Introduction

You can edit an existing traffic mirroring policy to modify the policy parameters (such as the mirror source, mirror destination, mirror percent, and traffic direction) based on changes in business requirements (such as changes in mirroring objects and traffic filtering conditions).

Constraints and Restrictions

• If a traffic mirroring policy is associated with a VM migration task, only the mirror percent, traffic direction, and policy status can be modified, and the mirror source and mirror destination cannot be changed.

• If the mirror destination is an edge-connected interface, ensure that the new VLAN has already been configured on the physical switch before changing the VLAN ID. Otherwise, mirrored traffic will be interrupted.

• If a traffic mirroring policy is associated with an assigned elastic IP address, do not change the edge corresponding to the mirror source. Otherwise, internet access issues will occur.

• If the mirror source and mirror destination of a traffic mirroring policy belong to different resource pools, the resource pools cannot be modified before their associations with the mirror source and mirror destination are deleted.

Prerequisites

• At least one traffic mirroring policy has been created, and the policy status is Enabled or Disabled.

• The policy has not been deleted or marked as invalid, and both the mirror source and mirror destination are in normal status.

• To change the VLAN ID or modify edge-related settings, ensure the corresponding configuration on the physical switch has been modified accordingly.

Precautions

• If a policy is enabled, disable it before editing. Enable the policy again after modifications are complete to avoid traffic interruption.

• After the mirror source or mirror destination is changed, check the traffic forwarding status again to ensure that the destination can receive mirrored traffic.

• After the mirror percent or traffic direction is changed, update the configuration on the audit device or monitoring platform accordingly to prevent analysis deviations.

• If the policy is associated with VMs running critical services, perform the editing operation during off-peak hours to minimize business impacts.

Steps

Step 1.Log in to SCP and go to Networking > Traffic Mirroring.

Step 2.Find the target policy in the policy list and click Edit (or choose More > Edit) in the Operation column.

Step 3.In the Edit Traffic Mirroring Policy pop-up window, modify the fields as needed. (The rules are the same as those described in the previous section.)

Step 4.To modify the mirror source or mirror destination, click the corresponding field, reselect an object, and click OK.

Step 5.To modify the VLAN ID, mirror percent, or traffic direction, enter a new value or select a new option in the corresponding field.

Step 6.After the modification is complete, click OK to save the configuration. The system will automatically update the policy parameters.

Step 7.If the policy is enabled, check whether its status is normal in the policy list. If necessary, use a packet capture tool to verify that the mirrored traffic is forwarded according to the new configuration.