Creating an ACL-based inbound mirror clause

The following example shows how to configure an ACL-based inbound mirror clause.

Configure the mirror port.

device(config)# mirror-port ethernet 1/1/2

Configure the ACL-based inbound mirror clause.

device(config)# access-list 101 permit ip any any mirror

Apply the ACL-based inbound clause to the monitor port.

device(config)# interface ethernet 1/1/5
device(config-if-e1000-1/1/5)# ip access-group 101 in

Create the ACL mirror port.

device(config-if-e1000-1/1/5)# acl-mirror-port ethernet 1/1/2

To verify ACL mirror settings, enter the show access-list all command.

device# show access-list all
Extended IP access list 101
permit ip any any mirror