© Copyright Lenovo 2017
607
Chapter 42. Port Mirroring
The
Enterprise
NOS
port
mirroring
feature
allows
you
to
mirror
(copy)
the
packets
of
a
target
port,
and
forward
them
to
a
monitoring
port.
Port
mirroring
functions
for
all
layer
2
and
layer
3
traffic
on
a
port.
This
feature
can
be
used
as
a
troubleshooting
tool
or
to
enhance
the
security
of
your
network.
For
example,
an
IDS
server
or
other
traffic
sniffer
device
or
analyzer
can
be
connected
to
the
monitoring
port
in
order
to
detect
intruders
attacking
the
network.
The
CN4093
supports
a
“many
to
one”
mirroring
model.
As
shown
in
,
selected
traffic
for
ports
EXT1
and
EXT2
is
being
monitored
by
port
EXT3.
In
the
example,
both
ingress
traffic
and
egress
traffic
on
port
EXT2
are
copied
and
forwarded
to
the
monitor.
However,
port
EXT1
mirroring
is
configured
so
that
only
ingress
traffic
is
copied
and
forwarded
to
the
monitor.
A
device
attached
to
port
EXT3
can
analyze
the
resulting
mirrored
traffic.
Figure 65.
Mirroring
Ports
In
standalone
(non
‐
stacking)
mode,
the
CN4093
supports
two
monitor
ports
with
two
‐
way
mirroring,
or
four
monitor
ports
with
one
‐
way
mirroring.
In
stacking
mode,
one
monitor
port
with
two
‐
way
mirroring,
or
two
monitor
ports
with
one
‐
way
mirroring
is
supported.
Each
monitor
port
can
receive
mirrored
traffic
from
any
number
of
target
ports.
Enterprise
NOS
does
not
support
“one
to
many”
or
“many
to
many”
mirroring
models
where
traffic
from
a
specific
port
traffic
is
copied
to
multiple
monitor
ports.
For
example,
port
EXT1
traffic
cannot
be
monitored
by
both
port
EXT3
and
EXT4
at
the
same
time,
nor
can
port
EXT2
ingress
traffic
be
monitored
by
a
different
port
than
its
egress
traffic.
Ingress
and
egress
traffic
is
duplicated
and
sent
to
the
monitor
port
after
processing.
Note:
The
CN4093
10
Gb
Converged
Scalable
Switch
(CN4093)
cannot
mirror
LACPDU
packets.
Also,
traffic
on
management
VLANs
is
not
mirrored
to
the
external
ports.
Monitor Port
Specified traffic is copied
and forwarded to Monitor Port
Mirrored Ports
Ingress
Traffic
Both
Connected to
sniffer device
38
39
40
41
Summary of Contents for Flex System Fabric CN4093
Page 27: ... Copyright Lenovo 2017 27 Part 1 Getting Started ...
Page 28: ...28 CN4093 Application Guide for N OS 8 4 ...
Page 58: ...58 CN4093 Application Guide for N OS 8 4 ...
Page 72: ...72 CN4093 Application Guide for N OS 8 4 ...
Page 85: ... Copyright Lenovo 2017 85 Part 2 Securing the Switch ...
Page 86: ...86 CN4093 Application Guide for N OS 8 4 ...
Page 98: ...98 CN4093 Application Guide for N OS 8 4 ...
Page 112: ...112 CN4093 Application Guide for N OS 8 4 ...
Page 136: ...136 CN4093 Application Guide for N OS 8 4 ...
Page 156: ...156 CN4093 Application Guide for N OS 8 4 ...
Page 192: ...192 CN4093 Application Guide for N OS 8 4 ...
Page 228: ...228 CN4093 Application Guide for N OS 8 4 ...
Page 229: ... Copyright Lenovo 2017 229 Part 4 Advanced Switching Features ...
Page 230: ...230 CN4093 Application Guide for N OS 8 4 ...
Page 298: ...298 CN4093 Application Guide for N OS 8 4 ...
Page 382: ...382 CN4093 Application Guide for N OS 8 4 ...
Page 392: ...392 CN4093 Application Guide for N OS 8 4 ...
Page 416: ...416 CN4093 Application Guide for N OS 8 4 ...
Page 452: ...452 CN4093 Application Guide for N OS 8 4 ...
Page 466: ...466 CN4093 Application Guide for N OS 8 4 ...
Page 496: ...496 CN4093 Application Guide for N OS 8 4 ...
Page 508: ...508 CN4093 Application Guide for N OS 8 4 ...
Page 510: ...510 CN4093 Application Guide for N OS 8 4 ...
Page 514: ...514 CN4093 Application Guide for N OS 8 4 ...
Page 538: ...538 CN4093 Application Guide for N OS 8 4 ...
Page 539: ... Copyright Lenovo 2017 539 Part 7 Network Management ...
Page 540: ...540 CN4093 Application Guide for N OS 8 4 ...
Page 554: ...554 CN4093 Application Guide for N OS 8 4 ...
Page 576: ...576 CN4093 Application Guide for N OS 8 4 ...
Page 596: ...596 CN4093 Application Guide for N OS 8 4 ...
Page 604: ...604 CN4093 Application Guide for N OS 8 4 ...
Page 609: ... Copyright Lenovo 2017 609 Part 9 Appendices ...
Page 610: ...610 CN4093 Application Guide for N OS 8 4 ...
Page 626: ...626 CN4093 Application Guide for N OS 8 4 ...
Page 633: ......
Page 634: ...Part Number 00MY375 Printed in USA IP P N 00MY375 ...