SNR S2940-8G-v2, Руководство по настройке

Страница: 397 / 420

SNR S2940-8G-v2 Switch Configuration Guide
Mirror Configuration
2. Specify mirror source port (CPU)
Command Explanation
Global Mode
monitor session <session> source { interface
<interface-list> | cpu [slot <slotnum> ] } { rx | tx
| both }
no monitor session <session> source { interface
<interface-list> | cpu [slot <slotnum> ] } Specifies mirror source port; the no com-
mand deletes mirror source port.
3. Specify flow mirror source
Command Explanation
Global Mode
monitor session <session> source { interface
<interface-list> } access-group <num> { rx | tx |
both }
no monitor session <session> source { interface
<interface-list> } access-group <num> Specifies flow mirror source port and apply
rule; the no command deletes flow mirror
source port.
61.3 Mirror Examples
1. Example:
The requirement of the configurations is shown as below: to monitor at interface 1 the data
frames sent out by interface 9 and received from interface 7, sent and received by CPU, and the
data frames received by interface 15 and matched by rule 120(The source IP address is 1.2.3.4
and the destination IP address is 5.6.7.8).
Configuration guidelines:
1. Configure interface 1 to be a mirror destination interface.
2. Configure the interface 7 ingress and interface 9 egress to be mirrored source.
3. Configure the CPU as one of the source.
4. Configure access list 120.
5. Configure access 120 to binding interface 15 ingress.
Configuration procedure is as follows:
Switch(config)#monitor session 4 destination interface ethernet 1/0/1
Switch(config)#monitor session 4 source interface ethernet 1/0/7 rx
Switch(config)#monitor session 4 source interface ethernet 1/0/9 tx
Switch(config)#monitor session 4 source cpu
Switch(config)#access-list 120 permit tcp 1.2.3.4 0.0.0.255 5.6.7.8 0.0.0.255
Switch(config)#monitor session 4 source interface ethernet 1/0/15 access-list 120 rx
397