S12508G-AF R7643P06设备使用反射端口方式做镜像多出口,前期怀疑镜像资源不足,即违背了1个芯片最多四个镜像组+方向的逻辑,故进行了调整,减少镜像数量为单向3个,但是测试下来镜像组1和镜像组3依旧不生效,配置检查probe vlan关闭mac地址学习。
检查配置如下,1块板卡的镜像资源数不超过4个,资源数足够,并无异常
<hx>display mirroring-group all
Mirroring group 1:
Type: Remote source
Status: Active
Mirroring port:
Ten-GigabitEthernet1/2/0/13 Inbound
Ten-GigabitEthernet1/2/0/14 Inbound
Reflector port: Ten-GigabitEthernet1/2/0/12
Remote probe VLAN: 1601
Mirroring group 2:
Type: Remote source
Status: Active
Mirroring port:
Ten-GigabitEthernet1/2/0/30 Inbound
Ten-GigabitEthernet1/2/0/31 Inbound
Reflector port: Ten-GigabitEthernet1/2/0/29
Remote probe VLAN: 1602
Mirroring group 3:
Type: Remote source
Status: Active
Mirroring port:
Ten-GigabitEthernet2/2/0/20 Both
Reflector port: Ten-GigabitEthernet1/3/0/5
Remote probe VLAN: 1603
现网版本有个问题,远程镜像反射口所在芯片probe vlan底层的mac学习没有正常关闭,在R7645版本解决。
本地可复现:
[hx-probe]dis mirroring-group 1
Mirroring group 1:
Type: Remote source
Status: Active
Mirroring port:
Ten-GigabitEthernet1/2/0/13 Both
Ten-GigabitEthernet1/2/0/14 Both
Reflector port: Ten-GigabitEthernet1/2/0/12
Remote probe VLAN: 1601
[yhq-qzf-zww-hx-probe]bcm ch 1 sl 2 ch 0 vlan/1601
Current settings:
VRF=-3
OuterTPID=0x8100
LearnDisable=0 这里LearnDisable为1表示关闭mac学习,为0表示打开了mac学习,正常probe vlan要关闭mac学习
UnknownIp6McastToCpu=0
UnknownIp4McastToCpu=0
Ip4Disable=0
Ip6Disable=0
......
反射口在probe vlan还会学习mac,影响镜像流量转发:
[yhq-qzf-zww-hx-probe]bcm ch 1 sl 2 ch 0 l2/show/vlan=1601
mac=00:10:94:00:00:63 vlan=1601 GPORT=0x29 modid=0 port=41/xe8 SDHit Group=Learnt
mac=00:00:01:00:00:5f vlan=1601 GPORT=0x29 modid=0 port=41/xe8 SDHit Group=Learnt
mac=00:00:01:00:00:08 vlan=1601 GPORT=0x29 modid=0 port=41/xe8 SDHit Group=Learnt
mac=00:10:94:00:00:5d vlan=1601 GPORT=0x29 modid=0 port=41/xe8 SDHit Group=Learnt
mac=00:10:94:00:00:58 vlan=1601 GPORT=0x29 modid=0 port=41/xe8 SDHit Group=Learnt
mac=00:00:01:00:00:29 vlan=1601 GPORT=0x29 modid=0 port=41/xe8 SDHit Group=Learnt
检查方法:确认probe vlan下有没有正常关闭mac学习,反射口所在芯片查询probe vlan:bcm ch 1 sl 2 ch 0 vlan/1601,确认是否打开了mac学习
恢复方法:反射口所在芯片,找个口放通probe vlan,在probe vlan下打开mac学习再重新关闭mac学习,再将前面口放通的probe vlan去掉。