Configuring MAC ACL Mirroring

  1. Enter global configuration mode. 
    device# configure terminal
  2. Activate mirroring on the port by using the mirror command. 
    device(config)# mirror ethernet 1/1/1
  3. Create MAC ACL with mirror option. 
    device(config)# permit 0000.0011.2222 ffff.ffff.ffff 0000.0022.3333 ffff.ffff.ffff mirror

    The keyword is added to MAC address filter clauses to direct desired traffic to the mirror port. In the following example, the MAC address filter directs traffic to a mirror port. In this example, any flow matching the source address (SA) 0000.0011.2222 and the destination address (DA) 0000.0022.3333 is mirrored. Other flows are not mirrored.

  4. Apply the MAC ACL to the interface. 
    device(config)# interface ethernet 1/1/11
device(config-if-e10000-1/1/11)#  mac access-group MAC_ACL in
  5. Configure the monitor port to use the mirror port. 
    device(config)# interface ethernet 1/1/11
device(config-if-e10000-1/1/11)# acl-mirror-port ethernet 1/1/1
Parent topic: MAC ACL Mirroring