Configuring MAC address filter-based mirroring

  1. Enter configuration mode.
    device# configure terminal
    
  2. Activate mirroring on the port by using the mirror command.
    device(config)# mirror ethernet 1/1/14
    
  3. Add the mirror keyword.
    device(config)# mac filter 1 permit 0000.0011.2222 ffff.ffff.ffff 0000.0022.3333 ffff.ffff.ffff mirror
    

    The keyword is added to MAC address filter clauses to direct desired traffic to the mirror port. In the following example, the MAC address filter directs traffic to a mirror port. In this example, any flow matching the source address (SA) 0000.0011.2222 and the destination address (DA) 0000.0022.3333 is mirrored. Other flows are not mirrored.

  4. Apply the MAC address filter to the interface.
    device(config)# interface ethernet 1/1/1
    device(config-if-e10000-1/1/1)# mac filter-group 1
    
  5. Configure the monitor port to use the mirror port.
    device(config)# interface ethernet 1/1/5
    device(config-if-e10000-1/1/5)# acl-mirror-port ethernet 1/1/14