N/S-Series Configuration of a VLAN Mirror

[FAQ_User]

Article ID: 5398

Products
Matrix N-Series DFE
S-Series

Protocols/Features
VLAN mirroring
VLAN redirect

Goals
Configure a VLAN mirror
Sample configuration

Solution

For N-Series (6.x) firmware versions prior to 7.11.01.0025

The following example sequence of commands mirrors all VLAN 1 traffic (both inbound and outbound) to port ge.1.1:

1. Create a VLAN MIB-2 interface to use for the SMON mib: set vlan interface 1 create
2. Optionally view the resulting "port" ('vlan.0.<vlan_ID>'): show port vlan.*.*
3. Create the port mirror: set port mirroring create vlan.0.1 ge.1.1 both

For N-Series and S-Series firmware versions 7.x and higher

The following example sequence of commands mirrors all VLAN 1 traffic (both inbound and outbound) to port ge.1.1:

1. Create a VLAN MIB-2 interface to use for the SMON mib: set vlan interface 1 create
2. Optionally view the resulting "port" ('vtap.0.<vlan_ID>'): show port vtap.*.*
3. Create the port mirror: set port mirroring create vtap.0.1 ge.1.1 both

Note: With 7.x firmware, the configuration of a routed/L3 interface automatically spawns the presence of a port "vlan.x.y" entry. If this is in error referenced in a 'set port mirroring...' command, a generic error message (e.g. "Set port mirror vlan.0.1 to ge.1.1 failed.") will result.

In summary

VLAN mirroring in all firmware versions requires the use of the 'set vlan interface...' command, but what is generated by that command and manipulated for mirroring purposes is "vlan.x.y" with earlier firmware and "vtap.x.y" (12432) with later firmware.