port monitoringsupports mirroring sessions in which multiple source and destination ports are distributed across multiple switchesPort Monitoring 663
