BRAS、路由器观测方法
端口镜像:
1、本地观测端口
[ME60B] interface gigabitethernet4/0/0
[ME60B] port-observing observe-index 1
2、配置整板镜像的观测端口
[ME60B] slot 3
[ME60B-slot-3] mirror to observe-index 1
3、被观测端口 入放向
[ME60B] interface gigabitethernet3/0/0
[ME60B-GigabitEthernet3/0/0] port-mirroring inbound
流镜像:
1、本地观测端口
[ME60B] interface gigabitethernet3/0/2
[ME60B-GigabitEthernet3/0/2] port-observing observe-index 3
2、配置整板镜像的观测端口
[ME60B] slot 3
[ME60B-slot-3] mirror to observe-index 1
3、在端口G3/0/0做策略
ACL规则
[ME60B] acl 2001
[ME60B-acl-basic-2001] rule permit source 2.2.2.2 0.0.0.0
配置流分类
[ME60B] traffic classifier a
[ME60B-classifier-a] if-match acl 2001
定义流行为,配置流镜像功能使能。
[ME60B] traffic behavior e
[ME60B-behavior-e] port-mirroring enable
定义流量策略
[ME60B] traffic policy 1
[ME60B-trafficpolicy-1] classifier a behavior e
将流量策略应用到接口上。
[ME60B] interface gigabitethernet3/0/0
[ME60B-GigabitEthernet3/0/0] traffic-policy 1 inbound
93观测方法
端口镜像
观察口
[Quidway]observe-port 1 interface GigabitEthernet3/0/1 (可加VLAN、ip等参数),
被观测口:
[Quidway]interface GigabitEthernet4/0/1
port-mirroring to observe-port 1 both (inbound、outbound)
93流镜像
1、首先也是在全局模式下将一个端囗配置成观察端囗:
[Quidway] observe-port 1 interface gigabitethernet1/0/3
2、然后再配置ACL将需要镜像的流匹配出来:
acl number 3000
rule 5 permit ip
#
traffic classifier 1 operator and precedence 5
if-match 5 acl 3000
#
traffic behavior 1
mirroring observing-port 1
#
traffic policy 1
classifier 1 behavior 1
3、最后进入此流进入或出去的端囗下发镜像规则:
[Quidway-GigabitEthernet3/0/3]traffic-policy 1 inbound
端口镜像:
1、本地观测端口
[ME60B] interface gigabitethernet4/0/0
[ME60B] port-observing observe-index 1
2、配置整板镜像的观测端口
[ME60B] slot 3
[ME60B-slot-3] mirror to observe-index 1
3、被观测端口 入放向
[ME60B] interface gigabitethernet3/0/0
[ME60B-GigabitEthernet3/0/0] port-mirroring inbound
流镜像:
1、本地观测端口
[ME60B] interface gigabitethernet3/0/2
[ME60B-GigabitEthernet3/0/2] port-observing observe-index 3
2、配置整板镜像的观测端口
[ME60B] slot 3
[ME60B-slot-3] mirror to observe-index 1
3、在端口G3/0/0做策略
ACL规则
[ME60B] acl 2001
[ME60B-acl-basic-2001] rule permit source 2.2.2.2 0.0.0.0
配置流分类
[ME60B] traffic classifier a
[ME60B-classifier-a] if-match acl 2001
定义流行为,配置流镜像功能使能。
[ME60B] traffic behavior e
[ME60B-behavior-e] port-mirroring enable
定义流量策略
[ME60B] traffic policy 1
[ME60B-trafficpolicy-1] classifier a behavior e
将流量策略应用到接口上。
[ME60B] interface gigabitethernet3/0/0
[ME60B-GigabitEthernet3/0/0] traffic-policy 1 inbound
93观测方法
端口镜像
观察口
[Quidway]observe-port 1 interface GigabitEthernet3/0/1 (可加VLAN、ip等参数),
被观测口:
[Quidway]interface GigabitEthernet4/0/1
port-mirroring to observe-port 1 both (inbound、outbound)
93流镜像
1、首先也是在全局模式下将一个端囗配置成观察端囗:
[Quidway] observe-port 1 interface gigabitethernet1/0/3
2、然后再配置ACL将需要镜像的流匹配出来:
acl number 3000
rule 5 permit ip
#
traffic classifier 1 operator and precedence 5
if-match 5 acl 3000
#
traffic behavior 1
mirroring observing-port 1
#
traffic policy 1
classifier 1 behavior 1
3、最后进入此流进入或出去的端囗下发镜像规则:
[Quidway-GigabitEthernet3/0/3]traffic-policy 1 inbound