duplicate packets with mirror-cpu

[EtherNation_Use]

Create Date: Aug 8 2012 12:33AM

When I apply the following ACL policy file, I get duplicate packets with the "ping" command on a host connected to this Extreme switch.
entry R1 {
if {
protocol icmp;
ICMP-type echo-request;
} then {
permit;
}
}
entry R2 {
if {
destination-address 130.183.80.0/21;
} then {
permit;
mirror-cpu;
log;
}
}

(from Hans-Werner_Paulsen )

[EtherNation_Use]

Create Date: Sep 22 2012 8:24AM

If I recall correctly, this is because ICMP is process by the CPU already ...

Is there a specific reason why you would want to copy it again to the CPU ? Just for logging ?
Have you tried the ACL without the mirror-cpu line ?

Erik
(from Erik_Bais)