Basic Application notes of shunt aggregation Based on OpenFlow Protocol

Basic Application notes of shunt aggregation Based on OpenFlow Protocol

Experiment 1: One-to-multiple experiments

The configuration for mirroring traffic from one 10g port to five is as follows. The same configuration method can be applied to more ports.

Note: The Pica8 switch supports both the traditional 2-3 layer protocol and OpenFlow Protocol. In this tutorial, the switch is configured in OpenFlow mode;

First, create a new Bridge br0 and add Port 1-6 to br0;

# Add Bridge br0 - for PCAP Replication - 1st Port############################### te-1/1/1 is input te-1/1/2, te-1/1/3, te-1/1/4, te-1/1/5, te-1/1/6 are output#-------------------------------------------------------------------------------------$VSCTL add-br br0 -- set bridge br0 datapath_type=pica8 other-config=datapath-id=100$VSCTL add-port br0 te-1/1/1 -- set interface te-1/1/1 type=pica8$VSCTL add-port br0 te-1/1/2 -- set interface te-1/1/2 type=pica8$VSCTL add-port br0 te-1/1/3 -- set interface te-1/1/3 type=pica8$VSCTL add-port br0 te-1/1/4 -- set interface te-1/1/4 type=pica8$VSCTL add-port br0 te-1/1/5 -- set interface te-1/1/5 type=pica8$VSCTL add-port br0 te-1/1/6 -- set interface te-1/1/6 type=pica8

Then, we remove the default stream to ensure that each port operates according to the new instructions. Finally, we discard all the ingress traffic from the image outbound port;

# Remove Default Flow (not treating this as HUB!)ovs-ofctl del-flows br0# Add replication flow 1 -> 2,3,4,5,6ovs-ofctl add-flow br0 in_port=1,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:2,3,4,5,6

Finally, we discard all the ingress traffic from the image outbound port;

# Drop ingress traffic from mirror portsovs-ofctl add-flow br0 in_port=2,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=dropovs-ofctl add-flow br0 in_port=3,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=dropovs-ofctl add-flow br0 in_port=4,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=dropovs-ofctl add-flow br0 in_port=5,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=dropovs-ofctl add-flow br0 in_port=6,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop

Experiment 2: Tap Aggregation Experiment

Based on experiment 1, we bridge the traffic of the four ports and mirror to other ports;

idge br20 - for TAP Span - 1st Port######################################################################################## Bridged : te-1/1/21, te-1/1/22, te-1/1/23, te-1/1/24# Output : te-1/1/25, te-1/1/26, te-1/1/27, te-1/1/28#-------------------------------------------------------------------------------------$VSCTL add-br br20 -- set bridge br20 datapath_type=pica8 other-config=datapath-id=120$VSCTL add-port br20 te-1/1/21 -- set interface te-1/1/21 type=pica8$VSCTL add-port br20 te-1/1/22 -- set interface te-1/1/22 type=pica8$VSCTL add-port br20 te-1/1/23 -- set interface te-1/1/23 type=pica8$VSCTL add-port br20 te-1/1/24 -- set interface te-1/1/24 type=pica8$VSCTL add-port br20 te-1/1/25 -- set interface te-1/1/25 type=pica8$VSCTL add-port br20 te-1/1/26 -- set interface te-1/1/26 type=pica8$VSCTL add-port br20 te-1/1/27 -- set interface te-1/1/27 type=pica8$VSCTL add-port br20 te-1/1/28 -- set interface te-1/1/28 type=pica8# Remove Default Flow (not treating this as HUB!)ovs-ofctl del-flows br20# Add replication flow from each bridged port to each of the other ports in the groupovs-ofctl add-flow br20 in_port=21,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:22,23,24,25,26,27,28ovs-ofctl add-flow br20 in_port=22,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:21,23,24,25,26,27,28ovs-ofctl add-flow br20 in_port=23,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:21,22,24,25,26,27,28ovs-ofctl add-flow br20 in_port=24,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=output:21,22,23,25,26,27,28# Drop ingress traffic from mirror portsovs-ofctl add-flow br20 in_port=25,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=dropovs-ofctl add-flow br20 in_port=26,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=dropovs-ofctl add-flow br20 in_port=27,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=dropovs-ofctl add-flow br20 in_port=28,dl_dst="*",dl_src="*",dl_type="*",dl_vlan_pcp="*",dl_vlan="*",actions=drop