Debug Commands

mirror-source

Syntax

[no] mirror-source service-id

Context

debug

Description

This command configures mirror source parameters for a mirrored service.

The mirror-source command is used to enable mirroring of packets specified by the association of the mirror-source to sources of packets defined within the context of the mirror destination service ID. The mirror destination service must already exist within the system.

A mirrored packet cannot be mirrored to multiple destinations. If a packet matches multiple mirror source entries then the packet is mirrored to a single mirror destination service ID physical port. The precedence is structured so that the most specific match criteria has precedence over a less specific match.

The mirror-source configuration is not saved when a configuration is saved. A mirror-source manually configured within an ASCII configuration file will not be preserved if that file is overwritten by a save command. To make a mirror-source persistent between system reboots, you must define the mirror-source within a file associated with a config exec command.

By default, all mirror-dest service IDs have a mirror-source associated with them. The mirror-source is not technically created with this command. Instead, the service ID provides a contextual node for storing the current mirroring sources for the associated mirror-dest service ID. The mirror-source is created for the mirror service when the operator enters the debug>mirror-source service-id for the first time. The mirror-source is also automatically removed when the mirror-dest service ID is deleted from the system.

The no form of the command deletes all related source commands within the context of the mirror-source service-id. The command does not remove the service ID from the system.

Default

n/a

Parameters

service-id

the mirror destination service ID for which match criteria will be defined. The service-id must already exist within the system.

Values

service-id: 1 to 2147483647 or svc-name

mac-filter

Syntax

mac-filter mac-filter-id entry entry-id [entry-id ...]

no mac-filter mac-filter-id [entry entry-id ...]

Context

debug>mirror-source

Description

This command enables the mirroring of packets that match specific entries in an existing MAC filter.

The command directs packets that match the defined list of entry IDs to be mirrored to the mirror destination referenced by the service-id of the mirror-source. The match criteria can be source or destination MAC addresses

The MAC filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the MAC filter does not exist, an error will occur. If the filter exists but has not been associated with a VPLS SAP, an error is not generated but mirroring is not enabled because there are no packets to mirror. Once the filter is associated with a VPLS SAP mirroring is enabled.

If the MAC filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the MAC filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry ID in a MAC filter can only be mirrored to a single mirror destination. If the same entry ID is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

Each entry ID must exist in the MAC filter. If the entry-id is renumbered in the MAC filter definition, the old entry-id is removed from the list and the new entry-id must be manually added to the list.

By default, no packets matching any MAC filters are mirrored. Mirroring of MAC filter entries must be explicitly defined.

The no version of this command without an entry-id configured disables mirroring on all entry IDs within the MAC filter.

The no version of this command with one or more entry IDs listed disables mirroring of packets matching those specific MAC filter entries. If an entry-id is listed that does not exist, an error occurs and the command does not execute. If an entry-id is listed that is not currently being mirrored, no error occurs for that entry-id and the command executes normally.

Default

n/a

Parameters

mac-filter-id

the MAC filter ID whose entries are mirrored

Values

1 to 65535

entry-id

the MAC filter entries to use as match criteria for packet mirroring. Up to eight entry IDs can be specified with a single command. Each entry-id must be separated by a space.

If no entry IDs are specified, mirroring does not occur for that MAC filter ID and the command will have no effect.

Values

1 to 65535

port

Syntax

port {port-id | lag lag-id} {[egress] [ingress]}

no port {port-id | lag lag-id} [egress] [ingress]

Context

debug>mirror-source

Description

This command enables mirroring of traffic ingressing or egressing an Ethernet port or Link Aggregation Group (LAG).

The port command associates a port or LAG with a mirror source. The port is identified by the port-id. The defined port can be an Ethernet access, network, or hybrid port. A network port may be a single port or a LAG ID. When a LAG ID is given as the port-id, mirroring is enabled on all ports making up the LAG.

The port is only referenced in the mirror source for mirroring purposes. If the port is removed from the system, the mirroring association will be removed from the mirror source.

The same port may not be associated with multiple mirror source definitions with the ingress parameter defined. The same port may not be associated with multiple mirror source definitions with the egress parameter defined.

If the port is not associated with a mirror-source, packets on that port will not be mirrored.

The no port command disables port mirroring for the specified port. Mirroring of packets on the port may continue due to more specific mirror criteria. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition will be removed.

Default

n/a

Parameters

port-id

the port ID

lag-id

the LAG identifier, expressed as a decimal integer

Values

1 to 32

egress

specifies that packets egressing the port should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.

ingress

specifies that packets ingressing the port should be mirrored. Ingress packets are mirrored to the mirror destination prior to ingress packet modification.

pcap

Syntax

pcap session-name

Context

debug

Description

This command specifies the session for the packet capture process.

Parameters

session-name

the session name

capture

Syntax

capture pcap-action

Context

debug>pcap

Description

This command starts and stops the packet capture process for the specified session-name.

Parameters

pcap-action

the PCAP session start or stop action

Values

start or stop

start: starts the packet capture process and also starts or restarts the FTP session. If the FTP server is unreachable, the command prompt blocks further input until the retries are timed out after 24 s (after four attempts of about 6 s each). If the same filename is unchanged in the config>mirror>mirror-dest>pcap context between captures, this command overwrites the file content.

stop: stops the packet capture process and also stops the FTP session. If the FTP server is unreachable, the command prompt blocks further input until the retries are timed out after 24 s (after four attempts of about 6 s each).