20.3.2 Verifying Policy-Based Mirroring

You can use show access-filter command to check the access list for which the destination interface list for policy-based mirroring is specified for operation.

Figure 20-2: Result of executing show access-filter command
> show access-filter Date 20XX/06/09 13:58:27 UTC Using Port:1/0/1 in-mirror Extended IP access-list:ipv4-MIRROR-A permit tcp(6) 25.11.2.0 0.0.0.255 any range 100 200 action policy-mirror-list dst-list-ipv4 matched packets : 94286 permit tcp(6) any any matched packets : 52207 >

Figure 20-2: Result of executing show access-filter command

> show access-filter
Date 20XX/06/09 13:58:27 UTC
Using Port:1/0/1 in-mirror
Extended IP access-list:ipv4-MIRROR-A
      permit tcp(6) 25.11.2.0 0.0.0.255 any range 100 200 action policy-mirror-list dst-list-ipv4
         matched packets       :     94286
      permit tcp(6) any any
         matched packets       :     52207
>

Verify that the filters for the specified interfaces show "Extended IP access-list" and the access list name (ipv4-MIRROR-A). Also, confirm that matched packets is counted by displaying "action policy-mirror-list" and the destination interface list name (dst-list-ipv4) in the access list.