端口镜像

组网说明：

本案例使用H3C HCL模拟器中的S5820交换机来模拟二层远程端口镜像的典型组网配置案例，其中SW1为源、SW2为目的，将SW1的GI1/0/1端口的数据流量镜像到SW2的GI1/0/1端口的监控设备。Remote_vlan采用vlan 999

SW1：

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]sysname SW1

[SW1]vlan 10

[SW1-vlan10]quit

[SW1]int vlan 10

[SW1-Vlan-interface10]ip address 192.168.10.1 24

[SW1-Vlan-interface10]quit

[SW1]int gi 1/0/1

[SW1-GigabitEthernet1/0/1]port link-type access

[SW1-GigabitEthernet1/0/1]port access vlan 10

[SW1-GigabitEthernet1/0/1]quit

[SW1]vlan 999

[SW1-vlan999]undo mac-address mac-learning enable

[SW1-vlan999]quit

[SW1]mirroring-group 1 remote-source

[SW1]mirroring-group 1 remote-probe vlan 999

[SW1]mirroring-group 1 mirroring-port GigabitEthernet 1/0/1 both

[SW1]mirroring-group 1 monitor-egress GigabitEthernet 1/0/2

[SW1]int gi 1/0/2

[SW1-GigabitEthernet1/0/2]port link-type trunk

[SW1-GigabitEthernet1/0/2]undo port trunk permit vlan 1

[SW1-GigabitEthernet1/0/2]port trunk permit vlan 999

[SW1-GigabitEthernet1/0/2]quit

SW2：

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]sysname SW2

[SW2]vlan 999

[SW2-vlan999]undo mac-address mac-learning enable

[SW2-vlan999]quit

[SW2]int gi 1/0/2

[SW2-GigabitEthernet1/0/2]port link-type trunk

[SW2-GigabitEthernet1/0/2]undo port trunk permit vlan 1

[SW2-GigabitEthernet1/0/2]port trunk permit vlan 999

[SW2-GigabitEthernet1/0/2]quit

[SW2]mirroring-group 1 remote-destination

[SW2]mirroring-group 1 remote-probe vlan 999

[SW2]mirroring-group 1 monitor-port GigabitEthernet 1/0/1

[SW2]int gi 1/0/1

[SW2-GigabitEthernet1/0/1]port link-type access

[SW2-GigabitEthernet1/0/1]port access vlan 999

[SW2-GigabitEthernet1/0/1]quit

查看SW1的端口镜像的显示信息：

[SW1]dis mirroring-group all

Mirroring group 1:

    Type: Remote source

    Status: Active

    Mirroring port:

        GigabitEthernet1/0/1  Both

    Monitor egress port: GigabitEthernet1/0/2

    Remote probe VLAN: 999

查看SW2的端口镜像的显示信息：

[SW2]dis mirroring-group all

Mirroring group 1:

    Type: Remote destination

    Status: Active

    Monitor port: GigabitEthernet1/0/1

    Remote probe VLAN: 999