Netgear XCM8806 Chassis User Manual - Page 139

NETGEAR 8800 User Manual • Physical port-All data that traverses the port, regardless of VLAN configuration, is copied to the monitor port(s). You can specify which traffic the port mirrors: • Ingress-Mirrors traffic received at the port. • Egress-Mirrors traffic sent from the port. • Ingress and egress-Mirrors traffic either received at the port or sent from the port. (If you omit the optional parameters, all traffic is forwarded; the default for port-based mirroring is ingress and egress). • VLAN-All data to a particular VLAN, regardless of the physical port configuration, is copied to the monitor port(s). • Virtual port-All data specific to a VLAN on a specific port is copied to the monitor port(s). • The NETGEAR 8800 supports up to 16 mirror filters where each filter can be a port, a VLAN, or a port + VLAN. • The NETGEAR 8800 supports up to 16 monitor ports for one-to-many mirroring. • Only traffic ingressing a VLAN can be monitored; you cannot specify ingressing or egressing traffic when mirroring VLAN traffic. • When routing between VLANs, ingress mirrored traffic is presented to the monitor port(s) as modified for routing. This is the default behavior and the behavior when you use the command configure mirroring mode standard. When you use the command configure mirroring mode enhanced, ingress traffic is mirrored as it is received (on the wire). • When using standard mode mirroring, a packet which matches both an ingress mirroring filter and an egress mirroring filter can only be ingress mirrored. The behavior depends on the location of the ingress port, egress port and monitor port within the switch as well as the type of module on which the packet ingresses. When using enhanced mode mirroring, two packets are mirrored when a packet encounters both an ingress and egress mirroring filter. • You cannot include the monitor port or ports for NETGEAR 8800 series switches in a load-sharing group. • You can run mirroring and sFlow on the same device. • Tagged and untagged traffic is mirrored slightly differently depending on the module that the mirrored port and the monitor port or ports are on. • On NETGEAR 8800 series switches, when traffic is modified by hardware on egress, egress mirrored packets may not be transmitted out of the monitor port as they egressed the port containing the egress mirroring filter. In addition, IP multicast packets which are egress mirrored contain the source MAC address and VLAN ID of the unmodified packet. • Enhanced mirroring mode must be configured if you are going to configure a remote mirroring tag. Enhanced mirroring mode is configured using the following command: configure mirroring mode enhanced • The configuration of remote-tag does not require the creation of a VLAN with the same tag; on these platforms the existence of a VLAN with the same tag as a configured remote-tag is prevented. This combination is allowed so that an intermediate remote mirroring switch can configure remote mirroring using the same remote mirroring tag as Chapter 5. Configuring Slots and Ports on a Switch | 139