交换机端口镜像，如何配置多个观察口

转自： http://support.huawei.com/ecommunity/bbs/10152503.html

 

实现原理：将所有端口镜像报文引入一个观察端口，通过观察端口内部环回（配置loopback internal），

将报文在vlan内广播到其它若干实际观察端口，报文出端口时剥除vlan id。

 

配置举例：

预留vlan3500（for example）

# vlan batch 3 10 20 100 300 to 301 3000 to 3002 3500 4000

#

观察端口

# observe-port 1 interface GigabitEthernet0/0/21 vlan 3500

#

三个镜像端口：

# interface GigabitEthernet0/0/3

port-mirroring to observe-port 1 both

# interface GigabitEthernet0/0/4

port-mirroring to observe-port 1 both

# interface GigabitEthernet0/0/5

port-mirroring to observe-port 1 both

#

三个观察端口：

# interface GigabitEthernet0/0/11

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 3500

# interface GigabitEthernet0/0/12

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 3500

# interface GigabitEthernet0/0/13

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 3500

#

环回端口：

# interface GigabitEthernet0/0/21

description neibuhuanhui

loopback internal

mac-address learning disable

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 3500

stp disable

 

注意：如果交换机全局配置stp enable，需要在环回端口上配置stp disable，否则该端口如果接收到交换机自己发出去的stp报文，

会将端口置为discarding状态，环回报文都会在入向被丢弃