¾µÏñ¹¦Ð§ÏÈÈÝ

¾µÏñ¹¦Ð§¸ÅÊö

Ëæ×ÅÍøÂçµÄÉú³¤£¬¶ÔÍøÂçµÄ¸ß¿ÉÓÃÐÔµÄÒªÇóÈÕÒæÌá¸ß
¡£µ±ÍøÂç·ºÆðÒ쳣ʱ£¬ÐèÒª¶ÔÍøÂç½Úµã»òÕß×°±¸µÄ¶Ë¿Ú¾ÙÐÐÁËÊý¾ÝÁ÷Á¿ÆÊÎöÒÔ±ãÍøÂçÄܹ»¿ìËÙ»Ö¸´Õý³££¬µ«Í¬Ê±ÓÖÒªÇó²»Ó°Ïì×°±¸Êý¾ÝÁ÷Á¿µÄÕý³£×ª·¢
¡£

¾µÏñÊǽ«Ö¸¶¨¶Ë¿ÚµÄ±¨Îĸ´ÖƵ½ÁíÒ»¸öÅþÁ¬ÓÐÍøÂç¼à²â×°±¸µÄ¶Ë¿ÚµÄ¹¦Ð§£¬ÊµÏÖÁ˶ԿÉÒɵÄÍøÂç½Úµã»òÕß×°±¸¶Ë¿Ú¾ÙÐÐÊý¾ÝÁ÷Á¿ÆÊÎö£¬Í¬Ê±ÓÖ²»Ó°Ïì±»¼à¿Ø×°±¸µÄÊý¾Ýת·¢
¡£¾µÏñ¹¦Ð§Ö÷ÒªÓ¦ÓÃÔÚÍøÂç¼à¿ØºÍ¹ÊÕÏÅŲéÁ½ÖÖ³¡¾°ÖУ¬ÊµÏÖÁ˼à¿ØÍøÂçÐÅÏ¢Ç徲ϢÕù¾öÍøÂç¹ÊÕϵÄÄ¿µÄ
¡£

»ù±¾¿´·¨

1.    Ô´¶Ë¿Ú

Ô´¶Ë¿ÚÒ²³ÆΪ±»¼à¿Ø¿Ú£¬Ô´¶Ë¿ÚÉϵÄÊý¾ÝÁ÷»á±»¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú£¬ÓÃÓÚÍøÂçÆÊÎö»ò¹ÊÕÏɨ³ý
¡£

2.    Ä¿µÄ¶Ë¿Ú

Ä¿µÄ¶Ë¿ÚÒ²³ÆΪΪ¼à¿Ø¿Ú£¬Óë¼à¿Ø×°±¸ÏàÅþÁ¬µÄ¶Ë¿Ú£¬½«ÎüÊÕµ½µÄÔ´¶Ë¿Ú±¨ÎÄת·¢µ½¼à¿Ø×°±¸
¡£

3.    »á»°

»á»°ÊÇÒ»¸öÂß¼­ÉϵĿ´·¨£¬Ò»¸öÍêÕûµÄ»á»°ÓÉÔ´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú×é³É
¡£

4.    SPAN

SPAN£¨Switch Port Analyzer£¬½»Á÷ʽ¶Ë¿ÚÆÊÎöÆ÷£©Ò²³ÆΪÍâµØ¶Ë¿Ú¾µÏñ»òÕßÍâµØ¾µÏñ
¡£Ö¸Í³Ò»¸ö¾µÏñ»á»°µÄÔ´¶Ë¿ÚÓëÄ¿µÄ¶Ë¿ÚÔÚͳһ̨Éè±¹ØÁ¬Ä¾µÏñ
¡£

5.    RSPAN

RSPAN£¨Remote Switch Port Analyzer£¬Ô¶³Ì¶Ë¿Ú¾µÏñ£©ÊÇSPANµÄÀ©Õ¹£¬Ô´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú´¦ÓÚ²î±ðµÄ×°±¸
¡£

6.    ERSPAN

ERSPAN£¨Encapsulated Remote Switch Port Analyzer£¬·â×°Ô¶³Ì¶Ë¿Ú¾µÏñ£©ÊÇRSPANµÄÀ©Õ¹£¬ÊµÏÖÁË¿çÔ½½»Á÷»ò·ÓÉÍøÂçµÄ¶ą̀װ±¸µÄÔ¶³Ì¼à¿ØÒªÁì
¡£

7.    Ô¶³Ì¾µÏñVLAN

Ô¶³Ì¾µÏñVLANÊÇÒ»ÖÖÌØÊâµÄVLAN£¬¸ÃVLANÖ»´«Êä¾µÏñ±¨ÎÄ£¬²î³ØÕý³£µÄÓªÒµÊý¾Ý¾ÙÐд«Êä
¡£

8.    Êä³ö¶Ë¿Ú

Ô´×°±¸ÉϽ«¾µÏñ±¨ÎÄ·¢Ë͵½ÖÐÐÄ×°±¸»òÕßÄ¿µÄ×°±¸µÄ¶Ë¿Ú³ÆΪÊä³ö¶Ë¿Ú
¡£

9.    Ô´×°±¸

Ô´×°±¸ÊÇÔ¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸Ô´¶Ë¿ÚËùÔÚµÄ×°±¸£¬ÈÏÕ潫Դ¶Ë¿ÚµÄ±¨Îĸ´ÖÆÒ»·Ýµ½Ô´×°±¸µÄÊä³ö¶Ë¿Ú£¬´«Êä¸øÖÐÐÄ×°±¸»òÄ¿µÄ×°±¸
¡£

10.  Ä¿µÄ×°±¸

Ä¿µÄ×°±¸Ô¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸Ô¶³Ì¾µÏñÄ¿µÄ¶Ë¿ÚËùÔÚµÄ×°±¸£¬ÈÏÕ潫ÖÐÐÄ×°±¸»òÕßÔ´×°±¸ÎüÊÕµ½µÄ¾µÏñ±¨ÎÄת·¢¸ø¼à¿Ø×°±¸
¡£

11.  ÖÐÐÄ×°±¸

ÖÐÐÄ×°±¸ÊÇÔ¶³Ì¾µÏñ½ÇÉ«Ö®Ò»£¬Ö¸´¦ÓÚÔ´×°±¸ºÍÄ¿µÄ×°±¸Ö®¼äµÄ×°±¸£¬ÈÏÕ潫¾µÏñ±¨ÎÄ´«Êä¸øÏÂÒ»ÆäÖÐÐÄ×°±¸»òÄ¿µÄ×°±¸
¡£ÈôÊÇÔ´×°±¸ÓëÄ¿µÄ×°±¸Ö±½ÓÏàÁ¬£¬Ôò²»±£´æÖÐÐÄ×°±¸
¡£

12.  ¾µÏñÊý¾ÝÁ÷

¾µÏñÊý¾ÝÁ÷Ö¸±»¾µÏñµÄÊý¾Ý±¨ÎÄ
¡£¾µÏñ»á»°µÄÊý¾ÝÁ÷°üÀ¨ÒÔÏÂÈýÖÖÆ«ÏòµÄÊý¾ÝÁ÷£º

l  ÊäÈëÊý¾ÝÁ÷

ËùÓÐÔ´¶Ë¿ÚÉÏÎüÊÕµ½µÄ±¨ÎĶ¼½«±»¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú
¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿ÉÒÔ¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊäÈ뱨ÎÄ
¡£

l  Êä³öÊý¾ÝÁ÷

ËùÓдÓÔ´¶Ë¿Ú·¢Ë͵ı¨ÎĶ¼½«¸´ÖÆÒ»·Ýµ½Ä¿µÄ¶Ë¿Ú
¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿ÉÒÔ¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊä³ö±¨ÎÄ
¡£

l  Ë«ÏòÊý¾ÝÁ÷

ͬʱ°üÀ¨ÊäÈëÊý¾ÝÁ÷ºÍÊä³öÊý¾ÝÁ÷
¡£ÔÚÒ»¸ö¾µÏñ»á»°ÖУ¬¿É¼à¿ØÒ»¸ö»ò¶à¸öÔ´¶Ë¿ÚµÄÊäÈëºÍÊä³öÆ«ÏòµÄÊý¾ÝÁ÷
¡£

µä·¶ÉèÖþÙÀý

1  SPANÉèÖþÙÀý

1.    ×éÍøÐèÇó

Èçͼ1-6Ëùʾ£¬Í¨¹ýÊʵ±µÄÉèÖã¬ÍøÂçÆÊÎöÒÇÄܹ»¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Ãü¾ÝÁ÷£¨ÈçÀ´×ÔPC1ºÍPC2µÄÊý¾ÝÁ÷£©
¡£

2.    ×éÍøͼ

ͼ1-6     SPAN×éÍøͼ

3.    ÉèÖÃÒªµã

l  ÉèÖÃDeviceAµÄGigabitEthernet 0/1ºÍGigabitEthernet 0/2ÊôÓÚVLAN 1
¡£½¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.10/24
¡£

l  ÉèÖÃDeviceBµÄGigabitEthernet 0/1ÊôÓÚVLAN 1
¡£½¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.20/24
¡£

l  ÉèÖÃPC1¡¢PC2µÄµØÖ·»®·ÖΪ10.10.10.1/24ºÍ10.10.10.2/24
¡£

l  ÉèÖÃDeviceAµÄÍâµØ¾µÏñ£¬Ö¸¶¨¶Ë¿ÚGigabitEthernet 0/1ºÍGigabitEthernet 0/2»®·ÖΪ¾µÏñµÄÔ´¶Ë¿ÚºÍÄ¿µÄ¶Ë¿Ú
¡£¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Ãü¾ÝÁ÷
¡£

4.    ÉèÖð취

# ÉèÖÃDeviceAµÄGigabitEthernet 0/1ºÍGigabitEthernet 0/2ÊôÓÚVLAN 1
¡£

DeviceA> enable

DeviceA# configure terminal

DeviceA(config)# vlan 1

DeviceA(config-vlan)# exit

# ÔÚDeviceAÉϽ¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.10/24
¡£

DeviceA(config)# interface vlan 1

DeviceA(config-if-VLAN 1)# ip address 10.10.10.10 255.255.255.0

DeviceA(config-if-VLAN 1)# exit

# ÉèÖÃDeviceBµÄGigabitEthernet 0/1ÊôÓÚVLAN 1
¡£

DeviceB# configure

DeviceB(config)# vlan 1

DeviceB(config-vlan)# exit

# ÔÚDeviceBÉϽ¨ÉèSVI 1£¬²¢ÉèÖÃSVI 1µØַΪ10.10.10.20/24
¡£

DeviceB (config)# interface vlan 1

DeviceB(config-if-VLAN 1)# ip address 10.10.10.20 255.255.255.0

DeviceB(config-if-VLAN 1)# exit

# ÔÚDeviceAÉÏÉèÖÃACL£¬Æ¥ÅäÔ´µØַΪ10.10.10.20µÄ±¨ÎÄ
¡£

DeviceA(config)# access-list 100 permit ip host 10.10.10.20 any

# ÔÚDeviceAÉÏÉèÖö˿ÚGigabitEthernet 0/1Ϊ¾µÏñµÄÔ´¶Ë¿Ú£¬¼à¿ØDeviceAת·¢¸øDeviceBµÄËùÓÐÊý¾ÝÁ÷£¬¼à¿ØÀ´×ÔDeviceBµÄÌض¨Ãü¾ÝÁ÷
¡£

DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 tx

DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 rx acl 100

# ÔÚDeviceAÉÏÉèÖÃGigabitEthernet 0/2Ϊ¾µÏñµÄÄ¿µÄ¶Ë¿Ú
¡£

DeviceA(config)# monitor session 1 destination interface gigabitethernet 0/2

5.    ÑéÖ¤ÉèÖÃЧ¹û

# Í¨¹ýshow monitorÏÂÁîÉó²é¾µÏñÊÇ·ñ׼ȷÉèÖÃ
¡£

DeviceA# show monitor

sess-num: 1

span-type: LOCAL_SPAN

src-intf:

¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type TX Only

src-intf:

¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type RX Only

rx acl id 100

dest-intf:

¡¡GigabitEthernet 0/2

6.    ÉèÖÃÎļþ

l  DeviceAµÄÉèÖÃÎļþ

hostname DeviceA

!

ip access-list extended 100

 10 permit ip host 10.10.10.20 any

!

interface VLAN 1

 ip address 10.10.10.10 255.255.255.0

!

monitor session 1 destination interface GigabitEthernet 0/2

monitor session 1 source interface GigabitEthernet 0/1 tx

monitor session 1 source interface GigabitEthernet 0/1 rx acl 100

!

end

l  DeviceBµÄÉèÖÃÎļþ

hostname DeviceB

!

interface VLAN 1

 ip address 10.10.10.20 255.255.255.0

!

end

2  »ùÓÚRSPANʵÏÖµÄÒ»¶Ô¶à¾µÏñ¹¦Ð§ÉèÖþÙÀý

1.    ×éÍøÐèÇó

Èçͼ1-7Ëùʾ£¬ÍøÂçÆÊÎöÒÇ¿ÉÒÔͨ¹ýÔ¶³Ì¾µÏñ¹¦Ð§£¬ÊµÏÖÔÚÄ¿µÄ×°±¸DeviceBºÍDeviceCÉϼà¿ØÔ´×°±¸DeviceAÉϵÄË«ÏòÊý¾ÝÁ÷
¡£ÇÒ×°±¸Ö®¼ä¾ùÄÜÕý³£½»Á÷Êý¾Ý
¡£

2.    ×éÍøͼ

ͼ1-7     »ùÓÚRSPANʵÏÖµÄÒ»¶Ô¶à¾µÏñ¹¦Ð§Íøͼ

3.    ÉèÖÃÒªµã

l  ÉèÖÃDeviceAΪԴװ±¸£¬ÉèÖÃÔ¶³Ì¾µÏñVLAN£¬ÉèÖö˿ÚGigabitEthernet 0/1ΪԴ¶Ë¿Ú£¬ÓëÄ¿µÄ×°±¸ÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/3ºÍGigabitEthernet 0/4ΪÊä³ö¶Ë¿Ú£¬ÉèÖÃGigabitEthernet 0/2½Ó¿ÚΪMAC»Ø»·¿Ú£¬ÓÃÓÚʵÏÖÒ»¶Ô¶à¾µÏñµÄ“·´É䔹¦Ð§
¡£ÉèÖÃÊä³ö¶Ë¿Ú¿É½»Á÷¹¦Ð§
¡£

l  DeviceBºÍDeviceCÉèÖÃΪĿµÄ×°±¸£¬ÉèÖÃÔ¶³Ì¾µÏñVLAN£¬ÓëÔ´×°±¸ÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/1×÷ΪԴ¶Ë¿Ú£¬ÉèÖÃTrunk¶Ë¿Ú£¬ÓëÍøÂçÆÊÎöÒÇÏàÁ¬µÄ¶Ë¿ÚGigabitEthernet 0/2ÉèÖÃΪ¾µÏñÄ¿µÄ¶Ë¿Ú£¬²¢ÉèÖþµÏñÄ¿µÄ¶Ë¿Ú¿É½»Á÷¹¦Ð§
¡£

4.    ÉèÖð취

# ÉèÖÃDeviceAΪԴװ±¸
¡£

(1)   ÉèÖÃÔ¶³ÌVLAN
¡£

DeviceA> enable

DeviceA# configure terminal

DeviceA(config)# vlan 7

DeviceA(config-vlan)# remote-span

DeviceA(config-vlan)# exit

(2)   ÉèÖÃÔ´¶Ë¿Ú
¡£

DeviceA(config)# monitor session 1 remote-source

DeviceA(config)# monitor session 1 source interface gigabitethernet 0/1 both

(3)   ÉèÖÃÊä³ö¶Ë¿Ú
¡£

DeviceA(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch

(4)   ÉèÖûػ·¿Ú
¡£

DeviceA(config)# interface gigabitethernet 0/2

DeviceA(config-if)# mac-loopback

DeviceA(config-if)# switchport access vlan 7

DeviceA(config-if)# exit

DeviceA(config)# interface range gigabitethernet 0/3-4

DeviceA(config-if-range)# switchport mode trunk

# ÉèÖÃDeviceBΪĿµÄ×°±¸
¡£

(1)   ÉèÖÃÔ¶³ÌVLAN
¡£

DeviceB> enable

DeviceB# configure

DeviceB(config)# vlan 7

DeviceB(config-vlan)# remote-span

DeviceB(config-vlan)# exit

(2)   ÉèÖÃÄ¿µÄ¶Ë¿Ú
¡£

DeviceB(config)# monitor session 1 remote-destination

DeviceB(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch

DeviceB(config)# interface gigabitethernet 0/1

DeviceB(config-if)# switchport mode trunk

# ÉèÖÃDeviceCΪĿµÄ×°±¸
¡£

(1)   ÉèÖÃÔ¶³ÌVLAN
¡£

DeviceC> enable

DeviceC# configure

DeviceC(config)# vlan 7

DeviceC(config-vlan)# remote-span

DeviceC(config-vlan)# exit

(2)   ÉèÖÃÄ¿µÄ¶Ë¿Ú
¡£

DeviceC(config)# monitor session 1 remote-destination

DeviceC(config)# monitor session 1 destination remote vlan 7 interface gigabitethernet 0/2 switch

DeviceC(config)# interface gigabitethernet 0/1

DeviceC(config-if)# switchport mode trunk

5.    ÑéÖ¤ÉèÖÃЧ¹û

# ÔÚDeviceAÉÏͨ¹ýshow monitorÏÂÁîÉó²é¾µÏñÔ´×°±¸ÉèÖÃЧ¹û
¡£

DeviceA# show monitor

sess-num: 1

span-type: SOURCE_SPAN

src-intf:

GigabitEthernet 0/1¡¡¡¡¡¡frame-type Both

dest-intf:

GigabitEthernet¡¡0/2

Remote vlan 7

mtp_switch on

# ÔÚDeviceBºÍDeviceCÖÐͨ¹ýshow monitorÏÂÁîÉó²é¾µÏñÄ¿µÄ×°±¸ÉèÖÃЧ¹û
¡£ÒÔDeviceBΪÀý˵Ã÷
¡£

DeviceB# show monitor

sess-num: 1

span-type: DEST_SPAN

dest-intf:

GigabitEthernet¡¡0/2

Remote vlan 7

mtp_switch on

6.    ÉèÖÃÎļþ

l  DeviceAµÄÉèÖÃÎļþ

hostname DeviceA

!

vlan 7

!

 remote-span

!

interface GigabitEthernet 0/2

 mac-loopback

 switchport access vlan 7

!

interface GigabitEthernet 0/3

switchport mode trunk

interface GigabitEthernet 0/4

switchport mode trunk

!

monitor session 1 remote-source

monitor session 1 source interface GigabitEthernet 0/1 both

monitor session 1 destination remote vlan 7 interface GigabitEthernet0/2 switch

!

end

l  DeviceBµÄÉèÖÃÎļþ

hostname DeviceB

!

vlan 7

 remote-span

!

interface GigabitEthernet 0/1

 switchport mode trunk

!

monitor session 1 remote-destination

monitor session 1 destination remote vlan 7 interface GigabitEthernet0/2 switch

!

end

l  DeviceCµÄÉèÖÃÎļþ

hostname Device

!

vlan 7

 remote-span

!

interface GigabitEthernet 0/1

 switchport mode trunk

 !

monitor session 1 remote-destination

monitor session 1 destination remote vlan 7 interface GigabitEthernet 0/2 switch

!

end

7.    ³£¼û¹ýʧ

l  Ô´×°±¸¡¢ÖÐÐÄ×°±¸¡¢Ä¿µÄ×°±¸¾ùÒªÉèÖÃÔ¶³ÌVLANÇÒVID±ØÐèÒ»ÖÂ
¡£

l  ´ø¿í´óµÄ¶Ë¿Ú±»¾µÏñµ½´ø¿íСµÄ¶Ë¿Ú¿ÉÄÜ»áÔì³É¶ª°ü
¡£

3  ERSPAN»ù±¾¹¦Ð§ÉèÖþÙÀý

1.    ×éÍøÐèÇó

Èçͼ1-8ÖÐËùʾ
¡£Íø¹ÜÏ£Íûͨ¹ýÍøÂçÆÊÎöÒǶÔDeviceAºÍDeviceCµÄÁ÷Á¿¾ÙÐмà¿Ø
¡£ÆäÖйØÓÚDeviceA£¬¼à¿ØË«ÏòÊý¾ÝÁ÷£»¹ØÓÚDeviceC£¬½ö¼à¿Ø²¿·Ö·¢Ë͵½DeviceµÄ±¨ÎÄ
¡£ÎªÁ˺ÏÀíʹÓÃ×ÊÔ´£¬¶Ô¼à¿Ø±¨ÎľÙÐвÉÑù£¬²ÉÑùÂÊΪ1000
¡£

2.    ×éÍøͼ

ͼ1-8     ERSPANÉèÖþÙÀý×éÍøͼ

3.    ÉèÖÃÒªµã

l  ÉèÖø÷×°±¸Ö®¼äÈý²ã·ÓÉ¿É´ï
¡£

l  ÉèÖÃDeviceBΪԴװ±¸
¡£GigabitEthernet 0/1£¬GigabitEthernet 0/2¾ùΪԴ¶Ë¿Ú£¬¼à¿ØGigabitEthernet 0/1µÄË«ÏòÊý¾Ý±¨ÎÄ£¬¹ØÓÚGigabitEthernet 0/2µÄ±¨ÎÄ£¬½ö¾µÏñÄ¿µÄIPΪ2.1.1.1µÄ±¨ÎÄ£¬GigabitEthernet 0/3Ϊ¾µÏñ±¨Îijö¿Ú
¡£

l  ÉèÖþµÏñ±¨ÎĵIJÉÑùÂÊΪ1000
¡£

4.    ÉèÖð취

# ÉèÖÃDeviceBµÄµØÖ·
¡£

DeviceB> enable

DeviceB# configure terminal

DeviceB(config)# interface gigabitethernet 0/1

DeviceB(config-if-GigabitEthernet 0/1)# ip address 1.1.1.1 255.255.255.0

DeviceB(config-if-GigabitEthernet 0/1)# exit

DeviceB(config)# interface gigabitethernet 0/2

DeviceB(config-if-GigabitEthernet 0/1)# ip address 2.1.1.1 255.255.255.0

DeviceB(config-if-GigabitEthernet 0/1)# exit

DeviceB(config)# interface gigabitethernet 0/3

DeviceB(config-if-GigabitEthernet 0/1)# ip address 13.1.1.1 255.255.255.0

DeviceB(config-if-GigabitEthernet 0/1)# exit

# ÉèÖÃDeviceAµÄµØÖ·
¡£

DeviceA> enable

DeviceA# configure terminal

DeviceA(config)# interface gigabitethernet 0/1

DeviceA(config-if-GigabitEthernet 0/1)# ip address 1.1.1.2 255.255.255.0

DeviceA(config-if-GigabitEthernet 0/1)# exit

# ÉèÖÃDeviceCµØÖ·
¡£

DeviceC> enable

DeviceC# configure terminal

DeviceC(config)# interface gigabitethernet 0/1

DeviceC(config-if-GigabitEthernet 0/1)# ip address 2.1.1.2 255.255.255.0

DeviceC(config-if-GigabitEthernet 0/1)# exit

# ÔÚDeviceBÉÏÉèÖÃACL
¡£

DeviceB(config)#access-list 1 permit host 1.1.1.1

# ½¨ÉèERSPAN Session 1£¬ÉèÖÃΪԴװ±¸£¬²¢ÉèÖö˿ÚGigabitEthernet 0/1ΪԴ¶Ë¿Ú£¬¾µÏñË«ÏòÊý¾ÝÁ÷£¬¶Ë¿ÚGigabitEthernet 0/2ҲΪԴ¶Ë¿Ú£¬½ö¾ÙÐÐÄ¿µÄµØַΪ1.1.1.1µÄ±¨ÎÄ
¡£

DeviceB(config)# monitor session 1 erspan-source

DeviceB(config-mon-erspan-src)# source interface gigabitethernet 0/1 both

DeviceB(config-mon-erspan-src)# source interface gigabitethernet 0/2 rx acl acl1

DeviceB(config-mon-erspan-src)# origin ip address 10.1.1.2

DeviceB(config-mon-erspan-src)# destination ip address 3.1.1.2

# ¿ªÆô¾µÏñ±¨ÎĽÓÄɹ¦Ð§²¢ÉèÖòÉÑùÂÊΪ1000
¡£

DeviceB(config-mon-erspan-src)# sample enable

DeviceB(config-mon-erspan-src)# sample rate 1000

5.    ÑéÖ¤ÉèÖÃЧ¹û

# ÑéÖ¤DeviceBÓëDeviceAÖ®¼äÈý²ã¿Éͨ
¡£

DeviceB# ping 1.1.1.2

Sending 5, 100-byte ICMP Echoes to 1.1.1.2, timeout is 2 seconds:

¡¡< press Ctrl+C to break >

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.

# ÑéÖ¤DeviceBÓëDeviceCÖ®¼äÈý²ã¿Éͨ
¡£

DeviceB# ping 2.1.1.2

Sending 5, 100-byte ICMP Echoes to 2.1.1.2, timeout is 2 seconds:

¡¡< press Ctrl+C to break >

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.

# ÑéÖ¤DeviceBÓëÍøÂçÆÊÎöÒÇÖ®¼äÈý²ã¿Éͨ
¡£

DeviceB# ping 3.1.1.2

Sending 5, 100-byte ICMP Echoes to 3.1.1.2, timeout is 2 seconds:

¡¡< press Ctrl+C to break >

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/8 ms.

# Í¨¹ýshow access-listsÏÂÁîÉó²éACLÉèÖÃÀÖ³É
¡£

DeviceB# show access-lists

ip access-list standard 1

 10 permit host 1.1.1.1

# Í¨¹ýshow monitorÏÂÁîÉó²éÉèÖÃЧ¹û£¬ERSPAN»á»°´¦ÓÚActive״̬
¡£

DeviceB# show monitor

sess-num: 1

span-type: ERSPAN_SOURCE

src-intf:

¡¡GigabitEthernet 0/1¡¡¡¡¡¡¡¡ frame-type: Both¡¡¡¡¡¡¡¡TX status: Active¡¡ RX status: Active¡¡

src-intf:

¡¡GigabitEthernet 0/2¡¡¡¡¡¡¡¡ frame-type: RX Only¡¡¡¡ Rx acl id: 1¡¡¡¡¡¡

status: Active

original ip address: 2.1.1.2

destination ip address: 3.1.1.2

ip ttl: 64

ip dscp: 0

sample rate: 1000

vrf: default

6.    ÉèÖÃÎļþ

l  DeviceAµÄÉèÖÃÎļþ

hostname DeviceA

!

interface GigabitEthernet 0/1

 ip address 1.1.1.2 255.255.255.0

!

end

l  DeviceCµÄÉèÖÃÎļþ

hostname DeviceC

!

interface GigabitEthernet 0/1

 ip address 2.1.1.2 255.255.255.0

!

end

l  DeviceBµÄÉèÖÃÎļþ

hostname DeviceB

!

ip access-list standard 1

 10 permit host 1.1.1.1

!

interface GigabitEthernet 0/1

 ip address 1.1.1.1 255.255.255.0

!

interface GigabitEthernet 0/2

 ip address 2.1.1.1 255.255.255.0

!

interface GigabitEthernet 0/3

 ip address 3.1.1.1 255.255.255.0

!

monitor session 1 erspan-source

 source interface gigabitEthernet 0/1 both

 source interface gigabitEthernet 0/2 rx acl acl1

 origin ip address 10.1.1.2

 destination ip address 3.1.1.2

 sample enable

 sample rate 1000

!

end

7.    ³£¼û¹ýʧ

l  ÉèÖÃERSPAN¾µÏñµÄ»á»°IDÒѾ­±»ÉèÖÃÁËRSPAN»òLOCAL SPAN
¡£

l  ´ÓÔ´×°±¸µ½Ä¿µÄ×°±¸µÄÈý²ã·ÓÉÎÞ·¨»¥Í¨
¡£