Troubleshooting traffic mirroring

Cause
If mirrored traffic does not reach the configured remote destination (endpoint) switch or remote exit port, check the following configurations:
  • In a remote mirroring session, the mirror remote ip command parameters configured on the source switch for source IP address, source UDP port, and destination IP address must be identical to the same parameters configured with the mirror endpoint ip command on the remote destination switch.

  • The configured remote exit port must not be a member of a trunk or mesh.

  • If the destination for mirrored traffic is on a different VLAN than the source, routing must be correctly configured along the path from the source to the destination.

  • On the remote destination (endpoint) switch, the IP addresses of the remote exit port and the switch can belong to different VLANs.

  • All links on the path from the source switch to the destination switch must be active.

CAUTION:

A mirroring exit port should be connected only to a network analyzer, IDS, or other network edge device that has no connection to other network resources. Configuring a mirroring exit port connection to a network can result in serious network performance problems, and is strongly discouraged by Switch Networking.