大体如下,想用一台 5130做一个镜像的汇总,5130当傻瓜或者在配一个镜像组,然后安全设备的监控线接5130,然后5130在接格格网络设备镜像的目的口,这样可以接吗?
(0)
最佳答案
您好,请知:
可以使用远程端口镜像来实现,以下是参考命令:
组网说明:
本案例使用H3C HCL模拟器中的S5820交换机来模拟二层远程端口镜像的典型组网配置案例,其中SW1为源、SW2为目的,将SW1的GI1/0/1端口的数据流量镜像到SW2的GI1/0/1端口的监控设备。Remote_vlan采用vlan 999
SW1:
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname SW1
[SW1]vlan 10
[SW1-vlan10]quit
[SW1]int vlan 10
[SW1-Vlan-interface10]ip address 192.168.10.1 24
[SW1-Vlan-interface10]quit
[SW1]int gi 1/0/1
[SW1-GigabitEthernet1/0/1]port link-type access
[SW1-GigabitEthernet1/0/1]port access vlan 10
[SW1-GigabitEthernet1/0/1]quit
[SW1]vlan 999
[SW1-vlan999]undo mac-address mac-learning enable
[SW1-vlan999]quit
[SW1]mirroring-group 1 remote-source
[SW1]mirroring-group 1 remote-probe vlan 999
[SW1]mirroring-group 1 mirroring-port GigabitEthernet 1/0/1 both
[SW1]mirroring-group 1 monitor-egress GigabitEthernet 1/0/2
[SW1]int gi 1/0/2
[SW1-GigabitEthernet1/0/2]port link-type trunk
[SW1-GigabitEthernet1/0/2]undo port trunk permit vlan 1
[SW1-GigabitEthernet1/0/2]port trunk permit vlan 999
[SW1-GigabitEthernet1/0/2]quit
SW2:
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname SW2
[SW2]vlan 999
[SW2-vlan999]undo mac-address mac-learning enable
[SW2-vlan999]quit
[SW2]int gi 1/0/2
[SW2-GigabitEthernet1/0/2]port link-type trunk
[SW2-GigabitEthernet1/0/2]undo port trunk permit vlan 1
[SW2-GigabitEthernet1/0/2]port trunk permit vlan 999
[SW2-GigabitEthernet1/0/2]quit
[SW2]mirroring-group 1 remote-destination
[SW2]mirroring-group 1 remote-probe vlan 999
[SW2]mirroring-group 1 monitor-port GigabitEthernet 1/0/1
[SW2]int gi 1/0/1
[SW2-GigabitEthernet1/0/1]port link-type access
[SW2-GigabitEthernet1/0/1]port access vlan 999
[SW2-GigabitEthernet1/0/1]quit
查看SW1的端口镜像的显示信息:
[SW1]dis mirroring-group all
Mirroring group 1:
Type: Remote source
Status: Active
Mirroring port:
GigabitEthernet1/0/1 Both
Monitor egress port: GigabitEthernet1/0/2
Remote probe VLAN: 999
查看SW2的端口镜像的显示信息:
[SW2]dis mirroring-group all
Mirroring group 1:
Type: Remote destination
Status: Active
Monitor port: GigabitEthernet1/0/1
Remote probe VLAN: 999
至此,S5820二层远程端口镜像的典型组网配置案例已完成!
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
我这样接线不会环路把?
不会,镜像线不走业务