S12700 (V2R7) 配置流镜像时应用出方向策略提示报错

发布时间:  2017-03-08 浏览次数:  170 下载次数:  0
问题描述

S12700  配置本地流镜像策略不生效,应用出方向策略是提示报错。

[Eth-Trunk1]traffic-policy 3111 inbound
[Eth-Trunk1]traffic-policy 3111 outbound
[Eth-Trunk1]
Error: Check rule failed, policy 3111, class 3111, behavior 3111 acl 3111, rule 5 on interface Eth-Trunk1 of slot 8.  

应用时提示报错


[Eth-Trunk1]dis this 
#
interface Eth-Trunk1
undo portswitch
description To New Switch_left(6509)
ip address 172.xx.xx.66 255.255.255.252
traffic-policy 3111 inbound
traffic-policy 3111 outbound                 查看命令又配置上了
ospf network-type p2p
#

处理过程

配置信息如下:

acl number 3111
rule 5 permit ip source 172.20.46.18 0 destination 172.16.5.12 0
rule 10 permit ip source 172.16.5.12 0 destination 172.20.46.18 0

observe-port 1 interface GigabitEthernet1/0/2
#
traffic classifier c1 operator or precedence 5
 if-match acl 3000
 if-match acl 3001
#
traffic behavior b1
 permit
 mirroring to observe-port 1

#
traffic policy p1 
 classifier c1 behavior b1

behavior 里存在两个动作

根因

出方向流镜像和其他动作不能一起配置,behavior里面的permit和 mirror to不能一起配置

 

解决方案

把behavior里面的permit删除即可

traffic behavior b1
[SW]undo permit

END