Mirror Service Show and Debug Command Reference

Command Hierarchies

  1. Show Commands
  2. Debug Commands

Show Commands

show
— debug [application]
— mirror [service-id]
— li
— filter li-ip filter-name {counter | associations}
— filter li-ip filter-name entry entry-id [counters]
— filter li-ipv6 filter-name {counter | associations}
— filter li-ipv6 filter-name entry entry-id [counters]
— li-source [service-id]
— log
— log-id [log-id] [severity severity-level] [application application] [sequence from-seq [to-seq]] [count count] [router router-instance [expression]] [subject subject [regexp]] [ascending | descending]
— mobile-gateway [target target-type id target-id] [df-peer peer-id] [summary]
— status
— service
— active-subscribers summary
— active-subscribers [subscriber sub-ident-string [sap sap-id sla-profile sla-profile-name]] [detail | mirror]
— active-subscribers hierarchy [subscriber sub-ident-string]
— service-using mirror

Debug Commands

debug
— [no] mirror-source service-id
— ingress-label label [label …up to 8 max]
— no ingress-label [label [label …up to 8 max]]
— ip-filter ip-filter-id entry entry-id [entry-id …]
— no ip-filter ip-filter-id [entry entry-id] [entry-id …]
— isa-aa-group isa-aa-group-id {all | unknown}
— no isa-aa-group isa-aa-group-id
— mac-filter mac-filter-id entry entry-id [entry-id …]
— no mac-filter mac-filter-id [entry entry-id...]
— port {port-id | lag lag-id} {[egress] [ingress]}
— no port {port-id | lag lag-id} [egress] [ingress]
— sap sap-id {[egress] [ingress]}
— no sap sap-id [egress] [ingress]
— subscriber sub-ident-string [sap sap-id [ip ip-address] [mac ieee-address] |sla-profile sla-profile-name] [fc {[be] [l2] [af] [l1] [h2] [ef] [h1] [nc]}] {[ingress] [egress]}
— no subscriber sub-ident-string
— [no] shutdown

Command Descriptions

Show Commands

The command outputs in the following section are examples only; actual displays may differ depending on supported functionality and user configuration.

debug

Syntax 
debug [application]
Context 
show
Description 

This command displays set debug points.

Parameters 
application—
Display which debug points have been set.
Values—
Some examples of applications include service, ip, ospf, ospf3, bgp, mtrace, isis, mpls, rsvp, ldp, mirror, vrrp, system, filter, lag and oam
Output 

Sample Output
*A:EsrC# show debug
debug
    mirror-source 100
        subscriber "user1" ingress
        subscriber "user2" fc be h2 h1 nc egress
        subscriber "user3" ingress egress
        subscriber "user4" sap 1/1/2:1 fc af ef nc ingress
        subscriber "user5" sap 1/1/2:1 egress
        subscriber "user6" sap 1/1/2:1 fc be l2 af h2 ef nc ingress egress
        subscriber "user7" sap 1/1/2:1 ip 1.1.0.7 fc l1 h2 ingress
        subscriber "user8" sap 1/1/2:1 ip 1.1.0.8 fc af l1 h2 ef nc egress
        subscriber "user9" sap 1/1/2:1 ip 1.1.0.9 ingress egress
        subscriber "user10" sap 1/1/
2:1 mac 00:00:01:00:00:01 fc be l2 l1 h1 nc ingress
        subscriber "user11" sap 1/1/
2:1 mac 00:00:01:00:00:02 fc be l1 h2 ef h1 egress
        subscriber "user12" sap 1/1/
2:1 mac 00:00:01:00:00:03 fc be ef ingress egress
        subscriber "user13" sap 1/1/
2:1 ip 1.1.0.13 mac 00:00:01:00:00:01 fc be ef h1 ingress
        subscriber "user14" sap 1/1/2:1 ip 1.1.0.14 mac 00:00:01:00:00:02 egress
        subscriber "user15" sap 1/1/
2:1 ip 1.1.0.15 mac 00:00:01:00:00:03 fc af l1 ef nc ingress egress
        subscriber "user16" sla-profile "sla1" ingress
        subscriber "user17" sla-profile "sla2" egress
        subscriber "user18" sla-profile "sla3" fc be af h2 ingress egress
        no shutdown
    exit
exit
*A:EsrC#
 
*A:alu1# show debug 
debug
    mirror-source 101
        port 1/1/1 ingress
        no shutdown
    exit
    mirror-source 102
        port 1/1/3 egress
        no shutdown
    exit
exit
*A:alu1# 

active-subscribers

Syntax 
active-subscribers summary
active-subscribers [subscriber sub-ident-string [sap sap-id sla-profile sla-profile-name]] [detail | mirror]
active-subscribers hierarchy [subscriber sub-ident-string]
Context 
show>service
Description 

This command displays active subscriber information.

Parameters 
sub-ident-string—
Specifies an existing subscriber identification string.
sap-id—
Specifies the physical port identifier portion of the SAP definition.
sla-profile-name—
Specifies an existing SLA profile name.
hierarchy —
Keyword to display the subscriber hierarchy.
summary—
Keyword to display a subscriber summary.
Output 
 
 
Sample Output
*A:EsrC# show service active-subscribers mirror
===============================================================================
Active Subscribers
===============================================================================
Subscriber user1 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.1         00:00:01:00:00:01 Static
                    Ingress mirror:      100   l2 af l1 nc
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:11 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
11.1.0.1        00:00:01:00:00:01 Static
                    Ingress mirror:      100   l2 af l1 nc
---------------------------------------------
Subscriber user10 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.10        00:00:01:00:00:01 Static
                    Ingress mirror:      100   af ef h1 nc
---------------------------------------------
Subscriber user11 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.11        00:00:01:00:00:02 Static
                    Egress  mirror:      100   l2 ef h1
---------------------------------------------
Subscriber user12 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.12        00:00:01:00:00:03 Static
                    Ingress mirror:      100   be l2 af l1 h2 ef h1 nc
                    Egress  mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------
Subscriber user13 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.13        00:00:01:00:00:01 Static
                    Ingress mirror:      100   l1 ef h1
---------------------------------------------
Subscriber user14 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.14        00:00:01:00:00:02 Static
                    Egress  mirror:      100   l2 h2 ef h1
---------------------------------------------
Subscriber user15 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.15        00:00:01:00:00:03 Static
                    Ingress mirror:      100   l1 nc
                    Egress  mirror:      100   l1 nc
---------------------------------------------
Subscriber user16 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.16        00:00:01:00:00:01 Static
                    Ingress mirror:      100   be l2 af nc
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:11 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
11.1.0.16       00:00:01:00:00:01 Static
                    Ingress mirror:      100   be l2 af nc
---------------------------------------------
Subscriber user17 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla2
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.17        00:00:01:00:00:01 Static
                    Egress  mirror:      100   af l1 h1
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:11 - sla:sla2
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
11.1.0.17       00:00:01:00:00:01 Static
                    Egress  mirror:      100   af l1 h1
---------------------------------------------
Subscriber user18 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla3
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.18        00:00:01:00:00:01 Static
                    Ingress mirror:      100   h2
                    Egress  mirror:      100   h2
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:11 - sla:sla3
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
11.1.0.18       00:00:01:00:00:01 Static
                    Ingress mirror:      100   h2
                    Egress  mirror:      100   h2
---------------------------------------------
Subscriber user2 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.2         00:00:01:00:00:01 Static
                    Egress  mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:11 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
11.1.0.2        00:00:01:00:00:01 Static
                    Egress  mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------
Subscriber user3 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.3         00:00:01:00:00:01 Static
                    Ingress mirror:      100   be l2 af l1 h2 ef h1 nc
                    Egress  mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:11 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
11.1.0.3        00:00:01:00:00:01 Static
                    Ingress mirror:      100   be l2 af l1 h2 ef h1 nc
                    Egress  mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------
Subscriber user4 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.4         00:00:01:00:00:01 Static
                    Ingress mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------
Subscriber user5 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.5         00:00:01:00:00:01 Static
                    Egress  mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------
Subscriber user6 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.6         00:00:01:00:00:01 Static
                    Ingress mirror:      100   be af l1 h2
                    Egress  mirror:      100   be af l1 h2
---------------------------------------------
Subscriber user7 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.7         00:00:01:00:00:01 Static
                    Ingress mirror:      100   be l2 af l1 h2 ef h1 nc
---------------------------------------------
Subscriber user8 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.8         00:00:01:00:00:01 Static
                    Egress  mirror:      100   be af l1 h1 nc
---------------------------------------------
Subscriber user9 (sub1)
---------------------------------------------------------------------------
SLA Profile Instance sap:lag-8:1 - sla:sla1
---------------------------------------------------------------------------
IP Address      MAC Address       Origin
---------------------------------------------
1.1.0.9         00:00:01:00:00:01 Static
                    Ingress mirror:      100   be l2 af l1 h2 ef h1 nc
                    Egress  mirror:      100   be l2 af l1 h2 ef h1 nc
===============================================================================
*A:EsrC#

service-using

Syntax 
service-using [mirror]
Context 
show>service
Description 

Displays mirror services.

If no optional parameters are specified, all services defined on the system are displayed.

Parameters 
mirror —
Displays mirror services.
Output 

Sample Output
A:ALA-48# show service service-using mirror
===============================================================================
Services [mirror]
===============================================================================
ServiceId    Type      Adm    Opr        CustomerId        Last Mgmt Change
-------------------------------------------------------------------------------
218          Mirror    Up     Down       1                 04/08/2007 13:49:57
318          Mirror    Down   Down       1                 04/08/2007 13:49:57
319          Mirror    Up     Down       1                 04/08/2007 13:49:57
320          Mirror    Up     Down       1                 04/08/2007 13:49:57
1000         Mirror    Down   Down       1                 04/08/2007 13:49:57
1216         Mirror    Up     Down       1                 04/08/2007 13:49:57
1412412      Mirror    Down   Down       1                 04/08/2007 13:49:57
-------------------------------------------------------------------------------
Matching Services : 7
===============================================================================
A:ALA-48#
Table 4:  Show service-using Mirror Fields 

Label

Description  

Service Id

The service identifier.

Type

Specifies the service type configured for the service ID.

Adm

The desired state of the service.

Opr

The operating state of the service.

CustomerID

The ID of the customer who owns this service.

Last Mgmt Change

The date and time of the most recent management-initiated change to this service.

li

Syntax 
li
Context 
show
Description 

Displays Lawful Intercept (LI) information.

li-source

Syntax 
li-source [service-id]
Context 
show>li
Description 

Displays Lawful Intercept mirror configuration and operation information.

Parameters 
service-id—
Specifies the service ID.
Values—
1 to 2147483647
Output 

Sample Output
*A:sim138# show li li-source 2 
===============================================================================
Mirror Service
===============================================================================
Service Id       : 2                    Type          : Ether                  
Admin State      : Up                   Oper State    : Up                     
Forwarding Class : be                   Remote Sources: No                     
Slice            : 0                                                           
Destination SDP  : 1000 (100.1.1.2)     Egress Label  : 4000                   
Signaling:       : None                                                        
 
-------------------------------------------------------------------------------
Local Sources
-------------------------------------------------------------------------------
Admin State      : Up                                                          
 
 - IP Filter       1          Entry 1         
===============================================================================
*A:sim138# 

filter

Syntax 
li-ip filter-name {counter | associations}
li-ip filter-name entry entry-id [counters]
li-ipv6 filter-name {counter | associations}
li-ipv6 filter-name entry entry-id [counters]
Context 
show>li
Description 

Displays Lawful Intercept mirror IPv4 or IPv6 address filter configuration and operation information.

Parameters 
filter-name—
Specifies the LI filter name.
entry-id—
Specifies the LI filter entry.
counters—
Specifies LI filter counter information.
counters—
Specifies LI filter association information.

log

Syntax 
log
Context 
show>li
Description 

Displays Lawful Intercept event log information.

log-id

Syntax 
log-id [log-id] [severity severity-level] [application application] [sequence from-seq [to-seq]] [count count] [router router-instance [expression]] [subject subject [regexp]] [ascending | descending]
Context 
show>li>log
Description 

Displays information for specified log.

Parameters 
log-id—
Specifies the log ID.
Values—
1 to 100
severity-level—
Specifies the severity level.
Values—
cleared, indeterminate, critical, major, minor, warning
application—
Specifies the application name.
Values—
bgp, cflowd, chassis, debug, igmp, lldp, mirror, ospf, pim, port, snmp, system, user, vrtr
from-seq [to-seq]—
Specifies the sequence value.
Values—
1 to 4294967295
count—
Specifies the count.
Values—
1 to 4294967295
subject—
Specifies a subject string to match.
reexp—
Specifies to use a regular expression match.
ascending | descending—
Specifies the sort direction.
router-instance—
Specifies the router instance.

status

Syntax 
status
Context 
show>li
Description 

Displays Lawful Intercept status information.

Output 

Sample Output
*A:sim138# show li status 
===============================================================================
Lawful Intercept Status Information
===============================================================================
LI Booted Config Status      : fail                                            
LI Local Save Allowed        : yes                                             
Separate LI administration   : no                                              
Last LI Config Save Time     : N/A                                             
Last Config Save Result      : none                                            
Changes Since Last Save      : yes                                             
Last LI Config Modified Time : 2008/01/11 10:24:30                             
===============================================================================
*A:sim138# 

mobile-gateway

Syntax 
mobile-gateway target <target-type> id <target-id>
Context 
show>li
Description 

Displays Lawful Intercept mirror configuration and operation information.

Parameters 
target-type—
Specifies the type of surveillance target identifier to be provisioned.
id target-id—
uniquely identifies a target for the interception up to 15 characters in length.
Output 

Sample Output
show li mobile-gateway target imsi id 123456789099005
 
===========================================================================
LI Target Information
===========================================================================
Target id (imsi)           : 123456789099005
Intercept type             : iricc      Df peer                    : 1liid: xyz123
-------------------------------------------------------------------------------
Number of targets : 1
===========================================================================
show li mobile-gateway target 
 
===========================================================================
LI Target Information
===========================================================================
Target id (imsi)           : 123456789099005
Intercept type             : iricc      Df peer                    : 1liid: xyz123
------------------------------------------------------------------------------------
--------------------------------------------
Target id (imsi)           : 123456789099007
Intercept type             : iricc      Df peer                    : 1liid: abc123
------------------------------------------------------------------------------------
--------------------------------------------
 
Number of targets : 2
==========================================================================
LI summary
==========================================================================
Total targets         : 10000           Total peers           : 1
Total IRI targets     : 0               Total IRI-CC targets: 10000
X3 transport type     : UDP             ULIC header: v1    Local interface       : 1
0.10.7.1
Router context        : Base            Operator-id:  op_id
IRI-DSCP              : af41CC-DSCP: af41
==========================================================================

mirror

Syntax 
mirror mirror-dest service-id
Context 
show
Description 

This command displays mirror configuration and operation information.

Parameters 
service-id—
Specify the mirror service ID.
Output 

Sample Output
A:SR7# show mirror mirror-dest 1000 
===============================================================================
Mirror Service
===============================================================================
Service Id       : 1000                 Type          : Ether
Admin State      : Up                   Oper State    : Down
Forwarding Class : be                   Remote Sources: No
Slice            : 0
Destination SAP  : 1/1/1                Egr QoS Policy: 1
-------------------------------------------------------------------------------
Local Sources
-------------------------------------------------------------------------------
Admin State      : Up
 - Port            1/1/2                          Egress Ingress
===============================================================================
A:SR7# 
 
 
A:ALA-123>config>mirror# show mirror mirror-dest 500
===============================================================================
Mirror Service
===============================================================================
Service Id       : 500                  Type          : Ether
Admin State      : Up                   Oper State    : Up
Forwarding Class : be                   Remote Sources: Yes
Destination SAP  : 1/1/2                Egr QoS Policy: 1
-------------------------------------------------------------------------------
Remote Sources
-------------------------------------------------------------------------------
Far End          : 10.20.1.45           Ingress Label : 131070
-------------------------------------------------------------------------------
Local Sources
-------------------------------------------------------------------------------
Admin State      : Up
No Mirror Sources configured
===============================================================================
A:ALA-123>config>mirror# 
 
 
A:ALA-456# show mirror mirror-dest 500
==============================================================================
Mirror Service
===============================================================================
Service Id       : 500                  Type          : Ether
Admin State      : Up                   Oper State    : Up
Forwarding Class : be                   Remote Sources: No
Destination SDP  : 144 (10.20.1.44)     Egress Label  : 131070
Signaling:       : TLDP
-------------------------------------------------------------------------------
Local Sources
-------------------------------------------------------------------------------
Admin State      : Up
No Mirror Sources configured
===============================================================================
A:ALA-456#
 
 
A:NS042650115# show mirror mirror-dest 100
==============================================================================
Mirror Service
===============================================================================
Service Id       : 100                  Type          : PPP
Admin State      : Up                   Oper State    : Up
Forwarding Class : be                   Remote Sources: No
Slice            : 0Enable Port Id: Yes
Destination SDP  : 100 (2.2.2.2) Egress Label  : 131070
Signaling:       : TLDP
-------------------------------------------------------------------------------
Local Sources
-------------------------------------------------------------------------------
Admin State      : Up
No Mirror Sources configured
===============================================================================
A:NS042650115#
 
 
*A:EsrC# show mirror mirror-dest 100
===============================================================================
Mirror Service
===============================================================================
Service Id       : 100                  Type          : Ether
Description      : Added by createMirrorDestination 100
Admin State      : Up                   Oper State    : Up
Forwarding Class : be                   Remote Sources: No
Slice            : 0
Destination SAP  : 1/1/5:100            Egr QoS Policy: 1
-------------------------------------------------------------------------------
Local Sources
-------------------------------------------------------------------------------
Admin State      : Up
-Subs  user1                                                                Ing
-Subs  user2                                                            Egr
                                                   FC  be h2 h1 nc
-Subs  user3                                                            Egr Ing
-Subs  user4                            1/1/2:1                             Ing
                                                   FC  af ef nc
-Subs  user5                            1/1/2:1                         Egr
-Subs  user6                            1/1/2:1                         Egr Ing
                                                   FC  be l2 af h2 ef nc
-Subs  user7                            1/1/2:1                             Ing
          IP 1.1.0.7                               FC  l1 h2
-Subs  user8                            1/1/2:1                         Egr
          IP 1.1.0.8                               FC  af l1 h2 ef nc
-Subs  user9                            1/1/2:1                         Egr Ing
          IP 1.1.0.9
-Subs  user10                           1/1/2:1                             Ing
                             MAC 00:00:01:00:00:01 FC  be l2 l1 h1 nc
-Subs  user11                           1/1/2:1                         Egr
                             MAC 00:00:01:00:00:02 FC  be l1 h2 ef h1
-Subs  user12                           1/1/2:1                         Egr Ing
                             MAC 00:00:01:00:00:03 FC  be ef
-Subs  user13                           1/1/2:1                             Ing
          IP 1.1.0.13        MAC 00:00:01:00:00:01 FC  be ef h1
-Subs  user14                           1/1/2:1                         Egr
          IP 1.1.0.14        MAC 00:00:01:00:00:02
-Subs  user15                           1/1/2:1                         Egr Ing
          IP 1.1.0.15        MAC 00:00:01:00:00:03 FC  af l1 ef nc
-Subs  user16                           SLA sla1                            Ing
-Subs  user17                           SLA sla2                        Egr
-Subs  user18                           SLA sla3                        Egr Ing
                                                   FC  be af h2
===============================================================================
A:EsrC#

Table 5 lists and describes the mirroring output fields:

Table 5:  Show mirror Output Fields 

Label

Description  

Service Id

The service ID associated with this mirror destination.

Type

Entries in this table have an implied storage type of “volatile”.

The configured mirror source information is not persistent.

Admin State

Up — The mirror destination is administratively enabled.

Down — The mirror destination is administratively disabled.

Oper State

Up — The mirror destination is operationally enabled.

Down — The mirror destination is operationally disabled.

Forwarding Class

The forwarding class for all packets transmitted to the mirror destination.

Remote Sources

Yes — A remote source is configured.

No — A remote source is not configured.

Enable Port Id

Yes — PPP Port ID Mirroring is enabled.

No — PPP Port ID Mirroring is disabled.

Slice

The value of the slice-size, the maximum portion of the mirrored frame that will be transmitted to the mirror destination. Any frame larger than the slice-size will be truncated to this value before transmission to the mirror destination. A value of 0 indicates that mirrored packet truncation based on slice size is disabled.

Destination SAP

The ID of the access port where the Service Access Point (SAP)

associated with this mirror destination service is defined.

Egr QoS Policy

This value indicates the egress QoS policy ID. A value of 0 indicates that no QoS policy is specified.

Debug Commands

mirror-source

Syntax 
[no] mirror-source service-id
Context 
debug
Description 

This command configures mirror source parameters for a mirrored service.

The mirror-source command is used to enable mirroring of packets specified by the association of the mirror-source to sources of packets defined within the context of the mirror-dest-service-id. The mirror destination service must already exist within the system.

A mirrored packet cannot be mirrored to multiple destinations. If a packet matches multiple mirror source entries (for example, a SAP on one mirror-source and a port on another mirror-source), then the packet is mirrored to a single mirror-dest-service-id based on the following precedence:

  1. Filter entry
  2. Subscriber (applies to the 7750 SR and 7450 ESS)
  3. SAP
  4. Physical port

The precedence is structured so the most specific match criteria has precedence over a less specific match. For example, if a mirror-source defines a port and a SAP on that port, then a packet arriving on the SAP will be mirrored using the SAP mirror (and not mirrored using the Port mirror) because the SAP is more specific than the port.

The mirror-source configuration is not saved when a configuration is saved. A mirror-source manually configured within an ASCII configuration file will not be preserved if that file is overwritten by a save command. Define the mirror-source within a file associated with a config exec command to make a mirror-source persistent between system reboots.

By default, all mirror-dest service IDs have a mirror-source associated with them. The mirror-source is not technically created with this command. Instead the service ID provides a contextual node for storing the current mirroring sources for the associated mirror-dest service ID. The mirror-source is created for the mirror service when the operator enters the debug>mirror-source svcId for the first time. If the operator enters li>li-source svcId for the first time, an LI source is created for the mirror service. The mirror-source is also automatically removed when the mirror-dest service ID is deleted from the system.

The no form of the command deletes all related source commands within the context of the mirror-source service-id. The command does not remove the service ID from the system.

Default 

No mirror source match criteria is defined for the mirror destination service.

Parameters 
service-id—
The mirror destination service ID for which match criteria will be defined. The service-id must already exist within the system.
Values—
service-id: 1 to 2147483647
svc-name: 64 characters maximum

ingress-label

Syntax 
ingress-label label [label …up to 8 max]
no ingress-label [label [label …up to 8 max]]
Context 
debug>mirror-source
Description 

This command configures mirroring of ingress MPLS frames with a specific MPLS label to a mirror destination.

ip-filter

Syntax 
ip-filter ip-filter-id entry entry-id [entry-id …]
no ip-filter ip-filter-id
no ip-filter ip-filter-id entry entry-id [entry-id …]
Context 
debug>mirror-source
Description 

This command enables mirroring of packets that match specific entries in an existing IP filter.

The ip-filter command directs packets which match the defined list of entry IDs to be mirrored to the mirror destination referenced by the mirror-dest-service-id of the mirror-source.

The IP filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the IP filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IP interface, an error is not generated but mirroring will not be enabled (there are no packets to mirror). Once the IP filter is defined to a SAP or IP interface, mirroring is enabled.

If the IP filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the IP filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry-id within an IP filter can only be mirrored to a single mirror destination. If the same entry-id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

By default, no packets matching any IP filters are mirrored. Mirroring of IP filter entries must be explicitly defined.

The no ip-filter command, without the entry keyword, removes mirroring on all entry-id’s within the ip-filter-id.

When the no command is executed with the entry keyword and one or more entry-id’s, mirroring of that list of entry-id’s is terminated within the ip-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being mirrored, no error will occur for that entry-id and the command will execute normally.

Default 

IP filter mirroring is not defined.

Parameters 
ip-filter-id—
The IP filter ID whose entries are mirrored. If the ip-filter-id does not exist, an error will occur and the command will not execute. Mirroring of packets will commence once the ip-filter-id is defined on a SAP or IP interface.
entry entry-id [entry-id …]—
The IP filter entries to use as match criteria for packet mirroring. The entry keyword begins a list of entry-id’s for mirroring. Multiple entry-id entries may be specified with a single command. Each entry-id must be separated by a space.

If an entry-id does not exist within the IP filter, an error occurs and the command will not execute.

If the filter’s entry-id is renumbered within the IP filter definition, the old entry-id is removed but the new entry-id must be manually added to the configuration to include the new (renumbered) entry’s criteria.

isa-aa-group

Syntax 
isa-aa-group isa-aa-group-id {all|unknown}
no isa-aa-group isa-aa-group-id
Context 
debug>mirror-source
Description 

This command configures AA ISAgroup as a mirror source for this mirror service. Traffic is mirrored after AA processing takes place on AA ISAs of the group, therefore, any packets dropped as part of that AA processing are not mirrored.

Parameters 
isa-aa-group-id —
Specifies the ISA ISA-AA group ID.
Values—
1 to 255
all—
Specifies that all traffic after AA processing will be mirrored.
unknown —
Specifies that all traffic during the identification phase (may match policy entry or entries that have mirror action configured) and traffic that had been identified as unknown_tcp or unknown_udp after AA processing will be mirrored.

mac-filter

Syntax 
mac-filter mac-filter-id entry entry-id [entry-id …]
no mac-filter mac-filter-id
no mac-filter mac-filter-id entry entry-id [entry-id …]
Context 
debug>mirror-source
Description 

This command enables mirroring of packets that match specific entries in an existing MAC filter.

The mac-filter command directs packets which match the defined list of entry IDs to be mirrored to the mirror destination referenced by the mirror-dest-service-id of the mirror-source.

The MAC filter must already exist in order for the command to execute. Filters are configured in the config>filter context. If the MAC filter does not exist, an error will occur. If the filter exists but has not been associated with a SAP or IP interface, an error is not be generated but mirroring will not be enabled (there are no packets to mirror). Once the filter is defined to a SAP or MAC interface, mirroring is enabled.

If the MAC filter is defined as ingress, only ingress packets are mirrored. Ingress mirrored packets are mirrored to the mirror destination prior to any ingress packet modifications.

If the MAC filter is defined as egress, only egress packets are mirrored. Egress mirrored packets are mirrored to the mirror destination after all egress packet modifications.

An entry-id within a MAC filter can only be mirrored to a single mirror destination. If the same entry-id is defined multiple times, an error occurs and only the first mirror-source definition is in effect.

By default, no packets matching any MAC filters are mirrored. Mirroring of MAC filter entries must be explicitly defined.

The no mac-filter command, without the entry keyword, removes mirroring on all entry-id’s within the mac-filter-id.

When the no command is executed with the entry keyword and one or more entry-id’s, mirroring of that list of entry-id’s is terminated within the mac-filter-id. If an entry-id is listed that does not exist, an error will occur and the command will not execute. If an entry-id is listed that is not currently being mirrored, no error will occur for that entry-id and the command will execute normally.

Default 

No MAC filter mirroring defined.

Parameters 
mac-filter-id—
The MAC filter ID whose entries are mirrored. If the mac-filter-id does not exist, an error will occur and the command will not execute. Mirroring of packets will commence once the mac-filter-id is defined on a SAP.
entry entry-id [entry-id …]—
The MAC filter entries to use as match criteria for packet mirroring. The entry keyword begins a list of entry-id’s for mirroring. Multiple entry-id entries may be specified with a single command. Each entry-id must be separated by a space. Up to 8 entry IDs may be specified in a single command.

Each entry-id must exist within the mac-filter-id. If the entry-id is renumbered within the MAC filter definition, the old entry-id is removed from the list and the new entry-id will need to be manually added to the list if mirroring is still desired.

If no entry-id entries are specified in the command, mirroring will not occur for that MAC filter ID. The command will have no effect.

port

Syntax 
port {port-id | lag lag-id} {[egress] [ingress]}
no port {port-id | lag lag-id} [egress] [ingress]
Context 
debug>mirror-source
Description 

This command enables mirroring of traffic ingressing or egressing a port (Ethernet port, SONET/SDH channel, TDM channel, or Link Aggregation Group (LAG)).

The port command associates a port or LAG to a mirror source. The port is identified by the port-id. The defined port may be Ethernet, Access or network, SONET/SDH, or TDM channel access. A network port may be a single port or a Link Aggregation Group (LAG) ID. When a LAG ID is given as the port-id, mirroring is enabled on all ports making up the LAG. If the port is a SONET/SDH interface, the channel-id must be specified to identify which channel is being mirrored (applies to the 7450 ESS and 7750 SR). Either a LAG port member or the LAG port can be mirrored.

The port is only referenced in the mirror source for mirroring purposes. The mirror source association does not need to be removed before deleting the card to which the port belongs. If the port is removed from the system, the mirroring association will be removed from the mirror source.

The same port may not be associated with multiple mirror source definitions with the ingress parameter defined. The same port may not be associated with multiple mirror source definitions with the egress parameter defined.

If a SAP is mirrored on an access port, the SAP mirroring will have precedence over the access port mirroring when a packet matches the SAP mirroring criteria. Filter and label mirroring destinations will also precedence over a port-mirroring destination.

If the port is not associated with a mirror-source, packets on that port will not be mirrored. Mirroring may still be defined for a SAP, label or filter entry, which will mirror based on a more specific criteria.

The encapsulation type on an access port or channel cannot be changed to Frame Relay if it is being mirrored (applies to the 7750 SR and 7450 ESS).

The no port command disables port mirroring for the specified port. Mirroring of packets on the port may continue due to more specific mirror criteria. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition will be removed.

Default 

No ports are defined.

Parameters 
port-id—
Specifies the port ID of the 7750 SR or 7950 XRS.

The following syntax applies to the 7750 SR:

port-id

slot/mda/port [.channel]

eth-sat-id

esat-id/slot/port

esat

keyword

id

1 to 20

pxc-id

pxc-id.sub-port

pxc

keyword

id

1 to 64

sub-port

a, b

aps-id

aps-group-id[.channel]

aps

keyword

group-id

1 to 64

bundle ID

bundle-type-slot/mda.bundle-num

bundle

keyword

type

ima, ppp

bundle-num

1 to 336

bgrp-id

bpgrp-type-bpgrp-num

bgrp

keyword

type

ima, ppp

bgrp-num

1 to 2000

ccag-id

ccag-id.path-id cc-type:cc-id

ccag

keyword

id

1 to 8

path-id

a,b

cc-type

sap-net, .net-sap

cc-id

0 to 4094

The following syntax applies to the 7950 XRS:

port-id

slot/mda/port [.channel]

eth-sat-id

esat-id/slot/port

esat

keyword

id

1 to 20

pxc-id

pxc-id.sub-port

pxc

keyword

id

1 to 64

sub-port

a, b

lag-id—
The LAG identifier, expressed as a decimal integer.
Note:

On the 7950 XRS, the XMA ID takes the place of the MDA.

Values—
1 to 800
egress—
Specifies that packets egressing the port should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.
ingress—
Specifies that packets ingressing the port should be mirrored. Ingress packets are mirrored to the mirror destination prior to ingress packet modification.

sap

Syntax 
sap sap-id {[egress] [ingress]}
no sap sap-id [egress] [ingress]
Context 
debug>mirror-source
Description 

This command enables mirroring of traffic ingressing or egressing a service access port (SAP). A SAP that is defined within a mirror destination cannot be used in a mirror source. The mirror source SAP referenced by the sap-id is owned by the service ID of the service in which it was created. The SAP is only referenced in the mirror source name for mirroring purposes. The mirror source association does not need to be removed before deleting the SAP from its service ID. If the SAP is deleted from its service ID, the mirror association is removed from the mirror source.

More than one SAP can be associated within a single mirror-source. Each SAP has its own ingress and egress parameter keywords to define which packets are mirrored to the mirror destination.

The SAP must be valid and properly configured. If the associated SAP does not exist, an error occurs and the command will not execute.

The same SAP cannot be associated with multiple mirror source definitions for ingress packets. The same SAP cannot be associated with multiple mirror source definitions for egress packets.

If a particular SAP is not associated with a mirror source name, then that SAP will not have mirroring enabled for that mirror source.

Note that the ingress and egress options cannot be supported at the same time on a CEM encap-type SAP. The options must be configured in either the ingress or egress contexts (applies to the 7750 SR and 7950 XRS).

The no form of the command disables mirroring for the specified SAP. All mirroring for that SAP on ingress and egress is terminated. Mirroring of packets on the SAP can continue if more specific mirror criteria is configured. If the egress or ingress parameter keywords are specified in the no command, only the ingress or egress mirroring condition is removed.

Default 

No SAPs are defined by default.

Parameters 
sap-id—
Specifies the physical port identifier portion of the SAP definition.
channel-id—
The SONET/SDH or TDM channel on the port of the SAP. A period separates the physical port from the channel-id. The port must be configured as an access port. This parameter applies only to the 7750 SR.
egress—
Specifies that packets egressing the SAP should be mirrored. Egress packets are mirrored to the mirror destination after egress packet modification.
ingress—
Specifies that packets ingressing the SAP should be mirrored. Ingress packets are mirrored to the mirror destination prior to ingress packet modification.

subscriber

Syntax 
subscriber sub-ident-string [sap sap-id [ip ip-address] [mac ieee-address]|sla-profile sla-profile-name] [fc {[be] [l2] [af] [l1] [h2] [ef] [h1] [nc]}] {[ingress] [egress]}
no subscriber sub-ident-string
Context 
debug>mirroring-source
Description 

This command adds hosts of a subscriber to mirroring service.

Parameters 
sub-ident-string—
Specifies the name of the subscriber identification policy.
sap-id—
Specifies the physical port identifier portion of the SAP definition.
ip ip-address—
The service IP address (system IP address) of the remote 7750 SR or 7450 ESS device sending LI traffic.
Values—
1.0.0.1 to 223.255.255.254
mac mac-address —
Specify this optional parameter when defining a static host. The MAC address must be specified for anti-spoof ip-mac and arp-populate. Multiple static hosts may be configured with the same MAC address given that each definition is distinguished by a unique IP address.
sla-profile sla-profile-name—
Specifies the SLA profile name.
Values—
32 characters maximum.
fc—
The name of the forwarding class with which to associate LI traffic.
Values—
be, l2, af, l1, h2, ef, h1, nc
ingress—
Specifies information for the ingress policy.
egress—
Specifies information for the egress policy.

ingress-label

Syntax 
[no] ingress-label label [label …up to 8 max]
no ingress-label label [label …up to 8 max]
Context 
debug>mirror-source
Description 

This command enables ingress MPLS frame mirroring based on the top-of-stack MPLS label. Multiple labels can be defined simultaneously.

The ingress-label command is used to mirror ingressing MPLS frames with specific MPLS labels to a specific mirror destination. The ingress label must be at the top of the label stack and can only be mirrored to a single mirror destination. If the same label is defined with multiple mirror destinations, an error is generated and the original mirror destination remains.

The ingress-label mirror source overrides all other mirror source definitions. The MPLS frame is mirrored to the mirror destination as it is received on the ingress network port. The router MPLS label space is global for the system. A specific label is mirrored to the mirror destination regardless of the ingress interface.

By default, no ingress MPLS frames are mirrored. The ingress-label command must be executed to start mirroring on a specific MPLS label.

The no ingress-label command removes all label mirroring for the mirror source. To stop mirroring on specific labels, use the no ingress-label label form of the command. Multiple labels may be given in a single no ingress-label command.

Default 

No ingress MPLS labels for mirroring are defined.

Parameters 
label—
The top-of-stack label received on ingress to be mirrored. A label can only be mirrored to a single mirror destination.

If the label does not exist on any ingress network ports, no packets are mirrored for that label. An error will not occur. Once the label exists on a network port, ingress mirroring commences for that label.

Values—
0 to 1048575. The local MPLS stack may not support portions of this range.