FoxGate S63 series, Руководство по настройке

Страница: 208 / 565

Flow-based Redirection
207
21. Flow-based Redirection
21.1
Introduction to Flow-based Redirection
Flow-based redirection function enables the switch to transmit the data frames
meeting some special condition (specified by ACL) to another specified port. The fames
meeting a same special condition are called a class of flow, the ingress port of the data
frame is called the source port of redirection, and the specified egress port is called the
destination port of redirection. Usually there are two kinds of application of flow-based
redirection: 1. connecting a protocol analyzer (for example, Sniffer) or a RMON monitor
to the destination port of redirection, to monitor and manage the network, and diagnose
the problems in the network; 2. Special transmission policy for a special type of data
frames.
The switch can only designate a single destination port of redirection for a same
class of flow within a source port of redirection, while it can designate different
destination ports of redirection for different classes of flows within a source port of
redirection. The same class of flow can be applied to different source ports.
21.2 Flow-based Redirection Configuration Task
Sequence
1
．
Flow-based redirection configuration
2
．
Check the current flow-based redirection configuration
1. Flow-based redirection configuration
Command Explanation
Physical Interface Configuration Mode
access-group < aclname > redirect to interface
[ethernet < IFNAME >|< IFNAME >]
no access-group < aclname> redirect
Specify flow-based
redirection for the port; the
―
no access-group
< aclname> redirect
‖
command is used to delete
flow-based redirection.