A SERVICE OF

logo

1-11
z Department 1 is connected to GigabitEthernet 1/0/1 of Switch A.
z Department 2 is connected to GigabitEthernet 1/0/2 of Switch A.
z GigabitEthernet 1/0/3 of Switch A connects to GigabitEthernet 1/0/1 of Switch B.
z GigabitEthernet 1/0/2 of Switch B connects to GigabitEthernet 1/0/1 of Switch C.
z The data detection device is connected to GigabitEthernet 1/0/2 of Switch C.
The administrator wants to monitor the packets sent from Department 1 and 2 through the data
detection device.
Use the remote port mirroring function to meet the requirement. Perform the following configurations:
z Use Switch A as the source switch, Switch B as the intermediate switch, and Switch C as the
destination switch.
z On Switch A, create a remote source mirroring group, configure VLAN 10 as the remote-probe
VLAN, ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 as the source ports, and port
GigabitEthernet 1/0/4 as the reflector port.
z On Switch B, configure VLAN 10 as the remote-probe VLAN.
z Configure GigabitEthernet 1/0/3 of Switch A, GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 of
Switch B, and GigabitEthernet 1/0/1 of Switch C as trunk ports, allowing packets of VLAN 10 to
pass.
z On Switch C, create a remote destination mirroring group, configure VLAN 10 as the remote-probe
VLAN, and configure GigabitEthernet 1/0/2 connected with the data detection device as the
destination port.
Figure 1-4 Network diagram for remote port mirroring
Switch A
GEth1/0/3
Data detection
device
Dept.1
Dept.2
GEth1/0/1
Switch B Switch C
GEth1/0/1 GEth1/0/2
GEth1/0/1
GEth1/0/2
GEth1/0/4
GEth1/0/2
Configuration procedure
1) Configure the source switch (Switch A)
# Create remote source mirroring group 1.
<device> system-view
[device] mirroring-group 1 remote-source
# Configure VLAN 10 as the remote-probe VLAN.
[device] vlan 10
[device-vlan10] remote-probe vlan enable
[device-vlan10] quit
# Configure the source ports, reflector port, and remote-probe VLAN for the remote source mirroring
group.