Dell PowerSwitch S4112F-ON OS10 Enterprise Edition User Guide Release 10.4.1.0 - Page 258
Encapsulated remote port monitoring, remote port monitoring
View all Dell PowerSwitch S4112F-ON manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 258 highlights
Restrictions • When you use a source VLAN, enable flow-based monitoring (flow-based enable). • In a source VLAN, only received (rx) traffic is monitored. • In S5148F-ON, only received (rx) traffic is monitored. • You cannot configure a source port-channel or source VLAN in a source session if the port-channel or VLAN has a member port configured as a destination port in a remote port monitoring session. • You cannot use a destination port for remote port monitoring as a source port, including the session the port functions as the destination port. • The reserved VLAN used to transport mirrored traffic must be a L2 VLAN - L3 VLANs are not supported. Configure remote port monitoring Remote port monitoring requires a source interface (monitored ports on different source network devices) and a reserved tagged VLAN for transporting mirrored traffic (configured on the source, intermediate, and destination devices). 1 Create a remote monitoring session in CONFIGURATION mode. monitor session session-id type rpm-source 2 Enter the source to monitor traffic in MONITOR-SESSION mode. source interface interface-range direction 3 Enter the destination to send the traffic to in MONITOR-SESSION mode. destination remote-vlan vlan-id 4 Enable the monitoring interface in MONITOR-SESSION mode. no shut Create remote monitoring session OS10(config)# monitor session 10 type rpm-source OS10(conf-mon-rpm-source-10)# Configure source and destination port, and traffic direction OS10(conf-mon-rpm-source-10)# source interface vlan 10 rx OS10(conf-mon-rpm-source-10)# destination remote-vlan 100 OS10(conf-mon-rpm-source-10)# no shut View monitoring session OS10(conf-mon-rpm-source-10)# do show monitor session all S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason 1 vlan10 vlan 100 rx N/A N/A N/A N/A true Is UP Encapsulated remote port monitoring The monitored traffic can also be transmitted over an L3 network to a remote analyzer. The encapsulated remote port monitoring (ERPM) session mirrors traffic from the source ports/lags or source VLANs and forwards the traffic using routable GRE-encapsulated packets to the destination IP address specified in the session. Consider the following points while configuring an ERPM session: • OS10 supports only the ERPM source session. The encapsulated packets terminate at the destination IP address, the remote analyzer. • The source IP address must be a valid local IP address for the session to be up. • The destination IP address must be on a remote L3 node that supports standard GRE decapsulation. • If the destination IP address is not reachable, the session goes down. 258 Layer 2