请教如何远程监控交换机端口数据流？

您好，请知：

1、可以使用二层远程端口镜像配置，以下是配置举例，请参考：

以下SW1是源、SW2是目的：

SW1：

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]sysname SW1

[SW1]vlan 10

[SW1-vlan10]quit

[SW1]int vlan 10

[SW1-Vlan-interface10]ip address 192.168.10.1 24

[SW1-Vlan-interface10]quit

[SW1]int gi 1/0/1

[SW1-GigabitEthernet1/0/1]port link-type access

[SW1-GigabitEthernet1/0/1]port access vlan 10

[SW1-GigabitEthernet1/0/1]quit

[SW1]vlan 999

[SW1-vlan999]undo mac-address mac-learning enable

[SW1-vlan999]quit

[SW1]mirroring-group 1 remote-source

[SW1]mirroring-group 1 remote-probe vlan 999

[SW1]mirroring-group 1 mirroring-port GigabitEthernet 1/0/1 both

[SW1]mirroring-group 1 monitor-egress GigabitEthernet 1/0/2

[SW1]int gi 1/0/2

[SW1-GigabitEthernet1/0/2]port link-type trunk

[SW1-GigabitEthernet1/0/2]undo port trunk permit vlan 1

[SW1-GigabitEthernet1/0/2]port trunk permit vlan 999

[SW1-GigabitEthernet1/0/2]quit

SW2：

<H3C>sys

System View: return to User View with Ctrl+Z.

[H3C]sysname SW2

[SW2]vlan 999

[SW2-vlan999]undo mac-address mac-learning enable

[SW2-vlan999]quit

[SW2]int gi 1/0/2

[SW2-GigabitEthernet1/0/2]port link-type trunk

[SW2-GigabitEthernet1/0/2]undo port trunk permit vlan 1

[SW2-GigabitEthernet1/0/2]port trunk permit vlan 999

[SW2-GigabitEthernet1/0/2]quit

[SW2]mirroring-group 1 remote-destination

[SW2]mirroring-group 1 remote-probe vlan 999

[SW2]mirroring-group 1 monitor-port GigabitEthernet 1/0/1

[SW2]int gi 1/0/1

[SW2-GigabitEthernet1/0/1]port link-type access

[SW2-GigabitEthernet1/0/1]port access vlan 999

[SW2-GigabitEthernet1/0/1]quit

查看SW1的端口镜像的显示信息：

[SW1]dis mirroring-group all

Mirroring group 1:

    Type: Remote source

    Status: Active

    Mirroring port:

        GigabitEthernet1/0/1  Both

    Monitor egress port: GigabitEthernet1/0/2

    Remote probe VLAN: 999

查看SW2的端口镜像的显示信息：

[SW2]dis mirroring-group all

Mirroring group 1:

    Type: Remote destination

    Status: Active

    Monitor port: GigabitEthernet1/0/1

    Remote probe VLAN: 999

2、如果是三层的组网，可使用三层远程端口镜像来实现。