Creating an ACL-based Inbound Mirror Clause

The following steps configure an ACL-based inbound mirror clause.

  1. Configure the mirror port.
    device(config)# mirror-port ethernet 1/1/2
    
  2. Configure the ACL-based inbound mirror clause.
    device(config)# ip access-list extended 101
    device(config-ext-ipacl-101)# permit ip any any mirror
    
  3. Apply the ACL-based inbound clause to the monitor port.
    device(config)# interface ethernet 1/1/5
    device(config-if-e1000-1/1/5)# ip access-group 101 in
    
  4. Create the ACL mirror port.
    device(config-if-e1000-1/1/5)# acl-mirror-port ethernet 1/1/2
    
  5. (Optional) Use the show access-list all command to verify ACL mirror settings.
    device(config-ext-ipacl-101)# show access-list all
    Extended IP access list 101: 1 entries
    10: permit ip any any mirror