此文章说明了,如何使用Fortigate交换接口得SPAN功能配置端口镜像。SPAN内置在switch mode中。
在CLI中打开配置:
config system virtual-switch
edit dmz
set span enable
set span-source-port internal12
set span-dest-port internal13
set span-direction both {both | Tx | Rx}
end
end
config system switch-interface
edit DMZ
set span enable
set span-source-port internal9
set span-dest-port internal10
set span-direction both {both | Tx | Rx}
end
end
在GUI中打开配置: