1. 程式人生 > 其它 >H3C-埠映象

H3C-埠映象

本地埠映象配置舉例

配置Switch:

<Sysname> system-view
[Sysname] mirroring-group 1 local # 建立本地映象組
[Sysname] mirroring-group 1 mirroring-port GigabitEthernet 1/0/1 both #G1/0/1介面為被映象埠
[Sysname] mirroring-group 1 monitor-port GigabitEthernet 1/0/3 #G1/0/3介面為監測埠

[Sysname] display mirroring-group 1
mirroring-group 1:
type: local
status: active
mirroring port: GigabitEthernet1/0/1 both
monitor port: GigabitEthernet1/0/3 

遠端埠映象配置舉例

  

需求: 

網路管理員希望通過資料監測裝置對部門 1 和部門2 傳送的報文進行監控 

1. Switch A 充當源交換機,Switch B 充當中間交換機,Switch C 充當目的交換

2. 在 Switch A 上配置遠端源映象組,定義VLAN 10 為遠端映象VLAN,埠GigabitEthernet 1/0/1 和GigabitEthernet 1/0/2 為映象源埠, 埠GigabitEthernet 1/0/4 為反射埠
3. 在 Switch B 上配置VLAN 10 為遠端映象VLAN
4. 配置 Switch A 的埠GigabitEthernet 1/0/3、Switch B 的埠GigabitEthernet1/0/1 和GigabitEthernet 1/0/2、Switch C 的埠GigabitEthernet 1/0/1 的埠型別為Trunk,並且都允許VLAN 10 的報文通過
5. 在 Switch C 上配置遠端目的映象組,定義VLAN 10 為遠端映象VLAN,連線資料監測裝置的埠GigabitEthernet 1/0/2 為映象目的埠 

配置步驟:

(1) 配置源交換機(Switch A)

<Sysname> system-view
[Sysname] mirroring-group 1 remote-source # 建立遠端源映象組
[Sysname] vlan 10
[Sysname-vlan10] remote-probe vlan enable # 配置遠端映象VLAN
[Sysname-vlan10] quit
# 為遠端源映象組配置源埠、反射口和遠端映象VLAN

[Sysname] mirroring-group 1 mirroring-port GigabitEthernet 1/0/1 GigabitEthernet 1/0/2 inbound
[Sysname] mirroring-group 1 reflector-port GigabitEthernet 1/0/4
[Sysname] mirroring-group 1 remote-probe vlan 10
# 配置埠GigabitEthernet 1/0/3 的鏈路型別為Trunk 埠,允許VLAN 10 的報文通過

[Sysname] interface GigabitEthernet 1/0/3
[Sysname-GigabitEthernet1/0/3] port link-type trunk
[Sysname-GigabitEthernet1/0/3] port trunk permit vlan 10
[Sysname-GigabitEthernet1/0/3] quit
# 顯示遠端源映象組 1 的配置資訊 

[Sysname] display mirroring-group 1
mirroring-group 1:
type: remote-source
status: active
mirroring port:
GigabitEthernet1/0/1 inbound
GigabitEthernet1/0/2 inbound
reflector port: GigabitEthernet1/0/4
remote-probe vlan: 10

(2) 配置中間交換機(Switch B)

<Sysname> system-view
[Sysname] vlan 10
[Sysname-vlan10] remote-probe vlan enable # 建立遠端映象VLAN
[Sysname-vlan10] quit
# 配置埠GigabitEthernet 1/0/1 的鏈路型別為Trunk 埠,允許VLAN 10 的報文通過

[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
[Sysname-GigabitEthernet1/0/1] port trunk permit vlan 10
[Sysname-GigabitEthernet1/0/1] quit
# 配置埠GigabitEthernet 1/0/2 的鏈路型別為Trunk 埠,允許VLAN 10 的報文通過

[Sysname] interface GigabitEthernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port link-type trunk
[Sysname-GigabitEthernet1/0/2] port trunk permit vlan 10
(3) 配置目的交換機(Switch C)

<Sysname> system-view
[Sysname] mirroring-group 1 remote-destination # 建立遠端目的映象組
[Sysname] vlan 10
[Sysname-vlan10] remote-probe vlan enable # 配置遠端映象VLAN
[Sysname-vlan10] quit
# 為遠端目的映象組配置目的埠和遠端映象VLAN

[Sysname] mirroring-group 1 monitor-port GigabitEthernet 1/0/2
[Sysname] mirroring-group 1 remote-probe vlan 10
# 配置埠GigabitEthernet 1/0/1 的鏈路型別為Trunk 埠,允許VLAN 10 的報文通過

[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
[Sysname-GigabitEthernet1/0/1] port trunk permit vlan 10
[Sysname-GigabitEthernet1/0/1] quit
# 顯示遠端目的映象組 1 的配置資訊