Switch Set multiple viewing ports, mirror ports solve the shortage problem

Observing interface specifications on the device and 1: N size is limited, if the current monitoring device to be connected are many, the number of ports required to observe more than the upper specification limit, generally can be solved in two ways.

Method a: Configure the remote, internal loopback broadcast by remote observation port

Note:
this scenario if you configure multiple internal loopback interface, you need to ensure that these loopback interface to join VLAN ID must be different, otherwise it will lead to a loop.

1 connecting multiple network devices to monitor the internal loopback mode via FIG.
Single loopback device

As in FIG. 1 , the network administrator needs to mirror the packets to a mirrored port monitoring device 4, and the observed number of ports may be configured SwitchB less than 4. By observation of the internal remote loopback broadcast procedures are as follows:

1. Configure Remote Port Mirroring

system-view

[SwitchB] the observe-Port interface. 1 GigabitEthernet1 / 0/20 is VLAN. 1 // configure remote observation port, VLAN20 for internal loopback broadcast VLAN

[SwitchB] interface gigabitethernet1/0/6

[SwitchB-GigabitEthernet / 0 /. 6] Port-to the mirroring both the observe-Port. 1 // mirrored port and out the packets are mirrored to the direction of internal loopback interface with the remote observation

[SwitchB-GigabitEthernet1/0/6] quit

2. Configure internal loopback

[SwitchB] vlan BATCH 20 // internal loopback forward, not with other businesses in VLAN20

[SwitchB] interface gigabitethernet1/0/1

[SwitchB-GigabitEthernet / 0 /. 1] MAC-address Learning disable // close port dynamic MAC learning function to prevent internal loopback port learned MAC address to another, the non-mirror-forward loopback packets inside, but can also save MAC entries resources

[SwitchB-GigabitEthernet / 0 /. 1] STP disable // Disable STP avoid internal loopback port due to its own device receives a packet sent arranged Discarding state, the port blocking

[SwitchB-GigabitEthernet1/0/1] port link-type access

[SwitchB-GigabitEthernet / 0 /. 1] Port default VLAN 20 is // added to the internal loopback port VLAN broadcast of

[SwitchB-GigabitEthernet / 0 /. 1] Loopback Internal // remote observation port is configured as an internal loopback port

[SwitchB-GigabitEthernet1/0/1] quit

[SwitchB] interface gigabitethernet1/0/2

[SwitchB-GigabitEthernet1/0/2] port link-type access

[SwitchB-GigabitEthernet / 0/2] Port default VLAN 20 is // added to the internal loopback port VLAN broadcast of

[SwitchB-GigabitEthernet1/0/2] quit

[SwitchB] interface gigabitethernet1/0/3

[SwitchB-GigabitEthernet1/0/3] port link-type access

[SwitchB-GigabitEthernet / 0 /. 3] Port default VLAN 20 is // added to the internal loopback port VLAN broadcast of

[SwitchB-GigabitEthernet1/0/3] quit

[SwitchB] interface gigabitethernet1/0/4

[SwitchB-GigabitEthernet1/0/4] port link-type access

[SwitchB-GigabitEthernet / 0 /. 4] Port default VLAN 20 is // added to the internal loopback port VLAN broadcast of

[SwitchB-GigabitEthernet1/0/4] quit

[SwitchB] interface gigabitethernet1/0/5

[SwitchB-GigabitEthernet1/0/5] port link-type access

[SwitchB-GigabitEthernet / 0 /. 5] Port default VLAN 20 is // added to the internal loopback port VLAN broadcast of

[SwitchB-GigabitEthernet1/0/5] quit


Method two: Configure the remote performs VLAN broadcast by the intermediate apparatus Layer

FIG 2 is connected through a multi-monitoring device of FIG Network Layer intermediate apparatus
Broadcast equipment by the second floor

As FIG. 2 , the network administrator needs to mirror the packets mirrored port to three monitoring devices, and the observed number of ports may be configured SwitchB less than 3. Process implemented by the broadcast VLAN SwitchC follows:

1. Configure remote port mirroring SwitchB

system-view

[SwitchB] the observe-Port interface. 1 GigabitEthernet1 / 0/20 is VLAN. 1 // configure remote observation port, VLAN20 for forwarding packets mirrored common VLAN

[SwitchB] interface gigabitethernet1/0/2

[SwitchB-GigabitEthernet / 0/2] Port-to the mirroring both the observe-Port. 1 // direction of the mirrored port out packets mirrored to a remote observation port

[SwitchB-GigabitEthernet1/0/2] quit

2. Configure ports to a VLAN SwitchC

[SwitchC] interface gigabitethernet1/0/1

[SwitchC-GigabitEthernet1/0/1] port link-type trunk

[SwitchC-GigabitEthernet / 0 /. 1] Port VLAN Trunk Pass the allow-20 is // added VLAN20 port used to forward packets mirrored

[SwitchC-GigabitEthernet1/0/1] quit

[SwitchC] interface gigabitethernet1/0/2

[SwitchC-GigabitEthernet1/0/2] port link-type access

[SwitchC-GigabitEthernet / 0/2] Port 20 is default VLAN- // Add port for forwarding packets mirrored VLAN20

[SwitchC-GigabitEthernet1/0/2] quit

[SwitchC] interface gigabitethernet1/0/3

[SwitchC-GigabitEthernet1/0/3] port link-type access

[SwitchC-GigabitEthernet / 0 /. 3] Port 20 is default VLAN- // Add port for forwarding packets mirrored VLAN20

[SwitchC-GigabitEthernet1/0/3] quit

[SwitchC] interface gigabitethernet1/0/4

[SwitchC-GigabitEthernet1/0/4] port link-type access

[SwitchC-GigabitEthernet / 0 /. 4] Port 20 is default VLAN- // Add port for forwarding packets mirrored VLAN20

[SwitchC-GigabitEthernet1/0/4] quit

Guess you like

Origin www.cnblogs.com/OpenCyberSec/p/11008194.html