需要镜像流量中间隔了一台交换需要怎么配置镜像

某局点用网监设备监控多台设备的流量。部分设备和网监设备不在同一个交换机上。网监设备只有一个接口，需要将远程镜像的流量和本地镜像的流量都镜像到同一个端口。

要求将两台服务器的流量和Device B的G1/0/2的流量都镜像到网监设备
 

(1)配置Device D

# 创建远程源镜像组1。

system-view

[DeviceA] mirroring-group 1 remote-source

# 创建VLAN 2作为远程镜像VLAN。

[DeviceD] vlan 2

# 关闭VLAN 2的MAC地址学习功能。

[DeviceD-vlan2] undo mac-address mac-learning enable

[DeviceD-vlan2] quit

# 配置远程源镜像组1的远程镜像VLAN为VLAN 2，源端口为GigabitEthernet1/0/1和GigabitEthernet1/0/2，反射端口为GigabitEthernet1/0/3。

[DeviceD] mirroring-group 1 remote-probe vlan 2

[DeviceD] mirroring-group 1 mirroring-port gigabitethernet 1/0/1 both

[DeviceD] mirroring-group 1 mirroring-port gigabitethernet 1/0/2 both

[DeviceD] mirroring-group 1 reflector-port gigabitethernet 1/0/3

This operation may delete all settings made on the interface. Continue? [Y/N]: y

# 配置端口GigabitEthernet1/0/3为Trunk口，并允许VLAN 2的报文通过。

[DeviceA] interface gigabitethernet 1/0/4

[DeviceA-GigabitEthernet1/0/4] port link-type trunk

[DeviceA-GigabitEthernet1/0/4] port trunk permit vlan 2

[DeviceA-GigabitEthernet1/0/4] quit

(2)配置Device C

# 创建VLAN 2作为远程镜像VLAN。

system-view

[DeviceC] vlan 2

# 关闭VLAN 2的MAC地址学习功能。

[DeviceB-vlan2] undo mac-address mac-learning enable

[DeviceB-vlan2] quit

# 配置端口GigabitEthernet1/0/1为Trunk口，并允许VLAN 2的报文通过。

[DeviceB] interface gigabitethernet 1/0/1

[DeviceB-GigabitEthernet1/0/1] port link-type trunk

[DeviceB-GigabitEthernet1/0/1] port trunk permit vlan 2

[DeviceB-GigabitEthernet1/0/1] quit

# 配置端口GigabitEthernet1/0/4为Trunk口，并允许VLAN 2的报文通过。

[DeviceB] interface gigabitethernet 1/0/2

[DeviceB-GigabitEthernet1/0/4] port link-type trunk

[DeviceB-GigabitEthernet1/0/4] port trunk permit vlan 2

[DeviceB-GigabitEthernet1/0/4] quit

(3)配置Device B

# 创建VLAN 2。

system-view

[DeviceC] vlan 2

# 关闭VLAN 2的MAC地址学习功能。

[DeviceB-vlan2] undo mac-address mac-learning enable

[DeviceB-vlan2] quit

# 配置端口GigabitEthernet1/0/3为Trunk口，并允许VLAN 2的报文通过。

[DeviceB] interface gigabitethernet 1/0/3

[DeviceB-GigabitEthernet1/0/3] port link-type trunk

[DeviceB-GigabitEthernet1/0/3] port trunk permit vlan 2

[DeviceB-GigabitEthernet1/0/3] quit

# 配置端口GigabitEthernet1/0/1为Trunk口，并允许VLAN 2和本地镜像的VLAN通过。

[DeviceB] interface gigabitethernet 1/0/1

[DeviceB-GigabitEthernet1/0/1] port link-type trunk

[DeviceB-GigabitEthernet1/0/1] port trunk permit vlan all

[DeviceB-GigabitEthernet1/0/1] quit、

# 创建本地镜像组1。

system-view

[DeviceB] mirroring-group 1 local

# 配置本地镜像组1的源端口为GigabitEthernet1/0/2，目的端口为GigabitEthernet1/0/1。

[DeviceB] mirroring-group 1 mirroring-port gigabitethernet 1/0/2 both

[DeviceB] mirroring-group 1 monitor-port gigabitethernet 1/0/1

# 在目的端口GigabitEthernet1/0/1上关闭生成树协议。

[DeviceB] interface gigabitethernet 1/0/1

[DeviceB-GigabitEthernet1/0/1] undo stp enable

[DeviceB-GigabitEthernet1/0/1] quit

（1）     远程镜像的原理是广播。源设备将源接口的流量复制一份到反射端口，反射端口将流量在反射VLAN中进行广播。所以将目的接口放通反射VLAN即可接收到广播流量。

（2）     中间设备要放通反射VLAN

（3）     目的接口要放通反射VLAN和本地镜像的 VLAN

（4）     如果网监设备必须要能接收带VLAN标签的报文，目的接口必须要允许反射VLAN和本地镜像流量的VLAN通过。