duplicate packets with mirror-cpu

  • 0
  • 1
  • Question
  • Updated 5 years ago
Create Date: Aug 8 2012 12:33AM

When I apply the following ACL policy file, I get duplicate packets with the "ping" command on a host connected to this Extreme switch.
entry R1 {
  if {
    protocol icmp;
    ICMP-type echo-request;
  } then {
    permit;
  }
}
entry R2 {
  if {
    destination-address 130.183.80.0/21;
  } then {
    permit;
    mirror-cpu;
    log;
  }
}

(from Hans-Werner_Paulsen )
Photo of EtherNation User

EtherNation User, Employee

  • 20,340 Points 20k badge 2x thumb

Posted 5 years ago

  • 0
  • 1
Photo of EtherNation User

EtherNation User, Employee

  • 20,340 Points 20k badge 2x thumb
Create Date: Sep 22 2012 8:24AM

If I recall correctly, this is because ICMP is process by the CPU already ...

Is there a specific reason why you would want to copy it again to the CPU ? Just for logging ?
Have you tried the ACL without the mirror-cpu line ?

Erik
(from Erik_Bais)

This conversation is no longer open for comments or replies.