To configure an IP mirror access group on
an interface, use the following commands:
Allocate CAM profile for IPv4 ACL.
CONFIGURATION mode
cam-acl {default | l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number ipmacacl number [vman-qos | vman-qos—dual— number | vman-qos—dual—fp number] ipv4pbr number} ecfmacl number [nlbclusteraclnumber]fcoeacl number iscsioptacl numberipv4udfmirracl number | ipv4mirracl number}
Create a monitor session.
CONFIGURATION mode
monitor session session-ID [type { rpm |
erpm [set ip dscp dscp_value | set ip ttl ttl_value]}] [drop]
Dell(conf)#monitor session 65535 type erpm
Create an IP access-list.
CONFIGURATION mode
ip access-list {standard | extended} access-list-name
Dell(config-ext-nacl)#permit ip any any
count monitor 65535
Associate the IP access list to an interface.
INTERFACE mode
ip mirror-access-group access-list-name {in | out} [implicit-permit] [vlan vlan-id] [optimized]
Dell(conf-if-te-0/4)#ip mirror-access-group
acl3 in
To view which
IP mirror-access-group is applied to an interface, use the show config command in INTERFACE mode, or use the show running-config command in EXEC mode.
Sample Configuration
Dell#configure terminal
Dell(conf)#cam-acl l2acl 2 ipv4acl 4 ipv6acl 2 ipv4qos 0 l2qos 1 l2pt 0 ipmacacl 0 vman-qos 0 ipv4udfmirracl 4
Dell(conf)#end
Dell(conf)#monitor session 65535 type erpm
Dell(conf)#ip access-list extended test
Dell(config-ext-nacl)#permit ip any any count monitor 65535
Dell(config-ext-nacl)#end
Dell(conf)#interface TenGigabitEthernet 1/5
Dell(conf-if-te-1/5)#ip mirror-access-group test acl3
Dell(conf-if-te-1/5)#end
Example of viewing
IP mirror–access–group applied to an Interface
Dell(conf-if-te-1/5)#show config
!
interface TenGigabitEthernet 1/5
no ip address
ip mirror-access-group acl3 in
shutdown
Dell(conf-if-te-1/5)#
Data is not available for the Topic
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\
