流统与镜像抓包相关配置

抓包

-------------------------------------------------------------------

#将聚合3聚合4口匹配acl 3091的流量，镜像到4/2/15口

#创建类，用于acl集合及抓包过滤条件

traffic classifier zb_acl

 if-match acl 3901

 if-match acl ipv6 3901

#创建抓包动作

traffic behavior zb_behavior

 mirror-to interface Ten-GigabitEthernet4/2/15

#创建抓包策略，将匹配类的规则的数据包执行上述抓包动作

qos policy zb_policy

 classifier zb_acl behavior zb_behavior

#在对应接口下执行抓包策略

interface Route-Aggregation3

 qos apply policy zb_policy inbound

 qos apply policy zb_policy outbound

#

interface Route-Aggregation4

 qos apply policy zb_policy inbound

 qos apply policy zb_policy outbound

 

 

流统

--------------------------------------------------------------------

#将聚合3聚合4口匹配acl 3091的流量进行流量统计

#创建类，用于acl集合及抓包过滤条件

traffic classifier lt_acl

 if-match acl 3901

 if-match acl ipv6 3901

#创建统计动作，以数据包为单位进行统计

traffic behavior lt_behavior

 accounting packet

#创建抓包策略，将匹配类的规则的数据包执行上述统计动作

qos policy lt_policy

 classifier lt_acl behavior lt_behavior

#在对应接口下,入方向/出方向 执行流统策略

interface Route-Aggregation3

 qos apply policy lt_policy inbound

 qos apply policy lt_policy outbound

#

interface Route-Aggregation4

 qos apply policy lt_policy inbound

 qos apply policy lt_policy outbound

#

 display qos policy interface | inc (Packets)

 

 

 

 

流统：

acl advanced  3901

 description For-20241127-liutong-OUT

rule 0 permit  icmp source 218.200.233.61 0 destination 112.33.28.61 0

acl advanced  3902

 description For-20241127-liutong-IN

rule 0 permit  icmp source 112.33.28.61 0 destination 218.200.233.61 0

#

traffic classifier OUT_classifier

 if-match acl 3901

#

traffic behavior OUT_behavior

 accounting packet

#

qos policy OUT_policy

 classifier OUT_classifier behavior OUT_behavior

#

traffic classifier IN_classifier

 if-match acl 3902

#

traffic behavior IN_behavior

 accounting packet

#

qos policy IN_policy

 classifier IN_classifier behavior IN_behavior

 

#入方向上行口&下行口

interface Route-Aggregation3

 qos apply policy IN_policy  inbound

interface Route-Aggregation11

 qos apply policy OUT_policy inbound

#出方向下行口&上行口

interface Route-Aggregation11

 qos apply policy OUT_policy inbound

interface Route-Aggregation3

 qos apply policy OUT_policy outbound

#

 display qos policy interface | inc (Packets)

 

 

 

流量统计回退：

interface Route-Aggregation3

undo qos apply policy IN_policy  inbound

interface Route-Aggregation11

undo qos apply policy OUT_policy inbound

#

interface Route-Aggregation11

undo qos apply policy OUT_policy inbound

interface Route-Aggregation3

undo qos apply policy OUT_policy outbound

#

undo qos policy IN_policy

undo traffic behavior IN_behavior

#

undo qos policy OUT_policy

undo traffic behavior OUT_behavior

#

undo traffic classifier IN_classifier

Undo traffic classifier OUT_classifier

#

udno acl advanced  3902

udno acl advanced  3901

#

display diff current-configuration startup-configuration

 

抓包回退：

 

interface Route-Aggregation3

undo qos apply policy zb_policy inbound

undo qos apply policy zb_policy outbound

#

interface Route-Aggregation4

undo qos apply policy zb_policy inbound

undo qos apply policy zb_policy outbound

#

undo qos policy zb_policy

undotraffic behavior zb_behavior

undo traffic classifier zb_acl

#

undo acl advanced 3901

undo acl ipv6  advanced 3901

#

display diff current-configuration startup-configuration