交換機遠程二層鏡像配置

1.6.3  二層遠程端口鏡像配置舉例

1. 組網需求

·     在一個二層網絡中，Device A、Device B、Device C及Server如下圖所示連接。其中，Device A通過端口GigabitEthernet1/0/1連接市場部。

·     通過配置二層遠程端口鏡像，使Server可以監控所有進、出市場部的報文。

2. 組網圖

圖1-6 二層遠程端口鏡像配置組網圖

3. 配置步驟

(1)     配置Device A

# 創建遠程源鏡像組1。

<DeviceA> system-view

[DeviceA] mirroring-group 1 remote-source

# 創建VLAN 2作為遠程鏡像VLAN。

[DeviceA] vlan 2

# 關閉遠程鏡像VLAN的MAC地址學習功能

[DeviceA-vlan2] mac-address mac-learning disable

[DeviceA-vlan2] quit

# 配置遠程源鏡像組1的遠程鏡像VLAN為VLAN 2，源端口為GigabitEthernet1/0/1，出端口為GigabitEthernet1/0/2。

[DeviceA] mirroring-group 1 remote-probe vlan 2

[DeviceA] mirroring-group 1 mirroring-port gigabitethernet 1/0/1 both

[DeviceA] mirroring-group 1 monitor-egress gigabitethernet 1/0/2

# 配置出端口GigabitEthernet1/0/2為Trunk口，允許VLAN 2的報文通過，並在該端口上關閉生成樹協議。

[DeviceA] interface gigabitethernet 1/0/2

[DeviceA-GigabitEthernet1/0/2] port link-type trunk

[DeviceA-GigabitEthernet1/0/2] port trunk permit vlan 2

[DeviceA-GigabitEthernet1/0/2] undo stp enable

[DeviceA-GigabitEthernet1/0/2] quit

(2)     配置Device B

# 創建VLAN 2作為遠程鏡像VLAN。

<DeviceB> system-view

[DeviceB] vlan 2

# 關閉遠程鏡像VLAN的MAC地址學習功能

[DeviceB-vlan2] mac-address mac-learning disable

[DeviceB-vlan2] quit

# 配置端口GigabitEthernet1/0/1為Trunk口，並允許VLAN 2的報文通過。

[DeviceB] interface gigabitethernet 1/0/1

[DeviceB-GigabitEthernet1/0/1] port link-type trunk

[DeviceB-GigabitEthernet1/0/1] port trunk permit vlan 2

[DeviceB-GigabitEthernet1/0/1] quit

# 配置端口GigabitEthernet1/0/2為Trunk口，並允許VLAN 2的報文通過。

[DeviceB-GigabitEthernet1/0/1] quit

[DeviceB] interface gigabitethernet 1/0/2

[DeviceB-GigabitEthernet1/0/2] port link-type trunk

[DeviceB-GigabitEthernet1/0/2] port trunk permit vlan 2

[DeviceB-GigabitEthernet1/0/2] quit

(3)     配置Device C

# 配置端口GigabitEthernet1/0/1為Trunk口，並允許VLAN 2的報文通過。

<DeviceC> system-view

[DeviceC] interface gigabitethernet 1/0/1

[DeviceC-GigabitEthernet1/0/1] port link-type trunk

[DeviceC-GigabitEthernet1/0/1] port trunk permit vlan 2

[DeviceC-GigabitEthernet1/0/1] quit

# 創建遠程目的鏡像組1。

[DeviceC] mirroring-group 1 remote-destination

# 創建VLAN 2作為遠程鏡像VLAN。

[DeviceC] vlan 2

# 關閉遠程鏡像VLAN的MAC地址學習功能

[DeviceC-vlan2] mac-address mac-learning disable

[DeviceC-vlan2] quit

# 配置遠程目的鏡像組1的遠程鏡像VLAN為VLAN 2，目的端口為GigabitEthernet1/0/2，在該端口上關閉生成樹協議並將其加入VLAN 2。

[DeviceC] mirroring-group 1 remote-probe vlan 2

[DeviceC] interface gigabitethernet 1/0/2

[DeviceC-GigabitEthernet1/0/2] mirroring-group 1 monitor-port

[DeviceC-GigabitEthernet1/0/2] undo stp enable

[DeviceC-GigabitEthernet1/0/2] port access vlan 2

[DeviceC-GigabitEthernet1/0/2] quit

(4)     檢驗配置效果

配置完成後，用戶可以通過Server監控所有進、出市場部的報文。