交换机A和交换机B相连,A做镜像配置把流量镜像到B,然后再在B上做一次镜像,相当于在2台交换机各做1次本地镜像,把流量接力过来,这样是否可行?交换机B上的监测设备能否监测到从交换机A过来的流量?
(0)
最佳答案
建议使用跨设备的远程端口镜像。
以下是配置案例:
组网说明:
本案例使用H3C HCL模拟器中的S5820交换机来模拟二层远程端口镜像的典型组网配置案例,其中SW1为源、SW2为目的,将SW1的GI1/0/1端口的数据流量镜像到SW2的GI1/0/1端口的监控设备。Remote_vlan采用vlan 999
SW1:
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname SW1
[SW1]vlan 10
[SW1-vlan10]quit
[SW1]int vlan 10
[SW1-Vlan-interface10]ip address 192.168.10.1 24
[SW1-Vlan-interface10]quit
[SW1]int gi 1/0/1
[SW1-GigabitEthernet1/0/1]port link-type access
[SW1-GigabitEthernet1/0/1]port access vlan 10
[SW1-GigabitEthernet1/0/1]quit
[SW1]vlan 999
[SW1-vlan999]undo mac-address mac-learning enable
[SW1-vlan999]quit
[SW1]mirroring-group 1 remote-source
[SW1]mirroring-group 1 remote-probe vlan 999
[SW1]mirroring-group 1 mirroring-port GigabitEthernet 1/0/1 both
[SW1]mirroring-group 1 monitor-egress GigabitEthernet 1/0/2
[SW1]int gi 1/0/2
[SW1-GigabitEthernet1/0/2]port link-type trunk
[SW1-GigabitEthernet1/0/2]undo port trunk permit vlan 1
[SW1-GigabitEthernet1/0/2]port trunk permit vlan 999
[SW1-GigabitEthernet1/0/2]quit
SW2:
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname SW2
[SW2]vlan 999
[SW2-vlan999]undo mac-address mac-learning enable
[SW2-vlan999]quit
[SW2]int gi 1/0/2
[SW2-GigabitEthernet1/0/2]port link-type trunk
[SW2-GigabitEthernet1/0/2]undo port trunk permit vlan 1
[SW2-GigabitEthernet1/0/2]port trunk permit vlan 999
[SW2-GigabitEthernet1/0/2]quit
[SW2]mirroring-group 1 remote-destination
[SW2]mirroring-group 1 remote-probe vlan 999
[SW2]mirroring-group 1 monitor-port GigabitEthernet 1/0/1
[SW2]int gi 1/0/1
[SW2-GigabitEthernet1/0/1]port link-type access
[SW2-GigabitEthernet1/0/1]port access vlan 999
[SW2-GigabitEthernet1/0/1]quit
查看SW1的端口镜像的显示信息:
[SW1]dis mirroring-group all
Mirroring group 1:
Type: Remote source
Status: Active
Mirroring port:
GigabitEthernet1/0/1 Both
Monitor egress port: GigabitEthernet1/0/2
Remote probe VLAN: 999
查看SW2的端口镜像的显示信息:
[SW2]dis mirroring-group all
Mirroring group 1:
Type: Remote destination
Status: Active
Monitor port: GigabitEthernet1/0/1
Remote probe VLAN: 999
至此,S5820二层远程端口镜像的典型组网配置案例已完成!
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论