CISCO交換機(jī)端口鏡像配置

《CISCO交換機(jī)端口鏡像配置》由會員上傳分享，免費(fèi)在線閱讀，更多相關(guān)內(nèi)容在教育資源-天天文庫。

1、CISCO交換機(jī)端口鏡像配置[]CISCO交換機(jī)端口鏡像配置先解釋一下端口鏡像：端口鏡像簡單的說，就是把交換機(jī)一個（數(shù)個）端口（源端口）的流量完全拷貝一份，從另外一個端口（目的端口）發(fā)出去，以便網(wǎng)絡(luò)管理人員從目的端口通過分析源端口的流量來找出網(wǎng)絡(luò)存在問題的原因。cisco的端口鏡像叫做SWITCHEDPORTANALYZER，簡稱SPAN（僅在IOS系統(tǒng)中，下同），因此，端口鏡像僅適用于以太網(wǎng)交換端口。Cisco的SPAN分成三種，SPAN、RSPAN和VSPAN，簡單的說，SPAN是指源和目的端口都在同一臺機(jī)器上、RSPAN指目的和源不在同一交換機(jī)上，VSPAN可

2、以鏡像整個或數(shù)個VLAN到一個目的端口。配置方法：1.SPAN(1)創(chuàng)建SPAN源端口monitorsessionsession_numbersourceinterfaceinterface-id[,

3、-][both

4、rx

5、tx]monitorsession1sourceinterfaceGi1/0/3-23monitorsession2sourceinterfaceGi1/0/24**session_number,SPAN會話號，我記得3550支持的最多本地SPAN是2個，即1或者2。**interface-id[,

6、-]源端口接口號，即被鏡像的端口，交換機(jī)會把這

7、個端口的流量拷貝一份，可以輸入多個端口，多個用“,”隔開，比如我的3750G設(shè)置：先查詢鏡像端口：>showinterfaceGigabitEthernet1/0/1isdown,lineprotocolisdown(monitoring)HardwareisGigabitEthernet,addressis001b.53d1.f681(bia001b.53d1.f681)MTU1500bytes,BW1000000Kbit,DLY10usec,????reliability255/255,txload1/255,rxload1/255EncapsulationAR

8、PA,loopbacknotsetKeepaliveset(10sec)Auto-duplex,Auto-speed,mediatypeis10/100/1000BaseTXinputflow-controlisoff,outputflow-controlisunsupportedARPtype:ARPA,ARPTimeout04:00:00Lastinputnever,output01:24:41,outputhangneverLastclearingof"showinterface"countersneverInputqueue:0/75/0/0(size/ma

9、x/drops/flushes);Totaloutputdrops:0Queueingstrategy:fifoOutputqueue:0/40(size/max)5minuteinputrate0bits/sec,0packets/sec5minuteoutputrate0bits/sec,0packets/sec????0packetsinput,0bytes,0nobuffer????Received0broadcasts(0multicast)????0runts,0giants,0throttles????0inputerrors,0CRC,0frame,

10、0overrun,0ignored????0watchdog,0multicast,0pauseinput????0inputpacketswithdribbleconditiondetected????45270775packetsoutput,3124068592bytes,0underruns????0outputerrors,0collisions,1interfaceresets????0babbles,0latecollision,0deferred????0lostcarrier,0nocarrier,0PAUSEoutput????0outputbu

11、fferfailures,0outputbuffersswappedoutGigabitEthernet1/0/2isup,lineprotocolisdown(monitoring)HardwareisGigabitEthernet,addressis001b.53d1.f682(bia001b.53d1.f682)MTU1500bytes,BW1000000Kbit,DLY10usec,????reliability255/255,txload25/255,rxload1/255EncapsulationARPA,loopbacknotsetKeepaliv