2.处理过程:手动修改端口速率为1000M,全双工,STA自适应关闭,修改成全双工1000M,此时探针接口仍然不亮,但接口下有部分流量数据,接口下提示协商失败。路由器镜像口有多个INerrors错误包。经自环测试,光模块正常,更换光模块问题仍然存在,光纤无问题。
3.根因:探针接口 兼容性目前不支持对接路由器
4.路由器端口及流镜像功能配置端口镜像:
# 配置GE2/0/0为观测端口。<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet2/0/0
[~HUAWEI-GigabitEthernet2/0/0] port-observing observe-index 2
配置接口镜像的观测端口
[~DeviceB] interface gigabitethernet3/0/0
[~DeviceB-GigabitEthernet3/0/0] port-mirroring to observe-index 2
[*DeviceB-GigabitEthernet3/0/0] commit
[~DeviceB-GigabitEthernet3/0/0] quit
流镜像(过滤引流):
配置GE1/0/3为观测端口
<DeviceB> system-view
[~DeviceB] interface gigabitethernet1/0/3
[~DeviceB-GigabitEthernet1/0/3] port-observing observe-index 3
[*DeviceB-GigabitEthernet1/0/3] commit
配置整板镜像的观测端口
[~DeviceB] slot 1
[~DeviceB-slot-1] mirror to observe-index 3
[*DeviceB-slot-1] commit
[~DeviceB-slot-1] quit
在镜像端口GE1/0/1上配置流量策略
# 定义ACL规则。
[~DeviceB] acl 2001
[*DeviceB-acl-basic-2001] rule permit source 2.2.2.2 0.0.0.0
[*DeviceB-acl-basic-2001] commit
[~DeviceB-acl-basic-2001] quit
# 配置流分类,定义基于ACL的匹配规则。
[~DeviceB] traffic classifier a
[*DeviceB-classifier-a] if-match acl 2001
[*DeviceB-classifier-a] commit
[~DeviceB-classifier-a] quit
# 配置完成后,可以通过display traffic classifier user-defined命令查看类的配置信息。
[~DeviceB] display traffic classifier user-defined
User Defined Classifier Information:
Classifier: a
Operator: OR
Rule(s) : if-match acl 2001
# 定义流行为,配置流镜像功能使能。
[~DeviceB] traffic behavior e
[*DeviceB-behavior-e] port-mirroring enable
[*DeviceB-behavior-e] commit
[~DeviceB-behavior-e] quit
# 定义流量策略,将流分类与流行为关联。
[~DeviceB] traffic policy 1
[*DeviceB-trafficpolicy-1] classifier a behavior e
[*DeviceB-trafficpolicy-1] commit
[~DeviceB-trafficpolicy-1] quit
# 将流量策略应用到接口上。
[~DeviceB] interface gigabitethernet1/0/1
[~DeviceB-GigabitEthernet1/0/1] traffic-policy 1 inbound
[*DeviceB-GigabitEthernet1/0/1] commit
[~DeviceB-GigabitEthernet1/0/1] quit
检查配置结果
查看流量镜像情况可以用ping命令或其他产生流量的方法。例如:从DeviceA分别发10个源地址为2.2.2.2/32和1.1.1.0/32的ping报文到端口GE1/0/1,在主机D上能接收到DeviceA发出的源地址为2.2.2.2/32的报文,但是收不到源地址为1.1.1.0/32的报文。
5.建议:已反馈400研发,尽快扩展适配性