HPE Aruba Networking & ProVision-based
1827847 Members
1787 Online
109969 Solutions
New Discussion

Re: Policy based mirroring configuration

 
hir0999
New Member

Policy based mirroring configuration

I have a HP ProCurve Switch 2610-48-PWR, and configured as follows:

hostname "2610"
mirror-port 50
untagged 1-52
   ip address 172.16.12.18 255.255.255.0
   exit
interface
1-48
   monitor
   exit

I need to record all traffic (VoIP only traffic port 1 - 48 to port 50, which is attached to a recording system).     The Recording system company "REVCORD" states that I need to do "policy action mirror" command to configure mirror-to-port (MTP) action for the policy.

The policy action mirror command is used to configure mirror-to-port (MTP) action for the policy. For

example, the following policy mirrors ingress packets to port 1/10:

-> policy condition c1 source ip

-> policy action a1 mirror ingress 1/10

-> policy rule r1 condition c1 action a1

-> qos apply

When the above rule is activated, any flows coming into the switch from source IP address 192.168.20.1

are mirrored to port 1/10. It is also possible to combine the MTP action with other actions. For example:

-> policy condition c1 source ip

-> policy action a1 mirror ingress 1/10 disposition drop

-> policy rule r1 condition c1 action a1

-> qos apply

This policy rule example combines the MTP action with the drop action. As a result, this rule drops

ingress traffic with a source IP, but the mirrored traffic from this source is not dropped

and is forwarded to port 1/10.

 

I could not find the commands, if you have any suggestions, I really appriciate your help.   Thank you very much.

2 REPLIES 2
Arimo
Respected Contributor

Re: Policy based mirroring configuration

Sorry... the reason you can't find the commands is because you can't do policy based mirroring with ProVision devices (the ProCurve line). I don't know whether Comware line supports it.


HTH,

Arimo
HPE Networking Engineer
Peter_Debruyne
Honored Contributor

Re: Policy based mirroring configuration

1/ This is supported on the provision switches, but only on the 5400/3500/3800/8200 line AFAIK, through the classifier system.

 

See chapter 10 of the Advanced Traffic Management guide (if you have one of these switches of course):

http://h20000.www2.hp.com/bizsupport/TechSupport/CoreRedirect.jsp?redirectReason=DocIndexPDF&prodSeriesId=1827663&targetPage=http%3A%2F%2Fbizsupport1.austin.hp.com%2Fbc%2Fdocs%2Fsupport%2FSupportManual%2Fc03724590%2Fc03724590.pdf

 

2/ All comware switches (AFAIK) support qos-policy based traffic mirroring, which allows traffic matching criteria x (acl, vlan,port) to be mirrored to destination z.

 

Best regards,Peter.