Cisco nexus switch flow system configuration

Sometimes in order to facilitate network troubleshooting, we will perform switch packet capture or traffic statistics. The following is an example of Cisco nexus switch as a flow system:
Cisco nexus switch flow system configuration

#创建需要匹配流量的ACL:
ip access-list test01
  statistics per-entry
  1 permit tcp 1.1.1.1/32 2.2.2.2/32 eq 8888
  100 permit ip any any 

#创建vlan access-group, 调用ACL
vlan access-map test01 
  match ip address test01  // 匹配上述ACL
  action forward
  statistics per-entry

#在对应的vlan调用流统策略
vlan filter test01 vlan-list <valn-id-list>   //在一个或多个VLAN里面统计报文

#/查看流量统计情况
show vlan access-list test01    

VLAN access-map test01 
        IP access list test01
        1 permit tcp 1.1.1.1/32 2.2.2.2/32 eq 8888 [match=21]   // 有匹配到
        100 permit ip any any [match=468440]

If you have other good suggestions, you are welcome to put them forward and exchange and study together.

Guess you like

Origin blog.51cto.com/jackor/2641247