Netgear XCM8806 Chassis Hardware Installation Guide - Page 198

NETGEAR 8800 Chassis Switch CLI Manual • Ingress and egress-Mirrors traffic either received at the port or sent from the port. (If you omit the optional parameters, all traffic is forwarded; the default for port-based mirroring is ingress and egress). • VLAN-All data to a particular VLAN, regardless of the physical port configuration, is copied to the monitor port. • Virtual port-All data specific to a VLAN on a specific port is copied to the monitor port. • EXOS supports up to 16 mirror filters where each filter can be a port, a VLAN, or a port + VLAN. • EXOS supports up to 16 monitor ports for one-to-many mirroring. • Only traffic ingressing a VLAN can be monitored; you cannot specify ingressing or egressing traffic when mirroring VLAN traffic. • When routing between VLANs, ingress mirrored traffic is presented to the monitor port as modified for routing. This is the default behavior and the behavior when you use the command, configure mirroring mode standard. When you use the command, configure mirroring mode enhanced, ingress traffic is mirrored as it is received (on the wire). • When using standard mode mirroring, a packet which matches both an ingress mirroring filter and an egress mirroring filter can only be ingress mirrored. The behavior depends on the location of the ingress port, egress port and monitor port within the switch as well as the type of module on which the packet ingresses. The behavior also varies depending on the configuration of daisy chain or ring mode stacking. When using enhanced mode mirroring, two packets are mirrored when a packet encounters both an ingress and egress mirroring filter. • When traffic is modified by hardware on egress, egress mirrored packets may not be transmitted out of the monitor port as they egressed the port containing the egress mirroring filter. For example, an egress mirrored packet that undergoes VLAN translation is mirrored with the untranslated VLAN ID. In addition, IP multicast packets which are egress mirrored contain the source MAC address and VLAN ID of the unmodified packet. • You cannot include the monitor port for a NETGEAR 8800 series switch in a load-sharing group. • Tagged and untagged traffic is mirrored slightly differently depending on the module that the mirrored port and the monitor port are on: • With a monitor port or ports on an 8800 switch, the mirrored packet is tagged only if the ingress packet is tagged (regardless of what module the ingressing port is on). If the packet arrived at the ingress port as untagged, the packet egress the monitor port(s) as untagged. • With the 8800 series switches, you may see a packet mirrored twice. This occurs only if both the ingress mirrored port and the monitor port or ports are on the same one-half of the module and the egress mirrored port is either on the other one-half of that module or on another module. • On NETGEAR 8800 series switches, when traffic is modified by hardware on egress, egress mirrored packets may not be transmitted out of the monitor port as they egressed the port containing the egress mirroring filter. For example, an egress mirrored packet that undergoes VLAN translation is mirrored with the untranslated VLAN ID. In addition, 198 | Chapter 5. Commands for Configuring Slots and Ports on a Switch