Shulou(Shulou.com)06/01 Report--

Port mirroring

Brief introduction:

Port mirroring, that is, packets from specified ports can be copied to the local mirrored port for network detection and troubleshooting.

Analysis of RSPAN switching Port

Analysis of RSPAN remote switching Port

RSPAN breaks through the restriction that the mirrored port and the mirrored port must be on the same switch, so that the mirrored port and the mirrored port can span multiple devices in the network, which makes it convenient for users to configure and manage remote switch devices.

Case one. Local port mirroring

Experimental environment: one linuxRH5.4 virtual machine, one Huawei S2000 switch, two pc

Network Topology:

# configuration information of sw3:

[Quidway] mirroring-group 1 local # We create a monitoring local group

[Quidway] mirroring-group 1 mirroring-port Ethernet 1-0-10 Ethernet 1-0-20 both

# add local group and monitor source port

[Quidway] mirroring-group 1 monitor-port Ethernet 1-0-24

# add local group monitoring port

[Quidway] dis mirroring-group all

Mirroring-group 1:

Type: local

Status: active

Mirroring port:

Ethernet1/0/10 both

Ethernet1/0/20 both

Monitor port: Ethernet1/0/24

# linux virtual machine configuration information

Case 2. RSPAN remote monitoring

RSPAN, that is, remote port mirroring, breaks through the restriction that mirrored ports and mirrored ports must be on the same switch, so that mirrored ports and mirrored ports can span multiple devices in the network, thus making it convenient for network administrators to manage remote switch devices.

Experimental environment: linuxRH5.4 virtual machine, one Huawei s3526e switch, two s2000 switches, two pc

Lab Topology:

# sw3 configuration information:

[sw3] vlan 10

[sw3-vlan10] remote-probe vlan enable# sets a specific vlan

[sw3-vlan10] int e1/0/24

[sw3-Ethernet1/0/24] port link-type trunk

[sw3-Ethernet1/0/24] port trunk permit vlan10 # set trunk to let vlan10 pass

[sw3] mirroring-group 1 remote-source # sets a group

[sw3] mirroring-group 1 mirroring-port Ethernet 1-0-10 outbound # set up our source monitoring port

[sw3] mirroring-group 1 mirroring-port Ethernet 1-0-20 inbound

[sw3] all traffic in mirroring-group 1 remote-probe vlan10 # group passes through vlan10

[sw3] mirroring-group 1 reflector-port Ethernet 1 Universe Mirror reflection Port

[sw3] dis mirroring-group remote-source

Mirroring-group 1:

Type: remote-source

Status: active

Mirroring port:

Ethernet1/0/10 outbound

Ethernet1/0/20 inbound

Reflector port: Ethernet1/0/5

Remote-probe vlan: 10

# configuration information of sw2:

[sw2] vlan 10

[sw2] remote-probe vlan enable

[sw2] int e

[sw2] int Ethernet 0/20

[sw2-Ethernet0/20] port link-type trunk

[sw2-Ethernet0/20] port trunk permit vlan 10

[sw2-Ethernet0/20] int Ethernet0/ 24

[sw2-Ethernet0/24] port link-type trunk

[sw2-Ethernet0/24] port trunk permit vlan 10

# configuration information of sw1:

[sw1] vlan 10

[sw1-vlan10] remote-probe vlan enable

[sw1-vlan10] q

[sw1] interface Ethernet 1-0-20

[sw1-Ethernet1/0/20] port link-type trunk

[sw1-Ethernet1/0/20] port trunk permit vlan 10

[sw1] mirroring-group 1 remote-destination

[sw1] mirroring-group 1 monitor-port Ethernet 1-0-24

[sw1] mirroring-group 1 remote-probe vlan 10

[sw1] dis mirroring-group remote-destination

Mirroring-group 1:

Type: remote-destination

Status: active

Monitor port: Ethernet1/0/24

Remote-probe vlan: 10

We went to the linux virtual machine to install the package capture software:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.