·¢²¼Ê±¼ä£º2023-03-24
µã»÷Á¿£º1706Ëæ×ÅÍøÂçµÄ·¢Õ¹£¬¶ÔÍøÂçµÄ¸ß¿ÉÓÃÐÔµÄÒªÇóÈÕÒæÌá¸ß¡£µ±ÍøÂç³öÏÖÒ쳣ʱ£¬ÐèÒª¶ÔÍøÂç½Úµã»òÕßÉ豸µÄ¶Ë¿Ú½øÐÐÁËÊý¾ÝÁ÷Á¿·ÖÎöÒÔ±ãÍøÂçÄܹ»¿ìËÙ»Ö¸´Õý³££¬µ«Í¬Ê±ÓÖÒªÇó²»Ó°ÏìÉ豸Êý¾ÝÁ÷Á¿µÄÕý³£×ª·¢¡£
¾µÏñÊǽ«Ö¸¶¨¶Ë¿ÚµÄ±¨Îĸ´ÖƵ½ÁíÒ»¸öÁ¬½ÓÓÐÍøÂç¼à²âÉ豸µÄ¶Ë¿ÚµÄ¹¦ÄÜ£¬ÊµÏÖÁ˶ԿÉÒɵÄÍøÂç½Úµã»òÕßÉ豸¶Ë¿Ú½øÐÐÊý¾ÝÁ÷Á¿·ÖÎö£¬Í¬Ê±ÓÖ²»Ó°Ïì±»¼à¿ØÉ豸µÄÊý¾Ýת·¢¡£¾µÏñ¹¦ÄÜÖ÷ÒªÓ¦ÓÃÔÚÍøÂç¼à¿ØºÍ¹ÊÕÏÅŲéÁ½ÖÖ³¡¾°ÖУ¬ÊµÏÖÁ˼à¿ØÍøÂçÐÅÏ¢°²È«ºÍ½â¾öÍøÂç¹ÊÕϵÄÄ¿µÄ¡£
Ô´¶Ë¿ÚÒ²³ÆΪ±»¼à¿Ø¿Ú£¬Ô´¶Ë¿ÚÉϵÄÊý¾ÝÁ÷»á±»¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú£¬ÓÃÓÚÍøÂç·ÖÎö»ò¹ÊÕÏÅųý¡£
Ä¿µÄ¶Ë¿ÚÒ²³ÆΪΪ¼à¿Ø¿Ú£¬Óë¼à¿ØÉ豸ÏàÁ¬½ÓµÄ¶Ë¿Ú£¬½«½ÓÊÕµ½µÄÔ´¶Ë¿Ú±¨ÎÄת·¢µ½¼à¿ØÉ豸¡£
»á»°ÊÇÒ»¸öÂß¼ÉϵĸÅÄһ¸öÍêÕûµÄ»á»°ÓÉÔ´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú×é³É¡£
SPAN£¨Switch Port Analyzer£¬½»»»Ê½¶Ë¿Ú·ÖÎöÆ÷£©Ò²³ÆΪ±¾µØ¶Ë¿Ú¾µÏñ»òÕß±¾µØ¾µÏñ¡£Ö¸Í¬Ò»¸ö¾µÏñ»á»°µÄÔ´¶Ë¿ÚÓëÄ¿µÄ¶Ë¿ÚÔÚͬһ̨É豸ÉϵľµÏñ¡£
RSPAN£¨Remote Switch Port Analyzer£¬Ô¶³Ì¶Ë¿Ú¾µÏñ£©ÊÇSPANµÄÀ©Õ¹£¬Ô´¶Ë¿ÚºÍÄ¿±ê¶Ë¿Ú´¦ÓÚ²»Í¬µÄÉ豸¡£
ERSPAN£¨Encapsulated Remote Switch Port Analyzer£¬·â×°Ô¶³Ì¶Ë¿Ú¾µÏñ£©ÊÇRSPANµÄÀ©Õ¹£¬ÊµÏÖÁË¿çÔ½½»»»»ò·ÓÉÍøÂçµÄ¶ą̀É豸µÄÔ¶³Ì¼à¿Ø·½·¨¡£
Ô¶³Ì¾µÏñVLANÊÇÒ»ÖÖÌØÊâµÄVLAN£¬¸ÃVLANÖ»´«Êä¾µÏñ±¨ÎÄ£¬²»¶ÔÕý³£µÄÒµÎñÊý¾Ý½øÐд«Êä¡£
Ô´É豸ÉϽ«¾µÏñ±¨ÎÄ·¢Ë͵½ÖмäÉ豸»òÕßÄ¿µÄÉ豸µÄ¶Ë¿Ú³ÆΪÊä³ö¶Ë¿Ú¡£
Ô´É豸ÊÇÔ¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸Ô´¶Ë¿ÚËùÔÚµÄÉ豸£¬¸ºÔð½«Ô´¶Ë¿ÚµÄ±¨Îĸ´ÖÆÒ»·Ýµ½Ô´É豸µÄÊä³ö¶Ë¿Ú£¬´«Êä¸øÖмäÉ豸»òÄ¿µÄÉ豸¡£
Ä¿µÄÉ豸Զ³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸Ô¶³Ì¾µÏñÄ¿µÄ¶Ë¿ÚËùÔÚµÄÉ豸£¬¸ºÔð½«ÖмäÉ豸»òÕßÔ´É豸½ÓÊÕµ½µÄ¾µÏñ±¨ÎÄת·¢¸ø¼à¿ØÉ豸¡£
ÖмäÉ豸ÊÇÔ¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸´¦ÓÚÔ´É豸ºÍÄ¿µÄÉ豸֮¼äµÄÉ豸£¬¸ºÔ𽫾µÏñ±¨ÎÄ´«Êä¸øÏÂÒ»¸öÖмäÉ豸»òÄ¿µÄÉ豸¡£Èç¹ûÔ´É豸ÓëÄ¿µÄÉ豸ֱ½ÓÏàÁ¬£¬Ôò²»´æÔÚÖмäÉ豸¡£
¾µÏñÊý¾ÝÁ÷Ö¸±»¾µÏñµÄÊý¾Ý±¨ÎÄ¡£¾µÏñ»á»°µÄÊý¾ÝÁ÷°üº¬ÒÔÏÂÈýÖÖ·½ÏòµÄÊý¾ÝÁ÷£º
l ÊäÈëÊý¾ÝÁ÷
ËùÓÐÔ´¶Ë¿ÚÉϽÓÊÕµ½µÄ±¨ÎĶ¼½«±»¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿ÉÒÔ¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊäÈ뱨ÎÄ¡£
l Êä³öÊý¾ÝÁ÷
ËùÓдÓÔ´¶Ë¿Ú·¢Ë͵ı¨ÎĶ¼½«¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿ÉÒÔ¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊä³ö±¨ÎÄ¡£
l Ë«ÏòÊý¾ÝÁ÷
ͬʱ°üº¬ÊäÈëÊý¾ÝÁ÷ºÍÊä³öÊý¾ÝÁ÷¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿É¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊäÈëºÍÊä³ö·½ÏòµÄÊý¾ÝÁ÷¡£
Èçͼ1-6Ëùʾ£¬Í¨¹ýÊʵ±µÄÅäÖã¬ÍøÂç·ÖÎöÒÇÄܹ»¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Êý¾ÝÁ÷£¨ÈçÀ´×ÔPC1ºÍPC2µÄÊý¾ÝÁ÷£©¡£
l ÅäÖÃDeviceAµÄGigabitEthernet 0/1ºÍGigabitEthernet 0/2ÊôÓÚVLAN 1¡£´´½¨SVI 1£¬²¢ÅäÖÃSVI 1µØַΪ10.10.10.10/24¡£
l ÅäÖÃDeviceBµÄGigabitEthernet 0/1ÊôÓÚVLAN 1¡£´´½¨SVI 1£¬²¢ÅäÖÃSVI 1µØַΪ10.10.10.20/24¡£
l ÅäÖÃPC1¡¢PC2µÄµØÖ··Ö±ðΪ10.10.10.1/24ºÍ10.10.10.2/24¡£
l ÅäÖÃDeviceAµÄ±¾µØ¾µÏñ£¬Ö¸¶¨¶Ë¿ÚGigabitEthernet 0/1ºÍGigabitEthernet 0/2·Ö±ðΪ¾µÏñµÄÔ´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú¡£¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Êý¾ÝÁ÷¡£
# ÅäÖÃDeviceAµÄGigabitEthernet 0/1ºÍGigabitEthernet 0/2ÊôÓÚVLAN 1¡£
DeviceA> enable
DeviceA# configure terminal
DeviceA(config)# vlan 1
DeviceA(config-vlan)# exit
# ÔÚDeviceAÉÏ´´½¨SVI 1£¬²¢ÅäÖÃSVI 1µØַΪ10.10.10.10/24¡£
DeviceA(config)# interface vlan 1
DeviceA(config-if-VLAN 1)# ip address 10.10.10.10 255.255.255.0
DeviceA(config-if-VLAN 1)# exit
# ÅäÖÃDeviceBµÄGigabitEthernet 0/1ÊôÓÚVLAN 1¡£
DeviceB# configure
DeviceB(config)# vlan 1
DeviceB(config-vlan)# exit
# ÔÚDeviceBÉÏ´´½¨SVI 1£¬²¢ÅäÖÃSVI 1µØַΪ10.10.10.20/24¡£
DeviceB (config)# interface vlan 1
DeviceB(config-if-VLAN 1)# ip address 10.10.10.20 255.255.255.0
DeviceB(config-if-VLAN 1)# exit
# ÔÚDeviceAÉÏÅäÖÃACL£¬Æ¥ÅäÔ´µØַΪ10.10.10.20µÄ±¨ÎÄ¡£
DeviceA(config)# access-list 100 permit ip host 10.10.10.20 any
# ÔÚDeviceAÉÏÅäÖö˿ÚGigabitEthernet 0/1Ϊ¾µÏñµÄÔ´¶Ë¿Ú£¬¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Êý¾ÝÁ÷¡£
DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 tx
DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 rx acl 100
# ÔÚDeviceAÉÏÅäÖÃGigabitEthernet 0/2Ϊ¾µÏñµÄÄ¿µÄ¶Ë¿Ú¡£
DeviceA(config)# monitor session 1 destination interface gigabitethernet 0/2
# ͨ¹ýshow monitorÃüÁî²é¿´¾µÏñÊÇ·ñÕýÈ·ÅäÖá£
DeviceA# show monitor
sess-num: 1
span-type: LOCAL_SPAN
src-intf:
¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type TX Only
src-intf:
¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type RX Only
rx acl id 100
dest-intf:
¡¡GigabitEthernet 0/2
l DeviceAµÄÅäÖÃÎļþ
hostname DeviceA
!
ip access-list extended 100
10 permit ip host 10.10.10.20 any
!
interface VLAN 1
ip address 10.10.10.10 255.255.255.0
!
monitor session 1 destination interface GigabitEthernet 0/2
monitor session 1 source interface GigabitEthernet 0/1 tx
monitor session 1 source interface GigabitEthernet 0/1 rx acl 100
!
end
l DeviceBµÄÅäÖÃÎļþ
hostname DeviceB
!
interface VLAN 1
ip address 10.10.10.20 255.255.255.0
!
end
¾¯¸æ
µ±²¿ÊðÒ»¶Ô¶à¶Ë¿Ú¾µÏñʱ£¬±ØÐëʹÓÃswitchport trunk allowed vlan remove vlan-listÃüÁî²Ã¼ôµô¸÷¾µÏñÉ豸ÉÏtrunkÀàÐ͵ĽӿÚÖй㲥µÄVLAN£¬·ñÔòtrunk½Ó¿Ú¿ÉÄܻᱻ¹ã²¥µÄÁ÷Á¿Õ¼Âúµ¼ÖÂÒµÎñÖжϡ£
Èçͼ1-7Ëùʾ£¬ÍøÂç·ÖÎöÒÇ¿ÉÒÔͨ¹ýÔ¶³Ì¾µÏñ¹¦ÄÜ£¬ÊµÏÖÔÚÄ¿µÄÉ豸DeviceBºÍDeviceCÉϼà¿ØÔ´É豸DeviceAÉϵÄË«ÏòÊý¾ÝÁ÷¡£ÇÒÉ豸֮¼ä¾ùÄÜÕý³£½»»»Êý¾Ý¡£
ͼ1-7 »ùÓÚRSPANʵÏÖµÄÒ»¶Ô¶à¾µÏñ¹¦ÄÜÍøͼ
l ÅäÖÃDeviceAΪԴÉ豸£¬ÅäÖÃÔ¶³Ì¾µÏñVLAN£¬ÅäÖö˿ÚGigabitEthernet 0/1ΪԴ¶Ë¿Ú£¬ÓëÄ¿µÄÉ豸ÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/3ºÍGigabitEthernet 0/4ΪÊä³ö¶Ë¿Ú£¬ÅäÖÃGigabitEthernet 0/2½Ó¿ÚΪMAC»Ø»·¿Ú£¬ÓÃÓÚʵÏÖÒ»¶Ô¶à¾µÏñµÄ“·´É䔹¦ÄÜ¡£ÅäÖÃÊä³ö¶Ë¿Ú¿É½»»»¹¦ÄÜ¡£
l DeviceBºÍDeviceCÅäÖÃΪĿµÄÉ豸£¬ÅäÖÃÔ¶³Ì¾µÏñVLAN£¬ÓëÔ´É豸ÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/1×÷ΪԴ¶Ë¿Ú£¬ÅäÖÃTrunk¶Ë¿Ú£¬ÓëÍøÂç·ÖÎöÒÇÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/2ÅäÖÃΪ¾µÏñÄ¿µÄ¶Ë¿Ú£¬²¢ÅäÖþµÏñÄ¿µÄ¶Ë¿Ú¿É½»»»¹¦ÄÜ¡£
# ÅäÖÃDeviceAΪԴÉ豸¡£
(1) ÅäÖÃÔ¶³ÌVLAN¡£
DeviceA> enable
DeviceA# configure terminal
DeviceA(config)# vlan 7
DeviceA(config-vlan)# remote-span
DeviceA(config-vlan)# exit
(2) ÅäÖÃÔ´¶Ë¿Ú¡£
DeviceA(config)# monitor session 1 remote-source
DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 both
(3) ÅäÖÃÊä³ö¶Ë¿Ú¡£
DeviceA(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch
(4) ÅäÖûػ·¿Ú¡£
DeviceA(config)# interface gigabitethernet 0/2
DeviceA(config-if)# mac-loopback
DeviceA(config-if)# switchport access vlan 7
DeviceA(config-if)# exit
DeviceA(config)# interface range gigabitethernet 0/3-4
DeviceA(config-if-range)# switchport mode trunk
# ÅäÖÃDeviceBΪĿµÄÉ豸¡£
(1) ÅäÖÃÔ¶³ÌVLAN¡£
DeviceB> enable
DeviceB# configure
DeviceB(config)# vlan 7
DeviceB(config-vlan)# remote-span
DeviceB(config-vlan)# exit
(2) ÅäÖÃÄ¿µÄ¶Ë¿Ú¡£
DeviceB(config)# monitor session 1 remote-destination
DeviceB(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch
DeviceB(config)# interface gigabitethernet 0/1
DeviceB(config-if)# switchport mode trunk
# ÅäÖÃDeviceCΪĿµÄÉ豸¡£
(1) ÅäÖÃÔ¶³ÌVLAN¡£
DeviceC> enable
DeviceC# configure
DeviceC(config)# vlan 7
DeviceC(config-vlan)# remote-span
DeviceC(config-vlan)# exit
(2) ÅäÖÃÄ¿µÄ¶Ë¿Ú¡£
DeviceC(config)# monitor session 1 remote-destination
DeviceC(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch
DeviceC(config)# interface gigabitethernet 0/1
DeviceC(config-if)# switchport mode trunk
# ÔÚDeviceAÉÏͨ¹ýshow monitorÃüÁî²é¿´¾µÏñÔ´É豸ÅäÖýá¹û¡£
DeviceA# show monitor
sess-num: 1
span-type: SOURCE_SPAN
src-intf:
GigabitEthernet 0/1¡¡¡¡¡¡frame-type Both
dest-intf:
GigabitEthernet¡¡0/2
Remote vlan 7
mtp_switch on
# ÔÚDeviceBºÍDeviceCÖÐͨ¹ýshow monitorÃüÁî²é¿´¾µÏñÄ¿µÄÉ豸ÅäÖýá¹û¡£ÒÔDeviceBΪÀý˵Ã÷¡£
DeviceB# show monitor
sess-num: 1
span-type: DEST_SPAN
dest-intf:
GigabitEthernet¡¡0/2
Remote vlan 7
mtp_switch on
l DeviceAµÄÅäÖÃÎļþ
hostname DeviceA
!
vlan 7
!
remote-span
!
interface GigabitEthernet 0/2
mac-loopback
switchport access vlan 7
!
interface GigabitEthernet 0/3
switchport mode trunk
interface GigabitEthernet 0/4
switchport mode trunk
!
monitor session 1 remote-source
monitor session 1 source interface GigabitEthernet 0/1 both
monitor session 1 destination remote vlan 7 interface GigabitEthernet0/2 switch
!
end
l DeviceBµÄÅäÖÃÎļþ
hostname DeviceB
!
vlan 7
remote-span
!
interface GigabitEthernet 0/1
switchport mode trunk
!
monitor session 1 remote-destination
monitor session 1 destination remote vlan 7 interface GigabitEthernet0/2 switch
!
end
l DeviceCµÄÅäÖÃÎļþ
hostname Device
!
vlan 7
remote-span
!
interface GigabitEthernet 0/1
switchport mode trunk
!
monitor session 1 remote-destination
monitor session 1 destination remote vlan 7 interface GigabitEthernet 0/2 switch
!
end
l Ô´É豸¡¢ÖмäÉ豸¡¢Ä¿µÄÉ豸¾ùÒªÅäÖÃÔ¶³ÌVLANÇÒVID±ØÐëÒ»Ö¡£
l ´ø¿í´óµÄ¶Ë¿Ú±»¾µÏñµ½´ø¿íСµÄ¶Ë¿Ú¿ÉÄÜ»áÔì³É¶ª°ü¡£
Èçͼ1-8ÖÐËùʾ¡£Íø¹ÜÏ£Íûͨ¹ýÍøÂç·ÖÎöÒǶÔDeviceAºÍDeviceCµÄÁ÷Á¿½øÐмà¿Ø¡£ÆäÖжÔÓÚDeviceA£¬¼à¿ØË«ÏòÊý¾ÝÁ÷£»¶ÔÓÚDeviceC£¬½ö¼à¿Ø²¿·Ö·¢Ë͵½DeviceµÄ±¨ÎÄ¡£ÎªÁ˺ÏÀíÀûÓÃ×ÊÔ´£¬¶Ô¼à¿Ø±¨ÎĽøÐвÉÑù£¬²ÉÑùÂÊΪ1000¡£
l ÅäÖø÷É豸֮¼äÈý²ã·ÓÉ¿É´ï¡£
l ÅäÖÃDeviceBΪԴÉ豸¡£GigabitEthernet 0/1£¬GigabitEthernet 0/2¾ùΪԴ¶Ë¿Ú£¬¼à¿ØGigabitEthernet 0/1µÄË«ÏòÊý¾Ý±¨ÎÄ£¬¶ÔÓÚGigabitEthernet 0/2µÄ±¨ÎÄ£¬½ö¾µÏñÄ¿µÄIPΪ2.1.1.1µÄ±¨ÎÄ£¬GigabitEthernet 0/3Ϊ¾µÏñ±¨Îijö¿Ú¡£
l ÅäÖþµÏñ±¨ÎĵIJÉÑùÂÊΪ1000¡£
# ÅäÖÃDeviceBµÄµØÖ·¡£
DeviceB> enable
DeviceB# configure terminal
DeviceB(config)# interface gigabitethernet 0/1
DeviceB(config-if-GigabitEthernet 0/1)# ip address 1.1.1.1 255.255.255.0
DeviceB(config-if-GigabitEthernet 0/1)# exit
DeviceB(config)# interface gigabitethernet 0/2
DeviceB(config-if-GigabitEthernet 0/1)# ip address 2.1.1.1 255.255.255.0
DeviceB(config-if-GigabitEthernet 0/1)# exit
DeviceB(config)# interface gigabitethernet 0/3
DeviceB(config-if-GigabitEthernet 0/1)# ip address 13.1.1.1 255.255.255.0
DeviceB(config-if-GigabitEthernet 0/1)# exit
# ÅäÖÃDeviceAµÄµØÖ·¡£
DeviceA> enable
DeviceA# configure terminal
DeviceA(config)# interface gigabitethernet 0/1
DeviceA(config-if-GigabitEthernet 0/1)# ip address 1.1.1.2 255.255.255.0
DeviceA(config-if-GigabitEthernet 0/1)# exit
# ÅäÖÃDeviceCµØÖ·¡£
DeviceC> enable
DeviceC# configure terminal
DeviceC(config)# interface gigabitethernet 0/1
DeviceC(config-if-GigabitEthernet 0/1)# ip address 2.1.1.2 255.255.255.0
DeviceC(config-if-GigabitEthernet 0/1)# exit
# ÔÚDeviceBÉÏÅäÖÃACL¡£
DeviceB(config)#access-list 1 permit host 1.1.1.1
# ´´½¨ERSPAN Session 1£¬ÉèÖÃΪԴÉ豸£¬²¢ÉèÖö˿ÚGigabitEthernet 0/1ΪԴ¶Ë¿Ú£¬¾µÏñË«ÏòÊý¾ÝÁ÷£¬¶Ë¿ÚGigabitEthernet 0/2ҲΪԴ¶Ë¿Ú£¬½ö½øÐÐÄ¿µÄµØַΪ1.1.1.1µÄ±¨ÎÄ¡£
DeviceB(config)# monitor session 1 erspan-source
DeviceB(config-mon-erspan-src)# source interface gigabitethernet 0/1 both
DeviceB(config-mon-erspan-src)# source interface gigabitethernet 0/2 rx acl acl1
DeviceB(config-mon-erspan-src)# origin ip address
DeviceB(config-mon-erspan-src)# destination ip address 3.1.1.2
# ¿ªÆô¾µÏñ±¨ÎIJÉÓù¦Äܲ¢ÅäÖòÉÑùÂÊΪ1000¡£
DeviceB(config-mon-erspan-src)# sample enable
DeviceB(config-mon-erspan-src)# sample rate 1000
# ÑéÖ¤DeviceBÓëDeviceAÖ®¼äÈý²ã¿Éͨ¡£
DeviceB# ping 1.1.1.2
Sending 5, 100-byte ICMP Echoes to 1.1.1.2, timeout is 2 seconds:
¡¡< press Ctrl+C to break >
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.
# ÑéÖ¤DeviceBÓëDeviceCÖ®¼äÈý²ã¿Éͨ¡£
DeviceB# ping 2.1.1.2
Sending 5, 100-byte ICMP Echoes to 2.1.1.2, timeout is 2 seconds:
¡¡< press Ctrl+C to break >
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.
# ÑéÖ¤DeviceBÓëÍøÂç·ÖÎöÒÇÖ®¼äÈý²ã¿Éͨ¡£
DeviceB# ping 3.1.1.2
Sending 5, 100-byte ICMP Echoes to 3.1.1.2, timeout is 2 seconds:
¡¡< press Ctrl+C to break >
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.
# ͨ¹ýshow access-listsÃüÁî²é¿´ACLÅäÖóɹ¦¡£
DeviceB# show access-lists
ip access-list standard 1
10 permit host 1.1.1.1
# ͨ¹ýshow monitorÃüÁî²é¿´ÅäÖýá¹û£¬ERSPAN»á»°´¦ÓÚActive״̬¡£
DeviceB# show monitor
sess-num: 1
span-type: ERSPAN_SOURCE
src-intf:
¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type: Both¡¡¡¡¡¡¡¡TX status: Active¡¡ RX status: Active¡¡
src-intf:
¡¡GigabitEthernet 0/2¡¡¡¡¡¡¡¡ frame-type: RX Only¡¡¡¡ Rx acl id: 1¡¡¡¡¡¡
status: Active
original ip address: 2.1.1.2
destination ip address: 3.1.1.2
ip ttl: 64
ip dscp: 0
sample rate: 1000
vrf: default
l DeviceAµÄÅäÖÃÎļþ
hostname DeviceA
!
interface GigabitEthernet 0/1
ip address 1.1.1.2 255.255.255.0
!
end
l DeviceCµÄÅäÖÃÎļþ
hostname DeviceC
!
interface GigabitEthernet 0/1
ip address 2.1.1.2 255.255.255.0
!
end
l DeviceBµÄÅäÖÃÎļþ
hostname DeviceB
!
ip access-list standard 1
10 permit host 1.1.1.1
!
interface GigabitEthernet 0/1
ip address 1.1.1.1 255.255.255.0
!
interface GigabitEthernet 0/2
ip address 2.1.1.1 255.255.255.0
!
interface GigabitEthernet 0/3
ip address 3.1.1.1 255.255.255.0
!
monitor session 1 erspan-source
source interface gigabitEthernet 0/1 both
source interface gigabitEthernet 0/2 rx acl acl1
origin ip address 10.1.1.2
destination ip address 3.1.1.2
sample enable
sample rate 1000
!
end
l ÅäÖÃERSPAN¾µÏñµÄ»á»°IDÒѾ±»ÅäÖÃÁËRSPAN»òLOCAL SPAN¡£
l ´ÓÔ´É豸µ½Ä¿µÄÉ豸µÄÈý²ã·ÓÉÎÞ·¨»¥Í¨¡£
ÎĵµÆÀ¼Û
