Vswitch port image configuration (22 vswitches of various brands)

Vswitch port image configuration Daquan (bringing together 22 different brands of switches) 1. CISCO (CISCO) Switch www.2cto.com 1.1 configure the image (SPAN) port Switch (config) # monitor session 1 source interface fastethernet 4/10 Switch (config) # monitor session 1 filter vlan 57 Switch (config) # monitor session 1 destination interface fastethernet 4/15 if you want to release this SPAN task, run the following command: Switch (config) # no monitor session 1: The following statement shows how to check the configuration result of the SPAN task: Switch # show monitor session 2: When configuring the Image Port (SPAN, when the data traffic is too large The processing speed and number of port www.2cto.com data cache size should be minimized to reduce the loss of monitored data packets. 1.2 Catalyst 2550/2950/3550/3560/3560-E/3570-E old Switch system command: Switch (config) # int fa0/1 Switch (config-if) # port monitor fastEthernet0/2 www.2cto.com new Switch system command: Switch> show interfacesSwitch> enablePassword: ciscoSwitch # configure terminalSwitch (config) # monitor session 1 source interface fastethernet 0/17 Switch (config) # monitor session 1 destination interface fastethernet 0/2 Switch (config) # endSwitch # show m Onitor session 1 -- view the image Switch # no monitor session 1 -- clear the image Switch # show running-config -- view the running configuration Switch # copy running-config startup-config -- save to the configuration file if use the display mirror command to view the ingress: disabled, which indicates that VLAN is divided. The source data contains the VLAN of the destination port. Assume that the destination port is in VLAN1: Switch (config) # monitor session 1 filter vlan 1 or Switch (config) # monitor session 1 destination interface fasternet 0/20 ingress vlan 11.3 Catalyst 4000/4500/4900 enter the configuration mode: Switch # enableSwitch # password cisco -- default: ciscoSwitch # configure terminal Configuration example: fastEthernet2/3 is the source port, and FastEthernet5/48 is the destination port Switch (config) # monitor session 1 source interface fa 2/3 (rx | tx | both) Switch (config) # monitor sessio N 1 destination interface fa 5/48 when the source port is a trunk interface, monitoring VLAN 1-5 and VLAN 9 Switch (config) # monitor session 2 fiter vlan 1-5, 9 when FastEthernet 4/10 is monitored, the trunk interface carries VLAN 1-1005. If you only want to monitor the data of VLAN57, fastethernet 4/15 is the destination port Switch (config) # monitor session 1 source interface fastethernet 4/10 Switch (config) # monitor session 1 filter vlan 57 Switch (Config) # monitor session 1 destination interface fastethernet 4/ 151.4 Cisco catylist2820 has two menu options: Enter the menu option first, and enable port monitor enters the cli mode, enconf termInterface fast 0/x -- Image port monitor fast 0/x -- image from Image port exitwr2 and Huawei switch 2.1 Huawei NE803/0/2 to 3/0/0 and 3/0/1 NE80-C (config) # observing-port ethernet3/0/0NE80-C (config) # observing-port Ethernet3/0/1NE80-C (config) # port-locking ing ethernet3/0/2 both ethernet3/0/0 ethernet3/0/1 Note: if you only want to export an image or change both to egress or ingress2.2, Huawei 3900 [Quidway] I Nterface Ethernet 1/0/4 [Quidway-Ethernet1/0/1] monitor-port [Quidway-Ethernet1/0/1] quit [Quidway] interface Ethernet1/0/1 [Quidway-Ethernet1/0/1] locking ing-port both [Quidway-Ethernet1/0/1] quit2.3 Huawei S6500/S7500 will be 1/0/1 ~ 1/0/3 Port image to 1/0/4 [Quidway] system-view [Quidway] logging ing-group 1 inbound Ethernet 1/0/1 to Ethernet1/0/3 mirrored-to Ethernet1/0/4 [Quidway] using ing-group 1 outbound ethernet1/0/1 to Ethernet1/0/3 mirrored-to Ethernet1/0/4 cancel image [Quidway] undo login ing-group 12.4 Quidway 2008/2016/3026/2403 HQuidway (config) # monitor-port e 0/18 -- Image port Quidway (config) # monitor e 0/3 -- the above two commands of the Image port are equivalent to the following Quidway (config) # monito R e 0/3 observing-port e0/18 view Image port information Quidway (config) # show monitor2.5 Quidway 3526 Quidway (config) # monitor-port Ethernet 0/24 -- the monitoring port will mirror the business flow output from Ethernet0/1 to the monitoring port Quidway (config) # rule-map 12 rule1 ingress Ethernet 0/1 egress any will mirror the business flow from Ethernet0/1 to the monitoring port Quidway (config) # rule-map 12 rule2 ingress any egress Ethernet 0/1 Note: (rule1/rule2) indicates the rule name. The two rule names cannot be the same. Otherwise, the configured rule overwrites the first rule, any defines all (Out/In) business flows of port Ethernet0/1 for monitoring. 3. H3C switch 3.1 H3C S2008/S2016/S2026/S2403H/S3026 Method 1: [SwitchA] system-view [SwitchA] monitor-port 0/8 -- (observed) port [SwitchA] port mirror Ethernet 0/1 to Ethernet 0/2 -- mirrored port Method 2: [SwitchA] system-view [SwitchA] port mirror Ethernet 0/1 to Ethernet 0/2 observing-port Ethernet 0/83. 2 H3C S3100 <H3C> system-view [H3C] processing ing-group 1 local [H3C] processing ing-group 1 monitor-port Ethernet 1/0/4 -- Image port [H3C] processing ing-group 1 mi Rroring-port Ethernet 1/0/1 both -- port 3.3 H3C S3500 <H3C> system-view [H3C] processing ing-group 1 local [H3C] processing ing-group 1 processing ing-port Ethernet 1/0/1 to Ethernet 1/0/5 both3.4 H3C S3600 Method 1: <H3C> system-view [H3C] grouping ing-group 1 local [H3C] interface Ethernet 1/0/4 [H3C-Ethernet1/0/4] monitor-port -- set to mirror port [H3C-GigabitEthernet1/0/4] quit [H3C] interface Ethernet 1/0/1 [H3C-GigabitEthernet1/0/1] locking ing-port Both -- set to mirror port [H3C-GigabitEthernet1/0/1] quit [H3C] save -- (Y/N) save name Method 2: <H3C> system-view [H3C] processing ing-group 1 local [H3C] processing ing-group 1 monitor-port GigabitEthernet 1/0/4 [H3C] processing ing-group 1 processing ing-port GigabitEthernet 1/0 /1 both4, 3COM Switch 4.1 3com 440024 port monitoring 9 port Select menu option (feature/rovingAnalysis): addSelect analyzer port (unit: port ,?): 1: 24 Select menu option (feature/rovingAalysis): startSelect port to monitor (unit: port ,?): 1: 9 Select menu option (feature/rovingAnalysis): summary Note: Command (add, start, remove, summary) 4.2 3com 3500/3026 E/3026F/3050/S3526 <switch> system-view [switch] ac1 num 4000 -- Define an extended access control list and define e0/2 ports for monitoring [switch-ac1-4000] rule 0 permit ingress interface Ethernet 0/2 egress any [switch-ac1-4000] rule 1 permit ingress any egress interface Ethernet 0/2 [switch-ac1-4000] quit definition e0/1 monitoring port [switch] mirrored- link-group 4000 Rule 0 interface Ethernet 0/1 [switch] mirrored-to link-group 4000 rule 1 interface Ethernet 0/1 or [switch] mirrored-to link-group 4000 interface Ethernet 0/14. 3 3com 4900 family configuration analysis port Feature rovingAlysis addThe following prompt is displayed: Select analyzer port (unit: port ,?): Configure the monitored port Feature rovingAlysis startThe following prompt is displayed: Select unit to monitor (unit: port ,?): Check Configuration Feature rovingAnalysis summary5, D-Link switch 5.1 D-Link 3226DES-3226S: 4 # config mirror port 1 add source ports 2 bothDES-3226S: 4 # show mirrorDES-3226S: 4 # enable mirrorDES-3226S: 4 # config port login ing source port B target port 16, Tp-Link switch 7, beidian switch 7.1 Nortel 1100/2000 support a set of images, 2 sources, 1 destination Default User Name/password 12/12 configMirrorInput1 (mod/port) enableInput2 (mod/port) enableOutput (mod/port) enableSave con Figure ture7.2 Nortel 8000 series Default User Name/password rwa/rwaConfig diag mirror-by-port 1 create in-port 2/4 out-port 2/1 Config diag mirror-by-port 1 enable tureConfig diag mirror -by-port 1 mode both | tx | rxSave configDiag mirror-by-port 1 info -- view image No. 1st note: the Nortel image function is generally rx and does not support both (depending on the CPU). 8. ruijie Switch # configure terminalSwitch (config) # monitor session 1 source interface fastEthernet 0/10 bothSwitch (config) # moni Tor session 1 destination interface fastEthernet 0/2 Switch (config) show monitor session 1 Switch # show running-config -- display all current configurations Switch # no monitor session 1 -- Cancel image session 19, Intel Switch Navigation menu-> Statistics-> Mirror Ports-> mirror Ports dialog box Configure Source-> Mirror Ports Configuration-> Apply (OK) three listening modes: 1. Continuous (Always): all traffic of the Image 2. cycle (Periodic): all traffic of the image within a certain period of time. Set cycle in Sampling interval configuration 3. Disable (Disabled): Disable traffic image 10, Avaya switch set port listening: set port mirror source-port mirror-port sampling {always | disable | periodic} [max-packets-sec <max-packets-sec-value>] [piggyback-port] Mod- port-range: specify the port range Mod-port-spec: specify the specific port Piggyback-port: Specify the two-way Image port Sampling: Specify the image cycle Max-packets-sec: specify the maximum number of data packets per second on the listener port (only when sampling is set to periodic). disable port listening: clear port 11.1, harbor switch flax24Harbour (config) # Harbour (config) # config grouping ing 1 Harbour (config) # config grouping ing 1 add port 5 (or 5-10) -- mirrored port Harbour (config) # config grouping ing 1 to 13 -- Image Port Harbour (config) # show container ingharbour (config) # save configuration11.2 harbor 6802 Interface Ethernet 1/11 Mirror ingress 1/10 egress 1/10 ExitExtreme alpine limit 2alpinelimit 4: # enable mirroring ing to port 2: 10alpine00004: # configure mirror add port 2: 32alpine00004: # configure mirror add port 2:1 note: if the monitored port and monitored port are not in the same controller (Group of ports), you can only capture the imported package, export package cannot catch 11.3 BigHammer 6808 set image (plate slot port monitoring 2 ports receive, 3 Ports receive and send, 4 ports send data) Harbour (config) # interface Ethernet 1/1 Harbour (config-if-eth1/1) # mirror ingress 1/2, 1/3 egress 1/3-4 remove mirror Harbour (config) # interface Ethernet 1/1 Harbour (config) # no route 11.4 NetHammerM128 (8 port) receives the packet image from Port 2 and Port 3 with the destination address: 00: 11: 22: 33: 44: 55 to Port 1: router (config-if-swi) # config mirror to 1 Router (config-if-swi) # config mirror monitor all add 2-3Router (config-if-swi) # config mirror mode all dest 00: 11: 22: 33: 44: 55 Router (config-if-swi) #11.5 harbor 5210Harbour5210 (config) # interface Ethernet 1/4Harbour5210 (config-if-eth1/4) # mirro ingress 1/24 egress 1/2411. 6 harbor flex hammer 5010 Harbour> enablePassword: harbor -- the default value is harbourHarbour (config) # config sorting 1 to 5 Harbour (config) # config grouping 1 add port 6 (or 6-10) egressHarbour (config) # config grouping ing 1 add port 6 (or 6-10) ingressHarbour (config) # show Region 12, DELL switch 12.1 DELL 5224 Console # confConsole (config) # interface Ethernet 1/19 -- Image Port Console (config-if) # port monitor Ethernet 1/7 tx -- port {tx, rx, both} Console # show port moni -- view image Console (config) # interface Ethernet 1/19 -- delete the image Console (config-if) # no port monitor Ethernet 1/7 -- delete image 13. The NetCore switch enters the NetCore Super Terminal-> enter 5 in the main menu to enter port image settings-> enter 1 to set the Image port Status Configuration command as follows: 1. Select the configuration options (1.off, 2.Rx, 3.Tx, 4. both): 42. Select capture port: 13. Select mirror port: 8. Note: The NETGEAR enhanced smart switch has a Web setting interface (on the Monitoring tab) 14. Zte 14.1 2826/2826 E/2618Zte (cfg) # set mirror add port -- add the mirrored port Zte (cfg) # set mirror monitorport 24 -- set the listening port Zte (cfg) # set mirror type ingress -- set the listener type {ingress | egress | all} Zte (cfg) # set mirror enable -- enable image Zte (cfg) # show mirror -- view image Zte (cfg) # set mirror delete port -- delete the Image port Zte (cfg) # set mirror disable -- disable image 14.2 T16S/T16C/T32C/T64CPort locking ing monitor-port <port number> target-port <port list> | target-profile <acl name> note: port-to-Port Mirroring is not supported. Only Port Mirroring 14.3 T160G/T64GZXR10 (config) # interface gei_1/1 can be configured for the entire WAN card) ZXR10 (config-if) # monitor session 1 source direction rxZXR10 (config) interface gei_1/2 -- Image Port (both) ZXR10 (config-if) # monitor session 1 sourceZXR10 (config) # interface gei_3/3 -- Monitoring Port ZXR10 (config-if) # monitor session 1 destinationZXR10 (config) # show monitor session 1 Note: up to 8 images are supported, each group supports up to eight mirrored ports 15, Extreme vswitch Extreme 4.1 and later {enable | disable} using ing on portConfigure using ing {add | delete} {vlan | port} Extreme 4.1 or lower version enable mirror to port 1 -- Image port config mirror add port 3 -- Image port {port | vlan} disable mirror -- disable image config mirror del 3 -- Cancel image {port | vlan} show mirror -- display image settings 16. Foundry switch Interface port monitor {rx | tx | both} 17. Juniper switch 17.1 Juniper M series/T series User @ route # show forwarding-options port-ing {input {family inet; rate; run-length;} output interface | {next-hop;} no-filter-check;} note: the risks of Port Mirroring increase the load on the switch and cause device instability, in some cases, a packet is sent. For example, because multiple source port images are routed to one destination port, the destination port cannot be processed, resulting in packet loss 18, Kai Chong switch 19, and Shenzhou digital switch 19.1 3526 S/3926 SSwitch (Config) # monitor session 1 source interface e-4 tx -- {tx, rx, both} Switch (Config) # monitor session 1 destination interface eth 25 note: port 3029 is written as port 0/0/2520, And the Set switch port of the anent switch is 1-23 mirror = both -- Set switch mirror = 24 -- Monitoring port Enable swith limit 21, HP switch 21.1 HP 2650HP_2650 (eth-2) # monitor -- set it to the image HP_2650 (config) # mirror-port 20 -- set to image 21.2 HP 1600/4000/8000 in console Management Mode-> Switch Configuration-> Network Monitoring Port Configuration command: Monitoring Enabled [NO]: YesMonitoring Port: a1Monitor: VLANVLAN: Red_VLAN: Put the mirrored Port into this VLAN. 22. Lenovo vswitch 22.1 iSpirit 3524G/FSwitch # Mirror Mode: L2Mirror Port: 8 -- Monitoring Port Egress ports_list: 1 -- monitored export Ingress ports_list: 1 -- monitored entry 22.2 iSpirit 4504 Switch # mirror port 1/4 idle mode: l2Switch # mirror egress 1/1 Switch # mirror ingress 1/1 Switch # show errors 22.3 iSpirit 4508 Switch # monitor session 1 source 8/1 destination 8/32 note: the vswitch image configuration cannot be saved to the configuration file 22.4 iSpirit 6800 enable image: enable configuring image configuration configure configuring add [<mac_address> | vlan <vlan name> {ports <port number >}| ports <portnumber> {vlan <vlan name>}] example: configure configuring add ports 3:1 vlan1 default mirror vla1 data to Port 1 of the 3rd slots Disable mirroring: Disable configuring22.5 iSpirit8805Switch (config-ge1/1) # mirror interface ge1/12 direction both -- {both | receive | transmit} Switch (config-ge1/1 )#