ÖÐÎÄ
202697¹ú¼Ê¹ÙÍø
Óû§ÌåÑéµ÷ÑÐ
ÂíÉϼÓÈë
Äú¶©ÔĵIJúÆ·ÓиüУ¬Çëʵʱ²éÔÄ
Éó²éÏêÇé
ÖÐÎÄ
Äú¶©ÔĵIJúÆ·ÓиüУ¬Çëʵʱ²éÔÄ
Éó²éÏêÇé
Ðû²¼Ê±¼ä£º2023-03-24
µã»÷Á¿£º3691Ëæ×ÅÍøÂçµÄÉú³¤£¬¶ÔÍøÂçµÄ¸ß¿ÉÓÃÐÔµÄÒªÇóÈÕÒæÌá¸ß¡£µ±ÍøÂç·ºÆðÒ쳣ʱ£¬ÐèÒª¶ÔÍøÂç½Úµã»òÕß×°±¸µÄ¶Ë¿Ú¾ÙÐÐÁËÊý¾ÝÁ÷Á¿ÆÊÎöÒÔ±ãÍøÂçÄܹ»¿ìËÙ»Ö¸´Õý³££¬µ«Í¬Ê±ÓÖÒªÇó²»Ó°Ïì×°±¸Êý¾ÝÁ÷Á¿µÄÕý³£×ª·¢¡£
¾µÏñÊǽ«Ö¸¶¨¶Ë¿ÚµÄ±¨Îĸ´ÖƵ½ÁíÒ»¸öÅþÁ¬ÓÐÍøÂç¼à²â×°±¸µÄ¶Ë¿ÚµÄ¹¦Ð§£¬ÊµÏÖÁ˶ԿÉÒɵÄÍøÂç½Úµã»òÕß×°±¸¶Ë¿Ú¾ÙÐÐÊý¾ÝÁ÷Á¿ÆÊÎö£¬Í¬Ê±ÓÖ²»Ó°Ïì±»¼à¿Ø×°±¸µÄÊý¾Ýת·¢¡£¾µÏñ¹¦Ð§Ö÷ÒªÓ¦ÓÃÔÚÍøÂç¼à¿ØºÍ¹ÊÕÏÅŲéÁ½ÖÖ³¡¾°ÖУ¬ÊµÏÖÁ˼à¿ØÍøÂçÐÅÏ¢Ç徲ϢÕù¾öÍøÂç¹ÊÕϵÄÄ¿µÄ¡£
Ô´¶Ë¿ÚÒ²³ÆΪ±»¼à¿Ø¿Ú£¬Ô´¶Ë¿ÚÉϵÄÊý¾ÝÁ÷»á±»¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú£¬ÓÃÓÚÍøÂçÆÊÎö»ò¹ÊÕÏɨ³ý¡£
Ä¿µÄ¶Ë¿ÚÒ²³ÆΪΪ¼à¿Ø¿Ú£¬Óë¼à¿Ø×°±¸ÏàÅþÁ¬µÄ¶Ë¿Ú£¬½«ÎüÊÕµ½µÄÔ´¶Ë¿Ú±¨ÎÄת·¢µ½¼à¿Ø×°±¸¡£
»á»°ÊÇÒ»¸öÂß¼ÉϵĿ´·¨£¬Ò»¸öÍêÕûµÄ»á»°ÓÉÔ´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú×é³É¡£
SPAN£¨Switch Port Analyzer£¬½»Á÷ʽ¶Ë¿ÚÆÊÎöÆ÷£©Ò²³ÆΪÍâµØ¶Ë¿Ú¾µÏñ»òÕßÍâµØ¾µÏñ¡£Ö¸Í³Ò»¸ö¾µÏñ»á»°µÄÔ´¶Ë¿ÚÓëÄ¿µÄ¶Ë¿ÚÔÚͳһ̨Éè±¹ØÁ¬Ä¾µÏñ¡£
RSPAN£¨Remote Switch Port Analyzer£¬Ô¶³Ì¶Ë¿Ú¾µÏñ£©ÊÇSPANµÄÀ©Õ¹£¬Ô´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú´¦ÓÚ²î±ðµÄ×°±¸¡£
ERSPAN£¨Encapsulated Remote Switch Port Analyzer£¬·â×°Ô¶³Ì¶Ë¿Ú¾µÏñ£©ÊÇRSPANµÄÀ©Õ¹£¬ÊµÏÖÁË¿çÔ½½»Á÷»ò·ÓÉÍøÂçµÄ¶ą̀װ±¸µÄÔ¶³Ì¼à¿ØÒªÁì¡£
Ô¶³Ì¾µÏñVLANÊÇÒ»ÖÖÌØÊâµÄVLAN£¬¸ÃVLANÖ»´«Êä¾µÏñ±¨ÎÄ£¬²î³ØÕý³£µÄÓªÒµÊý¾Ý¾ÙÐд«Êä¡£
Ô´×°±¸ÉϽ«¾µÏñ±¨ÎÄ·¢Ë͵½ÖÐÐÄ×°±¸»òÕßÄ¿µÄ×°±¸µÄ¶Ë¿Ú³ÆΪÊä³ö¶Ë¿Ú¡£
Ô´×°±¸ÊÇÔ¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸Ô´¶Ë¿ÚËùÔÚµÄ×°±¸£¬ÈÏÕ潫Դ¶Ë¿ÚµÄ±¨Îĸ´ÖÆÒ»·Ýµ½Ô´×°±¸µÄÊä³ö¶Ë¿Ú£¬´«Êä¸øÖÐÐÄ×°±¸»òÄ¿µÄ×°±¸¡£
Ä¿µÄ×°±¸Ô¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸Ô¶³Ì¾µÏñÄ¿µÄ¶Ë¿ÚËùÔÚµÄ×°±¸£¬ÈÏÕ潫ÖÐÐÄ×°±¸»òÕßÔ´×°±¸ÎüÊÕµ½µÄ¾µÏñ±¨ÎÄת·¢¸ø¼à¿Ø×°±¸¡£
ÖÐÐÄ×°±¸ÊÇÔ¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸´¦ÓÚÔ´×°±¸ºÍÄ¿µÄ×°±¸Ö®¼äµÄ×°±¸£¬ÈÏÕ潫¾µÏñ±¨ÎÄ´«Êä¸øÏÂÒ»ÆäÖÐÐÄ×°±¸»òÄ¿µÄ×°±¸¡£ÈôÊÇÔ´×°±¸ÓëÄ¿µÄ×°±¸Ö±½ÓÏàÁ¬£¬Ôò²»±£´æÖÐÐÄ×°±¸¡£
¾µÏñÊý¾ÝÁ÷Ö¸±»¾µÏñµÄÊý¾Ý±¨ÎÄ¡£¾µÏñ»á»°µÄÊý¾ÝÁ÷°üÀ¨ÒÔÏÂÈýÖÖÆ«ÏòµÄÊý¾ÝÁ÷£º
l ÊäÈëÊý¾ÝÁ÷
ËùÓÐÔ´¶Ë¿ÚÉÏÎüÊÕµ½µÄ±¨ÎĶ¼½«±»¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿ÉÒÔ¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊäÈ뱨ÎÄ¡£
l Êä³öÊý¾ÝÁ÷
ËùÓдÓÔ´¶Ë¿Ú·¢Ë͵ı¨ÎĶ¼½«¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿ÉÒÔ¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊä³ö±¨ÎÄ¡£
l Ë«ÏòÊý¾ÝÁ÷
ͬʱ°üÀ¨ÊäÈëÊý¾ÝÁ÷ºÍÊä³öÊý¾ÝÁ÷¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿É¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊäÈëºÍÊä³öÆ«ÏòµÄÊý¾ÝÁ÷¡£
Èçͼ1-6Ëùʾ£¬Í¨¹ýÊʵ±µÄÉèÖã¬ÍøÂçÆÊÎöÒÇÄܹ»¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Ãü¾ÝÁ÷£¨ÈçÀ´×ÔPC1ºÍPC2µÄÊý¾ÝÁ÷£©¡£
l ÉèÖÃDeviceAµÄGigabitEthernet 0/1ºÍGigabitEthernet 0/2ÊôÓÚVLAN 1¡£½¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.10/24¡£
l ÉèÖÃDeviceBµÄGigabitEthernet 0/1ÊôÓÚVLAN 1¡£½¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.20/24¡£
l ÉèÖÃPC1¡¢PC2µÄµØÖ·»®·ÖΪ10.10.10.1/24ºÍ10.10.10.2/24¡£
l ÉèÖÃDeviceAµÄÍâµØ¾µÏñ£¬Ö¸¶¨¶Ë¿ÚGigabitEthernet 0/1ºÍGigabitEthernet 0/2»®·ÖΪ¾µÏñµÄÔ´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú¡£¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Ãü¾ÝÁ÷¡£
# ÉèÖÃDeviceAµÄGigabitEthernet 0/1ºÍGigabitEthernet 0/2ÊôÓÚVLAN 1¡£
DeviceA> enable
DeviceA# configure terminal
DeviceA(config)# vlan 1
DeviceA(config-vlan)# exit
# ÔÚDeviceAÉϽ¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.10/24¡£
DeviceA(config)# interface vlan 1
DeviceA(config-if-VLAN 1)# ip address 10.10.10.10 255.255.255.0
DeviceA(config-if-VLAN 1)# exit
# ÉèÖÃDeviceBµÄGigabitEthernet 0/1ÊôÓÚVLAN 1¡£
DeviceB# configure
DeviceB(config)# vlan 1
DeviceB(config-vlan)# exit
# ÔÚDeviceBÉϽ¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.20/24¡£
DeviceB (config)# interface vlan 1
DeviceB(config-if-VLAN 1)# ip address 10.10.10.20 255.255.255.0
DeviceB(config-if-VLAN 1)# exit
# ÔÚDeviceAÉÏÉèÖÃACL£¬Æ¥ÅäÔ´µØַΪ10.10.10.20µÄ±¨ÎÄ¡£
DeviceA(config)# access-list 100 permit ip host 10.10.10.20 any
# ÔÚDeviceAÉÏÉèÖö˿ÚGigabitEthernet 0/1Ϊ¾µÏñµÄÔ´¶Ë¿Ú£¬¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Ãü¾ÝÁ÷¡£
DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 tx
DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 rx acl 100
# ÔÚDeviceAÉÏÉèÖÃGigabitEthernet 0/2Ϊ¾µÏñµÄÄ¿µÄ¶Ë¿Ú¡£
DeviceA(config)# monitor session 1 destination interface gigabitethernet 0/2
# ͨ¹ýshow monitorÏÂÁîÉó²é¾µÏñÊÇ·ñ׼ȷÉèÖá£
DeviceA# show monitor
sess-num: 1
span-type: LOCAL_SPAN
src-intf:
¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type TX Only
src-intf:
¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type RX Only
rx acl id 100
dest-intf:
¡¡GigabitEthernet 0/2
l DeviceAµÄÉèÖÃÎļþ
hostname DeviceA
!
ip access-list extended 100
10 permit ip host 10.10.10.20 any
!
interface VLAN 1
ip address 10.10.10.10 255.255.255.0
!
monitor session 1 destination interface GigabitEthernet 0/2
monitor session 1 source interface GigabitEthernet 0/1 tx
monitor session 1 source interface GigabitEthernet 0/1 rx acl 100
!
end
l DeviceBµÄÉèÖÃÎļþ
hostname DeviceB
!
interface VLAN 1
ip address 10.10.10.20 255.255.255.0
!
end
ÖÒÑÔ
µ±°²ÅÅÒ»¶Ô¶à¶Ë¿Ú¾µÏñʱ£¬±ØÐèʹÓÃswitchport trunk allowed vlan remove vlan-listÏÂÁî²Ã¼ôµô¸÷¾µÏñ×°±¸ÉÏtrunkÀàÐ͵ĽӿÚÖй㲥µÄVLAN£¬²»È»trunk½Ó¿Ú¿ÉÄܻᱻ¹ã²¥µÄÁ÷Á¿Õ¼Âúµ¼ÖÂÓªÒµÖÐÖ¹¡£
Èçͼ1-7Ëùʾ£¬ÍøÂçÆÊÎöÒÇ¿ÉÒÔͨ¹ýÔ¶³Ì¾µÏñ¹¦Ð§£¬ÊµÏÖÔÚÄ¿µÄ×°±¸DeviceBºÍDeviceCÉϼà¿ØÔ´×°±¸DeviceAÉϵÄË«ÏòÊý¾ÝÁ÷¡£ÇÒ×°±¸Ö®¼ä¾ùÄÜÕý³£½»Á÷Êý¾Ý¡£
ͼ1-7 »ùÓÚRSPANʵÏÖµÄÒ»¶Ô¶à¾µÏñ¹¦Ð§Íøͼ
l ÉèÖÃDeviceAΪԴװ±¸£¬ÉèÖÃÔ¶³Ì¾µÏñVLAN£¬ÉèÖö˿ÚGigabitEthernet 0/1ΪԴ¶Ë¿Ú£¬ÓëÄ¿µÄ×°±¸ÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/3ºÍGigabitEthernet 0/4ΪÊä³ö¶Ë¿Ú£¬ÉèÖÃGigabitEthernet 0/2½Ó¿ÚΪMAC»Ø»·¿Ú£¬ÓÃÓÚʵÏÖÒ»¶Ô¶à¾µÏñµÄ“·´É䔹¦Ð§¡£ÉèÖÃÊä³ö¶Ë¿Ú¿É½»Á÷¹¦Ð§¡£
l DeviceBºÍDeviceCÉèÖÃΪĿµÄ×°±¸£¬ÉèÖÃÔ¶³Ì¾µÏñVLAN£¬ÓëÔ´×°±¸ÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/1×÷ΪԴ¶Ë¿Ú£¬ÉèÖÃTrunk¶Ë¿Ú£¬ÓëÍøÂçÆÊÎöÒÇÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/2ÉèÖÃΪ¾µÏñÄ¿µÄ¶Ë¿Ú£¬²¢ÉèÖþµÏñÄ¿µÄ¶Ë¿Ú¿É½»Á÷¹¦Ð§¡£
# ÉèÖÃDeviceAΪԴװ±¸¡£
(1) ÉèÖÃÔ¶³ÌVLAN¡£
DeviceA> enable
DeviceA# configure terminal
DeviceA(config)# vlan 7
DeviceA(config-vlan)# remote-span
DeviceA(config-vlan)# exit
(2) ÉèÖÃÔ´¶Ë¿Ú¡£
DeviceA(config)# monitor session 1 remote-source
DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 both
(3) ÉèÖÃÊä³ö¶Ë¿Ú¡£
DeviceA(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch
(4) ÉèÖûػ·¿Ú¡£
DeviceA(config)# interface gigabitethernet 0/2
DeviceA(config-if)# mac-loopback
DeviceA(config-if)# switchport access vlan 7
DeviceA(config-if)# exit
DeviceA(config)# interface range gigabitethernet 0/3-4
DeviceA(config-if-range)# switchport mode trunk
# ÉèÖÃDeviceBΪĿµÄ×°±¸¡£
(1) ÉèÖÃÔ¶³ÌVLAN¡£
DeviceB> enable
DeviceB# configure
DeviceB(config)# vlan 7
DeviceB(config-vlan)# remote-span
DeviceB(config-vlan)# exit
(2) ÉèÖÃÄ¿µÄ¶Ë¿Ú¡£
DeviceB(config)# monitor session 1 remote-destination
DeviceB(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch
DeviceB(config)# interface gigabitethernet 0/1
DeviceB(config-if)# switchport mode trunk
# ÉèÖÃDeviceCΪĿµÄ×°±¸¡£
(1) ÉèÖÃÔ¶³ÌVLAN¡£
DeviceC> enable
DeviceC# configure
DeviceC(config)# vlan 7
DeviceC(config-vlan)# remote-span
DeviceC(config-vlan)# exit
(2) ÉèÖÃÄ¿µÄ¶Ë¿Ú¡£
DeviceC(config)# monitor session 1 remote-destination
DeviceC(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch
DeviceC(config)# interface gigabitethernet 0/1
DeviceC(config-if)# switchport mode trunk
# ÔÚDeviceAÉÏͨ¹ýshow monitorÏÂÁîÉó²é¾µÏñÔ´×°±¸ÉèÖÃЧ¹û¡£
DeviceA# show monitor
sess-num: 1
span-type: SOURCE_SPAN
src-intf:
GigabitEthernet 0/1¡¡¡¡¡¡frame-type Both
dest-intf:
GigabitEthernet¡¡0/2
Remote vlan 7
mtp_switch on
# ÔÚDeviceBºÍDeviceCÖÐͨ¹ýshow monitorÏÂÁîÉó²é¾µÏñÄ¿µÄ×°±¸ÉèÖÃЧ¹û¡£ÒÔDeviceBΪÀý˵Ã÷¡£
DeviceB# show monitor
sess-num: 1
span-type: DEST_SPAN
dest-intf:
GigabitEthernet¡¡0/2
Remote vlan 7
mtp_switch on
l DeviceAµÄÉèÖÃÎļþ
hostname DeviceA
!
vlan 7
!
remote-span
!
interface GigabitEthernet 0/2
mac-loopback
switchport access vlan 7
!
interface GigabitEthernet 0/3
switchport mode trunk
interface GigabitEthernet 0/4
switchport mode trunk
!
monitor session 1 remote-source
monitor session 1 source interface GigabitEthernet 0/1 both
monitor session 1 destination remote vlan 7 interface GigabitEthernet0/2 switch
!
end
l DeviceBµÄÉèÖÃÎļþ
hostname DeviceB
!
vlan 7
remote-span
!
interface GigabitEthernet 0/1
switchport mode trunk
!
monitor session 1 remote-destination
monitor session 1 destination remote vlan 7 interface GigabitEthernet0/2 switch
!
end
l DeviceCµÄÉèÖÃÎļþ
hostname Device
!
vlan 7
remote-span
!
interface GigabitEthernet 0/1
switchport mode trunk
!
monitor session 1 remote-destination
monitor session 1 destination remote vlan 7 interface GigabitEthernet 0/2 switch
!
end
l Ô´×°±¸¡¢ÖÐÐÄ×°±¸¡¢Ä¿µÄ×°±¸¾ùÒªÉèÖÃÔ¶³ÌVLANÇÒVID±ØÐèÒ»Ö¡£
l ´ø¿í´óµÄ¶Ë¿Ú±»¾µÏñµ½´ø¿íСµÄ¶Ë¿Ú¿ÉÄÜ»áÔì³É¶ª°ü¡£
Èçͼ1-8ÖÐËùʾ¡£Íø¹ÜÏ£Íûͨ¹ýÍøÂçÆÊÎöÒǶÔDeviceAºÍDeviceCµÄÁ÷Á¿¾ÙÐмà¿Ø¡£ÆäÖйØÓÚDeviceA£¬¼à¿ØË«ÏòÊý¾ÝÁ÷£»¹ØÓÚDeviceC£¬½ö¼à¿Ø²¿·Ö·¢Ë͵½DeviceµÄ±¨ÎÄ¡£ÎªÁ˺ÏÀíʹÓÃ×ÊÔ´£¬¶Ô¼à¿Ø±¨ÎľÙÐвÉÑù£¬²ÉÑùÂÊΪ1000¡£
l ÉèÖø÷×°±¸Ö®¼äÈý²ã·ÓÉ¿É´ï¡£
l ÉèÖÃDeviceBΪԴװ±¸¡£GigabitEthernet 0/1£¬GigabitEthernet 0/2¾ùΪԴ¶Ë¿Ú£¬¼à¿ØGigabitEthernet 0/1µÄË«ÏòÊý¾Ý±¨ÎÄ£¬¹ØÓÚGigabitEthernet 0/2µÄ±¨ÎÄ£¬½ö¾µÏñÄ¿µÄIPΪ2.1.1.1µÄ±¨ÎÄ£¬GigabitEthernet 0/3Ϊ¾µÏñ±¨Îijö¿Ú¡£
l ÉèÖþµÏñ±¨ÎĵIJÉÑùÂÊΪ1000¡£
# ÉèÖÃDeviceBµÄµØÖ·¡£
DeviceB> enable
DeviceB# configure terminal
DeviceB(config)# interface gigabitethernet 0/1
DeviceB(config-if-GigabitEthernet 0/1)# ip address 1.1.1.1 255.255.255.0
DeviceB(config-if-GigabitEthernet 0/1)# exit
DeviceB(config)# interface gigabitethernet 0/2
DeviceB(config-if-GigabitEthernet 0/1)# ip address 2.1.1.1 255.255.255.0
DeviceB(config-if-GigabitEthernet 0/1)# exit
DeviceB(config)# interface gigabitethernet 0/3
DeviceB(config-if-GigabitEthernet 0/1)# ip address 13.1.1.1 255.255.255.0
DeviceB(config-if-GigabitEthernet 0/1)# exit
# ÉèÖÃDeviceAµÄµØÖ·¡£
DeviceA> enable
DeviceA# configure terminal
DeviceA(config)# interface gigabitethernet 0/1
DeviceA(config-if-GigabitEthernet 0/1)# ip address 1.1.1.2 255.255.255.0
DeviceA(config-if-GigabitEthernet 0/1)# exit
# ÉèÖÃDeviceCµØÖ·¡£
DeviceC> enable
DeviceC# configure terminal
DeviceC(config)# interface gigabitethernet 0/1
DeviceC(config-if-GigabitEthernet 0/1)# ip address 2.1.1.2 255.255.255.0
DeviceC(config-if-GigabitEthernet 0/1)# exit
# ÔÚDeviceBÉÏÉèÖÃACL¡£
DeviceB(config)#access-list 1 permit host 1.1.1.1
# ½¨ÉèERSPAN Session 1£¬ÉèÖÃΪԴװ±¸£¬²¢ÉèÖö˿ÚGigabitEthernet 0/1ΪԴ¶Ë¿Ú£¬¾µÏñË«ÏòÊý¾ÝÁ÷£¬¶Ë¿ÚGigabitEthernet 0/2ҲΪԴ¶Ë¿Ú£¬½ö¾ÙÐÐÄ¿µÄµØַΪ1.1.1.1µÄ±¨ÎÄ¡£
DeviceB(config)# monitor session 1 erspan-source
DeviceB(config-mon-erspan-src)# source interface gigabitethernet 0/1 both
DeviceB(config-mon-erspan-src)# source interface gigabitethernet 0/2 rx acl acl1
DeviceB(config-mon-erspan-src)# origin ip address
DeviceB(config-mon-erspan-src)# destination ip address 3.1.1.2
# ¿ªÆô¾µÏñ±¨ÎĽÓÄɹ¦Ð§²¢ÉèÖòÉÑùÂÊΪ1000¡£
DeviceB(config-mon-erspan-src)# sample enable
DeviceB(config-mon-erspan-src)# sample rate 1000
# ÑéÖ¤DeviceBÓëDeviceAÖ®¼äÈý²ã¿Éͨ¡£
DeviceB# ping 1.1.1.2
Sending 5, 100-byte ICMP Echoes to 1.1.1.2, timeout is 2 seconds:
¡¡< press Ctrl+C to break >
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.
# ÑéÖ¤DeviceBÓëDeviceCÖ®¼äÈý²ã¿Éͨ¡£
DeviceB# ping 2.1.1.2
Sending 5, 100-byte ICMP Echoes to 2.1.1.2, timeout is 2 seconds:
¡¡< press Ctrl+C to break >
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.
# ÑéÖ¤DeviceBÓëÍøÂçÆÊÎöÒÇÖ®¼äÈý²ã¿Éͨ¡£
DeviceB# ping 3.1.1.2
Sending 5, 100-byte ICMP Echoes to 3.1.1.2, timeout is 2 seconds:
¡¡< press Ctrl+C to break >
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.
# ͨ¹ýshow access-listsÏÂÁîÉó²éACLÉèÖÃÀֳɡ£
DeviceB# show access-lists
ip access-list standard 1
10 permit host 1.1.1.1
# ͨ¹ýshow monitorÏÂÁîÉó²éÉèÖÃЧ¹û£¬ERSPAN»á»°´¦ÓÚActive״̬¡£
DeviceB# show monitor
sess-num: 1
span-type: ERSPAN_SOURCE
src-intf:
¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type: Both¡¡¡¡¡¡¡¡TX status: Active¡¡ RX status: Active¡¡
src-intf:
¡¡GigabitEthernet 0/2¡¡¡¡¡¡¡¡ frame-type: RX Only¡¡¡¡ Rx acl id: 1¡¡¡¡¡¡
status: Active
original ip address: 2.1.1.2
destination ip address: 3.1.1.2
ip ttl: 64
ip dscp: 0
sample rate: 1000
vrf: default
l DeviceAµÄÉèÖÃÎļþ
hostname DeviceA
!
interface GigabitEthernet 0/1
ip address 1.1.1.2 255.255.255.0
!
end
l DeviceCµÄÉèÖÃÎļþ
hostname DeviceC
!
interface GigabitEthernet 0/1
ip address 2.1.1.2 255.255.255.0
!
end
l DeviceBµÄÉèÖÃÎļþ
hostname DeviceB
!
ip access-list standard 1
10 permit host 1.1.1.1
!
interface GigabitEthernet 0/1
ip address 1.1.1.1 255.255.255.0
!
interface GigabitEthernet 0/2
ip address 2.1.1.1 255.255.255.0
!
interface GigabitEthernet 0/3
ip address 3.1.1.1 255.255.255.0
!
monitor session 1 erspan-source
source interface gigabitEthernet 0/1 both
source interface gigabitEthernet 0/2 rx acl acl1
origin ip address 10.1.1.2
destination ip address 3.1.1.2
sample enable
sample rate 1000
!
end
l ÉèÖÃERSPAN¾µÏñµÄ»á»°IDÒѾ±»ÉèÖÃÁËRSPAN»òLOCAL SPAN¡£
l ´ÓÔ´×°±¸µ½Ä¿µÄ×°±¸µÄÈý²ã·ÓÉÎÞ·¨»¥Í¨¡£
ÎĵµÆÀ¼Û
