16.2 ACL

Cris_Collins — Mon, 19 Aug 2024 16:57:25 GMT

I am mirroring a port that has the following ACL applied to a port's egress and see traffic not destined to 00:a0:aa:d0:01:08 in the captures. Does the mirror look at traffic before it hits the ACL or after?

entry host8{
if {
ethernet-destination-address 00:a0:aa:d0:01:08;
}
then {permit;}
}
entry DenyAll{
if{
source-address 0.0.0.0/0;
} then {deny;
count block_acl;
}

Thank you for any insight you are able to provide.

Re: 16.2 ACL

Stefan_K_ — Mon, 19 Aug 2024 17:37:36 GMT

Hi @Cris_Collins

Instead of exluding all other traffic afterwards, I would simply include only the desired traffic:

How To: How To Mirror Specific Type of Traffic | Extreme Portal (site.com)

Best regards
Stefan

topic 16.2 ACL in ExtremeSwitching (EXOS/Switch Engine)

16.2 ACL

Re: 16.2 ACL