2.14. Mirror Service Show and Debug Command Reference

2.14.1. Command Hierarchies

Show Commands
Clear Commands
Debug Commands

2.14.1.1. Show Commands

show

— debug [application]

— li

— filter

— li-ip [li-filter-name]

— li-ip li-filter-name {counters | associations}

— li-ip li-filter-name entry entry-id [counters]

— li-ipv6 [li-filter-name]

— li-ipv6 li-filter-name {counters | associations}

— li-ipv6 li-filter-name entry entry-id [counters]

— li-mac [li-filter-name]

— li-mac li-filter-name {counters | associations}

— li-mac li-filter-name entry entry-id [counters]

— li-source service-id [acct-session-id session-id]

— log

— log-id [log-id] [severity severity-level] [application application] [sequence from-seq [to-seq]] [count count] [router router-instance [expression]] [subject subject [regexp]] [{ascending | descending}] [message message [msg-regexp]]

— mirror-dest [service-id]

— status

— mirror mirror-dest [service-id]

— mirror mirror-source [service-id]

— service

— active-subscribers detail

— active-subscribers mirror

— active-subscribers [summary]

— service-using [epipe] [ies] [vpls] [vprn] [mirror] [apipe] [fpipe] [ipipe] [cpipe] [etree] [vsd] [b-vpls] [i-vpls] [m-vpls] [sdp sdp-id] [customer customer-id] [origin creation-origin]

— pcap [session-name] [detail]

2.14.1.2. Clear Commands

clear

— li

— filter

— li-ip li-filter-name [entry entry-id] [{ingress | egress}]

— li-ipv6 li-filter-name [entry entry-id] [{ingress | egress}]

— li-mac li-filter-name [entry entry-id] [{ingress | egress}]

— log log-id

— radius

— mirror-dest service-id

2.14.1.3. Debug Commands

debug

— [no] mirror-source service-id

— ingress-label label [label]

— no ingress-label [label]

— ip-filter ip-filter-id entry entry-id [entry-id]

— no ip-filter ip-filter-id [entry entry-id]

— isa-aa-group isa-aa-group-id {all | unknown}

— no isa-aa-group isa-aa-group-id

— mac-filter mac-filter-id entry entry-id [entry-id]

— no mac-filter mac-filter-id [entry entry-id]

— port {port-id | lag lag-id} {[egress] [ingress]}

— no port {port-id | lag lag-id} [egress] [ingress]

— sap sap-id {[egress] [ingress]}

— no sap sap-id [egress] [ingress]

— [no] shutdown

— subscriber sub-ident-string [sap sap-id [ip ip-address] [{mac ieee-address] | sla-profile sla-profile-name}] [fc {[be] [l2] [af] [l1] [h2] [ef] [h1] [nc]}] {[ingress] [egress]}

— no subscriber sub-ident-string

— pcap session-name

— capture [{start | stop}]

2.14.2. Command Descriptions

2.14.2.1. Show Commands

The command outputs in the following section are examples only; actual displays may differ depending on supported functionality and user configuration.

debug

Syntax

debug [application]

Context

show

Description

This command displays set debug points.

Parameters

application—

Display which debug points have been set.

Values—

aaa, application-assurance, atm, bgp, bier, call-trace, certificate, cisco-hdlc, diameter, dynamic-services, eth-cfm, ethernet, filter, frame-relay, gmpls, gtp, igmp, ip, ipsec, isis, l2tp, lag, ldp, lmp, local-dhcp-server, mcast-management, mirror, mld, mpls, msdp, mtrace, mtrace2, nat, oam, open-flow, ospf, ospf3, pcep, pcp, pim, ppp, python, radius, radius-proxy, rip, ripng, rpki, rsvp, service, snmp, srrp, subscriber-mgmt, system, upnp, vrrp, wlan-gw, wpp

Output

The following shows an example of debug output.

Sample Output

*A:EsrC# show debug

debug

mirror-source 100

subscriber "user1" ingress

subscriber "user2" fc be h2 h1 nc egress

subscriber "user3" ingress egress

subscriber "user4" sap 1/1/2:1 fc af ef nc ingress

subscriber "user5" sap 1/1/2:1 egress

subscriber "user6" sap 1/1/2:1 fc be l2 af h2 ef nc ingress egress

subscriber "user7" sap 1/1/2:1 ip 1.1.0.7 fc l1 h2 ingress

subscriber "user8" sap 1/1/2:1 ip 1.1.0.8 fc af l1 h2 ef nc egress

subscriber "user9" sap 1/1/2:1 ip 1.1.0.9 ingress egress

subscriber "user10" sap 1/1/

2:1 mac 00:00:01:00:00:01 fc be l2 l1 h1 nc ingress

subscriber "user11" sap 1/1/

2:1 mac 00:00:01:00:00:02 fc be l1 h2 ef h1 egress

subscriber "user12" sap 1/1/

2:1 mac 00:00:01:00:00:03 fc be ef ingress egress

subscriber "user13" sap 1/1/

2:1 ip 1.1.0.13 mac 00:00:01:00:00:01 fc be ef h1 ingress

subscriber "user14" sap 1/1/2:1 ip 1.1.0.14 mac 00:00:01:00:00:02 egress

subscriber "user15" sap 1/1/

2:1 ip 1.1.0.15 mac 00:00:01:00:00:03 fc af l1 ef nc ingress egress

subscriber "user16" sla-profile "sla1" ingress

subscriber "user17" sla-profile "sla2" egress

subscriber "user18" sla-profile "sla3" fc be af h2 ingress egress

no shutdown

exit

*A:EsrC#

*A:alu1# show debug

debug

mirror-source 101

port 1/1/1 ingress

no shutdown

exit

mirror-source 102

port 1/1/3 egress

no shutdown

exit

*A:alu1#

active-subscribers

Syntax

active-subscribers detail

active-subscribers mirror

active-subscribers [summary]

Context

show>service

Description

This command displays active subscriber information.

Parameters

detail—

Keyword to display a subscriber detail.

mirror—

Keyword to display a subscriber mirror.

summary—

Keyword to display a subscriber summary.

Output

The following output is an example of active subscribers information.

Sample Output

*A:EsrC# show service active-subscribers mirror

===============================================================================

Active Subscribers

===============================================================================

Subscriber user1 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.1 00:00:01:00:00:01 Static

Ingress mirror: 100 l2 af l1 nc

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:11 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

11.1.0.1 00:00:01:00:00:01 Static

Ingress mirror: 100 l2 af l1 nc

---------------------------------------------

Subscriber user10 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.10 00:00:01:00:00:01 Static

Ingress mirror: 100 af ef h1 nc

---------------------------------------------

Subscriber user11 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.11 00:00:01:00:00:02 Static

Egress mirror: 100 l2 ef h1

---------------------------------------------

Subscriber user12 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.12 00:00:01:00:00:03 Static

Ingress mirror: 100 be l2 af l1 h2 ef h1 nc

Egress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------

Subscriber user13 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.13 00:00:01:00:00:01 Static

Ingress mirror: 100 l1 ef h1

---------------------------------------------

Subscriber user14 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.14 00:00:01:00:00:02 Static

Egress mirror: 100 l2 h2 ef h1

---------------------------------------------

Subscriber user15 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.15 00:00:01:00:00:03 Static

Ingress mirror: 100 l1 nc

Egress mirror: 100 l1 nc

---------------------------------------------

Subscriber user16 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.16 00:00:01:00:00:01 Static

Ingress mirror: 100 be l2 af nc

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:11 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

11.1.0.16 00:00:01:00:00:01 Static

Ingress mirror: 100 be l2 af nc

---------------------------------------------

Subscriber user17 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla2

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.17 00:00:01:00:00:01 Static

Egress mirror: 100 af l1 h1

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:11 - sla:sla2

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

11.1.0.17 00:00:01:00:00:01 Static

Egress mirror: 100 af l1 h1

---------------------------------------------

Subscriber user18 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla3

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.18 00:00:01:00:00:01 Static

Ingress mirror: 100 h2

Egress mirror: 100 h2

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:11 - sla:sla3

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

11.1.0.18 00:00:01:00:00:01 Static

Ingress mirror: 100 h2

Egress mirror: 100 h2

---------------------------------------------

Subscriber user2 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.2 00:00:01:00:00:01 Static

Egress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:11 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

11.1.0.2 00:00:01:00:00:01 Static

Egress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------

Subscriber user3 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.3 00:00:01:00:00:01 Static

Ingress mirror: 100 be l2 af l1 h2 ef h1 nc

Egress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:11 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

11.1.0.3 00:00:01:00:00:01 Static

Ingress mirror: 100 be l2 af l1 h2 ef h1 nc

Egress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------

Subscriber user4 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.4 00:00:01:00:00:01 Static

Ingress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------

Subscriber user5 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.5 00:00:01:00:00:01 Static

Egress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------

Subscriber user6 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.6 00:00:01:00:00:01 Static

Ingress mirror: 100 be af l1 h2

Egress mirror: 100 be af l1 h2

---------------------------------------------

Subscriber user7 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.7 00:00:01:00:00:01 Static

Ingress mirror: 100 be l2 af l1 h2 ef h1 nc

---------------------------------------------

Subscriber user8 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.8 00:00:01:00:00:01 Static

Egress mirror: 100 be af l1 h1 nc

---------------------------------------------

Subscriber user9 (sub1)

---------------------------------------------------------------------------

SLA Profile Instance sap:lag-8:1 - sla:sla1

---------------------------------------------------------------------------

IP Address MAC Address Origin

---------------------------------------------

1.1.0.9 00:00:01:00:00:01 Static

Ingress mirror: 100 be l2 af l1 h2 ef h1 nc

Egress mirror: 100 be l2 af l1 h2 ef h1 nc

===============================================================================

*A:EsrC#

service-using

Syntax

service-using [epipe] [ies] [vpls] [vprn] [mirror] [apipe] [fpipe] [ipipe] [cpipe] [etree] [vsd] [b-vpls] [i-vpls] [m-vpls] [sdp sdp-id] [customer customer-id] [origin creation-origin]

Context

show>service

Description

This command displays mirror services information.

If no optional parameters are specified, all services defined on the system are displayed.

Parameters

epipe —

Displays Epipe services information.

ies —

Displays IES services information.

vpls —

Displays VPLS services information.

mirror —

Displays mirror services information.

apipe —

Displays Apipe services information.

fpipe —

Displays Fpipe services information.

ipipe —

Displays Ipipe services information.

cpipe —

Displays Cpipe services information.

etree —

Displays etree services information.

vsd —

Displays VSD services information.

b-vpls —

Displays B-VPLS services information.

i-vpls —

Displays I-VPLS services information.

m-vpls —

Displays M-VPLS services information.

sdp-id —

Displays SDP ID services information.

Values—

1 to 32767

customer-id —

Displays customer ID services information.

Values—

1 to 2147483648

creation-origin —

Specifies the method by which the service was created.

Values—

manual, multi-segment-p-w, dyn-script, vsd

Output

The following output is an example of service using mirror information.

Sample Output

A:ALA-48# show service service-using mirror

===============================================================================

Services [mirror]

===============================================================================

ServiceId Type Adm Opr CustomerId Last Mgmt Change

-------------------------------------------------------------------------------

218 Mirror Up Down 1 04/08/2007 13:49:57

318 Mirror Down Down 1 04/08/2007 13:49:57

319 Mirror Up Down 1 04/08/2007 13:49:57

320 Mirror Up Down 1 04/08/2007 13:49:57

1000 Mirror Down Down 1 04/08/2007 13:49:57

1216 Mirror Up Down 1 04/08/2007 13:49:57

1412412 Mirror Down Down 1 04/08/2007 13:49:57

-------------------------------------------------------------------------------

Matching Services : 7

===============================================================================

A:ALA-48#

Table 8: Show service-using Mirror Fields

Label	Description
Service Id	Displays the service identifier.
Type	Displays the service type configured for the service ID.
Adm	Displays the desired state of the service.
Opr	Displays the operating state of the service.
CustomerID	Displays ID of the customer who owns this service.
Last Mgmt Change	Displays the date and time of the most recent management-initiated change to this service.

li

Syntax

Context

show

Description

This command displays Lawful Intercept (LI) information.

filter

Syntax

filter

Context

show>li

Description

This command displays LI mirror filter configuration and operation information.

li-ip

Syntax

li-ip [li-filter-name]

li-ip li-filter-name {counters | associations}

li-ip li-filter-name entry entry-id [counters]

Context

show>li>filter

Description

This command displays LI mirror IPv4 address filter configuration and operation information.

Parameters

li-filter-name—

Specifies the LI filter name, up to 32 characters.

entry-id—

Specifies the LI filter entry.

Values—

1 to 65535

counters—

Specifies LI filter counter information.

associations—

Specifies LI filter association information.

li-ipv6

Syntax

li-ipv6 [li-filter-name]

li-ipv6 li-filter-name {counters | associations}

li-ipv6 li-filter-name entry entry-id [counters]

Context

show>li>filter

Description

This command displays LI mirror IPv6 address filter configuration and operation information.

Parameters

li-filter-name—

Specifies the LI filter name, up to 32 characters.

entry-id—

Specifies the LI filter entry.

Values—

1 to 65535

counters—

Specifies LI filter counter information.

associations—

Specifies LI filter association information.

li-mac

Syntax

li-mac [li-filter-name]

li-mac li-filter-name {counters | associations}

li-mac li-filter-name entry entry-id [counters]

Context

show>li>filter

Description

This command displays LI mirror MAC address filter configuration and operation information.

Parameters

li-filter-name—

Specifies the LI filter name, up to 32 characters.

entry-id—

Specifies the LI filter entry.

Values—

1 to 65535

counters—

Specifies LI filter counter information.

associations—

Specifies LI filter association information.

li-source

Syntax

li-source service-id [acct-session-id session-id]

Context

show>li

Description

This command displays LI mirror configuration and operation information.

Parameters

service-id—

Specifies the service ID.

Values—

1 to 2147483647

session-id—

Specifies the session ID, up to 22 characters.

Output

The following output is an example of LI source information.

Sample Output

*A:sim138# show li li-source 2

===============================================================================

Mirror Service

===============================================================================

Service Id : 2 Type : Ether

Admin State : Up Oper State : Up

Forwarding Class : be Remote Sources: No

Slice : 0

Destination SDP : 1000 (100.1.1.2) Egress Label : 4000

Signaling: : None

-------------------------------------------------------------------------------

Local Sources

-------------------------------------------------------------------------------

Admin State : Up

- IP Filter 1 Entry 1

===============================================================================

*A:sim138#

log

Syntax

log

Context

show>li

Description

This command displays LI event log information.

log-id

Syntax

log-id [log-id] [severity severity-level] [application application] [sequence from-seq [to-seq]] [count count] [router router-instance [expression]] [subject subject [regexp]] [{ascending | descending}] [message message [msg-regexp]]

Context

show>li>log

Description

This command displays information for specified log.

Parameters

log-id—

Specifies the log ID.

Values—

1 to 100

severity-level—

Specifies the severity level.

Values—

cleared, indeterminate, critical, major, minor, warning

application—

Specifies the application name.

Values—

application_assurance, aps, atm, auto_prov, bfd, bgp, bier, bmp, calltrace, ccag, cflowd, chassis, cpmhwfilter, cpmhwqueue, debug, dhcp, dhcps, diameter, dot1x, dynsvc, efm_oam, elmi, ering, eth_cfm, etun, filter, fpe, gsmp, gmpls, gtp, gtungrp, icl, igh, igmp, igmp_snooping, ip, ipfix, ipsec, ipsec_cpm, isis, l2tp, lag, ldap, ldp, li, lldp, lmp, logger, macsec, mcac, mcpath, mc_redundancy, mgmt_core, mirror, mld, mld_snooping, mpls, mpls_tp, mpls_lmgr, mrp, msdp, nat, nge, ntp, oam, open_flow, ospf, pcap, pcep, pfcp, pim, pim_snooping, port, ppp, pppoe, pppoe_clnt, profile, ptp, pxc, python, qos, radius, rib_api, rip, rip_ng, route_next_hop, route_policy, rpki, rsvp, security, sflow, snmp, sr_policy, stp, subscr_mgmt, sub_host_trk, svcmgr, system, tip, tls, user, user_db, video, vrrp, vrtr, wlan_gw, wpp

from-seq [to-seq]—

Specifies the sequence value.

Values—

1 to 4294967295

count—

Specifies the count.

Values—

1 to 4294967295

router-instance—

Specifies the router instance.

subject—

Specifies a subject string to match.

regexp—

Specifies to use a regular expression match.

ascending | descending—

Specifies the sort direction.

message—

Specifies the message, up to 400 characters.

msg-regexp—

Specifies to use a message regular expression match.

mirror-dest

Syntax

mirror-dest [service-id]

Context

show>li

Description

This command displays LI mirror destination information.

Parameters

service-id—

Identifies the service in the service domain. This ID is unique to this service and cannot be used by any other service, regardless of service type. The same service ID must be configured on every router that this particular service is defined on.

Values—

service-id:	1 to 2148278381
svc-name:	64 characters maximum

Output

Sample Output

A:BNG-1# show li mirror-dest

===============================================================================

Mirror Services

===============================================================================

Id Type Adm Opr Destination SDP Lbl/ Slice

SAP QoS

-------------------------------------------------------------------------------

995 Ether Up Up SAP 1/1/20:998 1 0

996 Ether Up Up SDP 10 (192.168.40.1) 999 0

997 ipOnly Up Up None n/a 0

[998] Ether Up Up ip-udp-shim (147.133.122.111) n/a 0

[999] Ether Up Up ip-gre (10.1.1.1) n/a 0

-------------------------------------------------------------------------------

RADIUS LI mirror dest: indicated by [<svc-id>]

mirror

Syntax

mirror mirror-dest service-id

mirror mirror-source service-id

Context

show

Description

This command displays mirror configuration and operation information.

Parameters

service-id—

Specify the mirror service ID.

Values—

1 to 2148278385

Output

The following output is an example of mirror destination information.

Sample Output

A:SR7# show mirror mirror-dest 1000

===============================================================================

Mirror Service

===============================================================================

Service Id : 1000 Type : Ether

Admin State : Up Oper State : Down

Forwarding Class : be Remote Sources: No

Slice : 0

Destination SAP : 1/1/1 Egr QoS Policy: 1

-------------------------------------------------------------------------------

Local Sources

-------------------------------------------------------------------------------

Admin State : Up

- Port 1/1/2 Egress Ingress

===============================================================================

A:SR7#

A:ALA-123>config>mirror# show mirror mirror-dest 500

===============================================================================

Mirror Service

===============================================================================

Service Id : 500 Type : Ether

Admin State : Up Oper State : Up

Forwarding Class : be Remote Sources: Yes

Destination SAP : 1/1/2 Egr QoS Policy: 1

-------------------------------------------------------------------------------

Remote Sources

-------------------------------------------------------------------------------

Far End : 10.20.1.45 Ingress Label : 131070

-------------------------------------------------------------------------------

Local Sources

-------------------------------------------------------------------------------

Admin State : Up

No Mirror Sources configured

===============================================================================

A:ALA-123>config>mirror#

A:ALA-456# show mirror mirror-dest 500

==============================================================================

Mirror Service

===============================================================================

Service Id : 500 Type : Ether

Admin State : Up Oper State : Up

Forwarding Class : be Remote Sources: No

Destination SDP : 144 (10.20.1.44) Egress Label : 131070

Signaling: : TLDP

-------------------------------------------------------------------------------

Local Sources

-------------------------------------------------------------------------------

Admin State : Up

No Mirror Sources configured

===============================================================================

A:ALA-456#

A:NS042650115# show mirror mirror-dest 100

==============================================================================

Mirror Service

===============================================================================

Service Id : 100 Type : PPP

Admin State : Up Oper State : Up

Forwarding Class : be Remote Sources: No

Slice : 0Enable Port Id: Yes

Destination SDP : 100 (2.2.2.2) Egress Label : 131070

Signaling: : TLDP

-------------------------------------------------------------------------------

Local Sources

-------------------------------------------------------------------------------

Admin State : Up

No Mirror Sources configured

===============================================================================

A:NS042650115#

*A:EsrC# show mirror mirror-dest 100

===============================================================================

Mirror Service

===============================================================================

Service Id : 100 Type : Ether

Description : Added by createMirrorDestination 100

Admin State : Up Oper State : Up

Forwarding Class : be Remote Sources: No

Slice : 0

Destination SAP : 1/1/5:100 Egr QoS Policy: 1

-------------------------------------------------------------------------------

Local Sources

-------------------------------------------------------------------------------

Admin State : Up

-Subs user1 Ing

-Subs user2 Egr

FC be h2 h1 nc

-Subs user3 Egr Ing

-Subs user4 1/1/2:1 Ing

FC af ef nc

-Subs user5 1/1/2:1 Egr

-Subs user6 1/1/2:1 Egr Ing

FC be l2 af h2 ef nc

-Subs user7 1/1/2:1 Ing

IP 1.1.0.7 FC l1 h2

-Subs user8 1/1/2:1 Egr

IP 1.1.0.8 FC af l1 h2 ef nc

-Subs user9 1/1/2:1 Egr Ing

IP 1.1.0.9

-Subs user10 1/1/2:1 Ing

MAC 00:00:01:00:00:01 FC be l2 l1 h1 nc

-Subs user11 1/1/2:1 Egr

MAC 00:00:01:00:00:02 FC be l1 h2 ef h1

-Subs user12 1/1/2:1 Egr Ing

MAC 00:00:01:00:00:03 FC be ef

-Subs user13 1/1/2:1 Ing

IP 1.1.0.13 MAC 00:00:01:00:00:01 FC be ef h1

-Subs user14 1/1/2:1 Egr

IP 1.1.0.14 MAC 00:00:01:00:00:02

-Subs user15 1/1/2:1 Egr Ing

IP 1.1.0.15 MAC 00:00:01:00:00:03 FC af l1 ef nc

-Subs user16 SLA sla1 Ing

-Subs user17 SLA sla2 Egr

-Subs user18 SLA sla3 Egr Ing

FC be af h2

===============================================================================

A:EsrC#

Table 9 lists and describes the mirroring output fields:

Table 9: Show mirror Output Fields

Label	Description
Service Id	The service ID associated with this mirror destination.
Type	Entries in this table have an implied storage type of “volatile”. The configured mirror source information is not persistent.
Admin State	Up — The mirror destination is administratively enabled.
Admin State	Down — The mirror destination is administratively disabled.
Oper State	Up — The mirror destination is operationally enabled.
Oper State	Down — The mirror destination is operationally disabled.
Forwarding Class	The forwarding class for all packets transmitted to the mirror destination.
Remote Sources	Yes — A remote source is configured.
Remote Sources	No — A remote source is not configured.
Enable Port Id	Yes — PPP Port ID Mirroring is enabled.
Enable Port Id	No — PPP Port ID Mirroring is disabled.
Slice	The value of the slice-size, the maximum portion of the mirrored frame that will be transmitted to the mirror destination. Any frame larger than the slice-size will be truncated to this value before transmission to the mirror destination. A value of 0 indicates that mirrored packet truncation based on slice size is disabled.
Destination SAP	The ID of the access port where the Service Access Point (SAP) associated with this mirror destination service is defined.
Egr QoS Policy	This value indicates the egress QoS policy ID. A value of 0 indicates that no QoS policy is specified.

status

Syntax

status

Context

show>li

Description

This command displays LI status information.

Output

The following output displays information about the LI status.

Sample Output

*A:sim138# show li status

===============================================================================

Lawful Intercept Status Information

===============================================================================

LI Booted Config Status : fail

LI Local Save Allowed : yes

Separate LI administration : no

Last LI Config Save Time : N/A

Last Config Save Result : none

Changes Since Last Save : yes

Last LI Config Modified Time : 2008/01/11 10:24:30

===============================================================================

*A:sim138#

pcap

Syntax

pcap [session-name] [detail]

Context

show

Description

This command shows the information about the packet capture session and confirms if the packet is reliable.

Parameters

session-name—

Specifies the session name up to 32 characters.

Output

The following output displays information about the packet capture session.

Sample Output

===============================================================================

Pcap Session "1" Information

===============================================================================

Application Type : mirror-dest Session State : ready

Capture : stop Last Changed : 02/06/2018 19:52:07

Capture File Url : ftp://*:*@192.168.40.1/pcap.pcap

Buffer Size : 0 Bytes File Size : 0 Bytes

Write Failures : 0 Read Failures : 0

Proc Time Bailouts : 0 Last File Write : 02/06/2018 19:52:07

Dropped Packets : 0 Packets

===============================================================================

Table 10: Show PCAP Output Fields

Label	Description
Buffer Size	The maximum buffer size is 20 Mb. If the number of packets in the buffer exceeds 20 Mb, packets are dropped.
File Size	The current size of the capture file.
Write Failures	The number of errors that occurred when packets were written into the buffer. A number greater than zero indicates that some packets were not captured.
Read Failures	The errors occurred when packets were read from the buffer for exporting to FTP or TFTP. A number greater than zero indicates that some packets were not captured.
Process Time Bailouts	A system process timeout. Some packets were not captured.
Dropped Packets	The number of packets dropped from the buffer due to errors.

2.14.2.2. Clear Commands

li

Syntax

Context

clear

Description

This command clears Lawful Intercept (LI) information.

filter

Syntax

filter

Context

clear>li

Description

This command clears LI mirror filter configuration and operation information.

li-ip

Syntax

li-ip li-filter-name [entry entry-id] [{ingress | egress}]

Context

clear>li>filter

Description

This command clears LI mirror IPv4 address filter configuration and operation information.

Parameters

li-filter-name—

Clears the LI filter name, up to 32 characters.

entry-id—

Clears the LI filter entry.

Values—

1 to 65535

li-ipv6

Syntax

li-ipv6 li-filter-name [entry entry-id] [{ingress | egress}]

Context

clear>li>filter

Description

This command clears LI mirror IPv6 address filter configuration and operation information.

Parameters

li-filter-name—

Clears the LI filter name, up to 32 characters.

entry-id—

Clears the LI filter entry.

Values—

1 to 65535

li-mac

Syntax

li-mac li-filter-name [entry entry-id] [{ingress | egress}]

Context

clear>li>filter

Description

This command clears LI mirror MAC address filter configuration and operation information.

Parameters

li-filter-name—

Clears the LI filter name, up to 32 characters.

entry-id—

Clears the LI filter entry.

Values—

1 to 65535

log

Syntax

log log-id

Context

clear>li

Description

This command clears LI event log information.

Parameters

log-id—

Specifies the log ID.

Values—

1 to 100

radius

Syntax

radius

Context

clear>li

Description

This command clears RADIUS associated entities.

mirror-dest

Syntax

mirror-dest [service-id]

Context

clear>li>radius

Description

This command deletes the mirror destination created by RADIUS.

LI configuration changes, such as updating or replacing a mirror-destination template, may prevent the RADIUS VSA “Alc-li-action” from deleting a mirror destination. To remove the mirror destination from RADIUS, the parameters for the mirror destination (a combination of the RADIUS LI VSAs and the mirror destination template) must match the parameters used during the mirror destination creation. This CLI command removes LI destinations in these cases.

Parameters

service-id—

Specifies the mirror destination service that was created through RADIUS, which can be displayed with the show li mirror-dest command.

Values—

1 to 2148278385

2.14.2.3. Debug Commands

mirror-source

Syntax

[no] mirror-source service-id

Context

debug

Description

This command configures mirror source parameters for a mirrored service.

The mirror-source command is used to enable mirroring of packets specified by the association of the mirror-source to sources of packets defined within the context of the mirror-dest-service-id. The mirror destination service must already exist within the system.

A mirrored packet cannot be mirrored to multiple destinations. If a packet matches multiple mirror source entries (for example, a SAP on one mirror-source and a port on another mirror-source), then the packet is mirrored to a single mirror-dest-service-id based on the following precedence:

Filter entry
Subscriber (applies to the 7750 SR and 7450 ESS)
SAP
Physical port

The precedence is structured so the most specific match criteria has precedence over a less specific match. For example, if a mirror-source defines a port and a SAP on that port, then a packet arriving on the SAP will be mirrored using the SAP mirror (and not mirrored using the Port mirror) because the SAP is more specific than the port.

The mirror-source configuration is not saved when a configuration is saved. A mirror-source manually configured within an ASCII configuration file will not be preserved if that file is overwritten by a save command. Define the mirror-source within a file associated with a config exec command to make a mirror-source persistent between system reboots.

By default, all mirror destination service IDs have a mirror-source associated with them. The mirror-source is not technically created with this command. Instead the service ID provides a contextual node for storing the current mirroring sources for the associated mirror destination service ID. The mirror-source is created for the mirror service when the operator enters the debug>mirror-source svcId for the first time. If the operator enters li>li-source svcId for the first time, an LI source is created for the mirror service. The mirror-source is also automatically removed when the mirror destination service ID is deleted from the system.

The no form of this command deletes all related source commands within the context of the mirror-source service-id. The command does not remove the service ID from the system.

Parameters

service-id—

The mirror destination service ID for which match criteria will be defined. The service-id must already exist within the system.

Values—

service-id: 1 to 2147483647

svc-name: 64 characters maximum

ingress-label

Syntax

ingress-label label [label]

no ingress-label [label]

Context

debug>mirror-source

Description

This command configures mirroring of ingress MPLS frames with a specific MPLS label, up to eight, to a mirror destination.

ip-filter

Syntax

ip-filter ip-filter-id entry entry-id [entry-id]

no ip-filter ip-filter-id [entry entry-id]

Context

debug>mirror-source

Description

This command enables mirroring of packets that match specific entries in an existing IP filter.

The ip-filter command directs packets which match the defined list of entry IDs to be mirrored to the mirror destination referenced by the mirror-dest-service-id of the mirror-source.

The IP filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the IP filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IP interface, an error is not generated but mirroring will not be enabled (there are no packets to mirror). Once the IP filter is defined to a SAP or IP interface, mirroring is enabled.

If the IP filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the IP filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry-id within an IP filter can only be mirrored to a single mirror destination. If the same entry-id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

By default, no packets matching any IP filters are mirrored. Mirroring of IP filter entries must be explicitly defined.

The no ip-filter command, without the entry keyword, removes mirroring on all entry-id’s within the ip-filter-id.

When the no command is executed with the entry keyword and one or more entry-id’s, mirroring of that list of entry-id’s is terminated within the ip-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being mirrored, no error will occur for that entry-id and the command will execute normally.

Parameters

ip-filter-id—

The IP filter ID whose entries are mirrored. If the ip-filter-id does not exist, an error will occur and the command will not execute. Mirroring of packets will commence once the ip-filter-id is defined on a SAP or IP interface.

entry-id—

The IP filter entries to use as match criteria for packet mirroring. The entry keyword begins a list of entry-id’s for mirroring. A maximum of eight entry-id entries may be specified with a single command. Each entry-id must be separated by a space.

If an entry-id does not exist within the IP filter, an error occurs and the command will not execute.

If the filter’s entry-id is renumbered within the IP filter definition, the old entry-id is removed but the new entry-id must be manually added to the configuration to include the new (renumbered) entry’s criteria.

isa-aa-group

Syntax

isa-aa-group isa-aa-group-id {all | unknown}

no isa-aa-group isa-aa-group-id

Context

debug>mirror-source

Description

This command configures AA ISA group as a mirror source for this mirror service. Traffic is mirrored after AA processing takes place on AA ISAs of the group, therefore, any packets dropped as part of that AA processing are not mirrored.

Parameters

isa-aa-group-id —

Specifies the ISA ISA-AA group ID.

Values—

1 to 255

all—

Specifies that all traffic after AA processing will be mirrored.

unknown —

Specifies that all traffic during the identification phase (may match policy entry or entries that have mirror action configured) and traffic that had been identified as unknown_tcp or unknown_udp after AA processing will be mirrored.

mac-filter

Syntax

mac-filter mac-filter-id entry entry-id [entry-id]

no mac-filter mac-filter-id [entry entry-id]

Context

debug>mirror-source

Description

This command enables mirroring of packets that match specific entries in an existing MAC filter.

The mac-filter command directs packets which match the defined list of entry IDs to be mirrored to the mirror destination referenced by the mirror-dest-service-id of the mirror-source.

The MAC filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the MAC filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IP interface, an error is not be generated but mirroring will not be enabled (there are no packets to mirror). Once the filter is defined to a SAP or MAC interface, mirroring is enabled.

If the MAC filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the MAC filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry-id within a MAC filter can only be mirrored to a single mirror destination. If the same entry-id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

By default, no packets matching any MAC filters are mirrored. Mirroring of MAC filter entries must be explicitly defined.

The no mac-filter command, without the entry keyword, removes mirroring on all entry-id’s within the mac-filter-id.

When the no command is executed with the entry keyword and one or more entry-id’s, mirroring of that list of entry-id’s is terminated within the mac-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being mirrored, no error will occur for that entry-id and the command will execute normally.

Parameters

mac-filter-id—

The MAC filter ID whose entries are mirrored. If the mac-filter-id does not exist, an error will occur and the command will not execute. Mirroring of packets will commence once the mac-filter-id is defined on a SAP.

entry-id—

The MAC filter entries to use as match criteria for packet mirroring. The entry keyword begins a list of entry-id’s for mirroring. Multiple entry-id entries may be specified with a single command. Each entry-id must be separated by a space. Up to 8 entry IDs may be specified in a single command.

Each entry-id must exist within the mac-filter-id. If the entry-id is renumbered within the MAC filter definition, the old entry-id is removed from the list and the new entry-id will need to be manually added to the list if mirroring is still desired.

If no entry-id entries are specified in the command, mirroring will not occur for that MAC filter ID. The command will have no effect.

port

Syntax

port {port-id | lag lag-id} {[egress] [ingress]}

no port {port-id | lag lag-id} [egress] [ingress]

Context

debug>mirror-source

Description

This command enables mirroring of traffic ingressing or egressing a port (Ethernet port, SONET/SDH channel, TDM channel, or Link Aggregation Group (LAG)).

The port command associates a port or LAG to a mirror source. The port is identified by the port-id. The defined port may be Ethernet, Access or network, SONET/SDH, or TDM channel access. A network port may be a single port or a Link Aggregation Group (LAG) ID. When a LAG ID is given as the port-id, mirroring is enabled on all ports making up the LAG. If the port is a SONET/SDH interface, the channel-id must be specified to identify which channel is being mirrored (applies to the 7450 ESS and 7750 SR). Either a LAG port member or the LAG port can be mirrored.

The port is only referenced in the mirror source for mirroring purposes. The mirror source association does not need to be removed before deleting the card to which the port belongs. If the port is removed from the system, the mirroring association will be removed from the mirror source.

The same port may not be associated with multiple mirror source definitions with the ingress parameter defined. The same port may not be associated with multiple mirror source definitions with the egress parameter defined.

If a SAP is mirrored on an access port, the SAP mirroring will have precedence over the access port mirroring when a packet matches the SAP mirroring criteria. Filter and label mirroring destinations will also precedence over a port-mirroring destination.

If the port is not associated with a mirror-source, packets on that port will not be mirrored. Mirroring may still be defined for a SAP, label or filter entry, which will mirror based on a more specific criteria.

The encapsulation type on an access port or channel cannot be changed to Frame Relay if it is being mirrored (applies to the 7750 SR and 7450 ESS).

The no port command disables port mirroring for the specified port. Mirroring of packets on the port may continue due to more specific mirror criteria. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition will be removed.

Parameters

port-id—

Specifies the port ID of the 7750 SR or 7950 XRS.

The following syntax applies to the 7750 SR:

port-id	slot/mda/port [.channel]
	eth-sat-id	esat-id/slot/port
		esat	keyword
		id	1 to 20
	pxc-id	pxc-id.sub-port
		pxc	keyword
		id	1 to 64
		sub-port	a, b
	aps-id	aps-group-id[.channel]
		aps	keyword
		group-id	1 to 64
	bundle ID	bundle-type-slot/mda.bundle-num
		bundle	keyword
		type	ima, ppp
		bundle-num	1 to 336
	bgrp-id	bpgrp-type-bpgrp-num
		bgrp	keyword
		type	ima, ppp
		bgrp-num	1 to 2000
	ccag-id	ccag-id.path-id cc-type:cc-id
		ccag	keyword
		id	1 to 8
		path-id	a,b
		cc-type	sap-net, net-sap
		cc-id	0 to 4094

The following syntax applies to the 7950 XRS:

port-id	slot/mda/port [.channel]
	eth-sat-id	esat-id/slot/port
		esat	keyword
		id	1 to 20
	pxc-id	pxc-id.sub-port
		pxc	keyword
		id	1 to 64
		sub-port	a, b

lag-id—

Specifies the LAG identifier, expressed as a decimal integer.

Note:

On the 7950 XRS, the XMA ID takes the place of the MDA.

Values—

1 to 800

egress—

Specifies that packets egressing the port should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.

ingress—

Specifies that packets ingressing the port should be mirrored. Ingress packets are mirrored to the mirror destination prior to ingress packet modification.

sap

Syntax

sap sap-id {[egress] [ingress]}

no sap sap-id [egress] [ingress]

Context

debug>mirror-source

Description

This command enables mirroring of traffic ingressing or egressing a service access port (SAP). A SAP that is defined within a mirror destination cannot be used in a mirror source. The mirror source SAP referenced by the sap-id is owned by the service ID of the service in which it was created. The SAP is only referenced in the mirror source name for mirroring purposes. The mirror source association does not need to be removed before deleting the SAP from its service ID. If the SAP is deleted from its service ID, the mirror association is removed from the mirror source.

More than one SAP can be associated within a single mirror-source. Each SAP has its own ingress and egress parameter keywords to define which packets are mirrored to the mirror destination.

The SAP must be valid and properly configured. If the associated SAP does not exist, an error occurs and the command will not execute.

The same SAP cannot be associated with multiple mirror source definitions for ingress packets.

The same SAP cannot be associated with multiple mirror source definitions for egress packets.

If a particular SAP is not associated with a mirror source name, then that SAP will not have mirroring enabled for that mirror source.

Note that the ingress and egress options cannot be supported at the same time on a CEM encap-type SAP. The options must be configured in either the ingress or egress contexts (applies to the 7750 SR and 7950 XRS).

The no form of this command disables mirroring for the specified SAP. All mirroring for that SAP on ingress and egress is terminated. Mirroring of packets on the SAP can continue if more specific mirror criteria is configured. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition is removed.

Parameters

sap-id—

Specifies the physical port identifier portion of the SAP definition.

egress—

Specifies that packets egressing the SAP should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.

ingress—

Specifies that packets ingressing the SAP should be mirrored. Ingress packets are mirrored to the mirror destination prior to ingress packet modification.

subscriber

Syntax

subscriber sub-ident-string [sap sap-id] [ip ip-address] [{mac ieee-address] | sla-profile sla-profile-name}] [fc {[be] [l2] [af] [l1] [h2] [ef] [h1] [nc]}] {[ingress] [egress]}

no subscriber sub-ident-string

Context

debug>mirroring-source

Description

This command adds hosts of a subscriber to mirroring service.

Parameters

sub-ident-string—

Specifies the name of the subscriber identification policy.

sap-id—

Specifies the physical port identifier portion of the SAP definition.

ip-address—

The service IP address (system IP address) of the remote 7750 SR or 7450 ESS device sending LI traffic.

Values—

1.0.0.1 to 223.255.255.254

ieee-address—

Specify this optional parameter when defining a static host. The MAC address must be specified for anti-spoof ip-mac and arp-populate. Multiple static hosts may be configured with the same MAC address given that each definition is distinguished by a unique IP address.

sla-profile-name—

Specifies the SLA profile name, up to 32 characters.

fc—

Specifies name of the forwarding class with which to associate LI traffic.

Values—

be, l2, af, l1, h2, ef, h1, nc

ingress—

Specifies information for the ingress policy.

egress—

Specifies information for the egress policy.

ingress-label

Syntax

[no] ingress-label label [label]

no ingress-label label [label]

Context

debug>mirror-source

Description

This command enables ingress MPLS frame mirroring based on the top-of-stack MPLS label. Up to eight labels can be defined simultaneously.

The ingress-label command is used to mirror ingressing MPLS frames with specific MPLS labels to a specific mirror destination. The ingress label must be at the top of the label stack and can only be mirrored to a single mirror destination. If the same label is defined with multiple mirror destinations, an error is generated and the original mirror destination remains.

The ingress-label mirror source overrides all other mirror source definitions. The MPLS frame is mirrored to the mirror destination as it is received on the ingress network port. The router MPLS label space is global for the system. A specific label is mirrored to the mirror destination regardless of the ingress interface.

By default, no ingress MPLS frames are mirrored. The ingress-label command must be executed to start mirroring on a specific MPLS label.

The no ingress-label command removes all label mirroring for the mirror source. To stop mirroring on specific labels, use the no ingress-label label form of this command. Multiple labels may be given in a single no ingress-label command.

Parameters

label—

Specifies top-of-stack label received on ingress to be mirrored. A label can only be mirrored to a single mirror destination.

If the label does not exist on any ingress network ports, no packets are mirrored for that label. An error will not occur. Once the label exists on a network port, ingress mirroring commences for that label.

Values—

0 to 1048575. The local MPLS stack may not support portions of this range.

pcap

Syntax

pcap session-name

Context

debug

Description

This command specifies the session for the packet capture process.

Parameters

session-name—

Specifies the session name, up to 32 characters.

capture

Syntax

capture [{start | stop}]

Context

debug>pcap

Description

This command starts and stops the packet capture process for the specified session-name.

Parameters

start—

Starts the packet capture process and also start or restarts the FTP or TFTP session. If the FTP or TFTP server is unreachable, the command prompt rejects further input until the retires are timed out after 24 seconds (after four attempts of about six seconds each). If the same file name is unchanged in the config>mirror>mirror-dest>pcap context between captures, this command overwrites the file content.

stop—

Stops the packet capture process and also stops the FTP or TFTP session. If the FTP or TFTP server is unreachable, the command prompt rejects further input until the retires are timed out after 24 seconds (after four attempts of about six seconds each).