No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S12700 V200R011C10 Configuration Guide - Network Management and Monitoring

This document provides the configurations of network management and monitoring features supported by the product, including SNMP, RMON and RMON2, LLDP, Performance Management, iPCA, NQA, Service Diagnosis, Mirroring, Packet Capture, Traffic Distribution, NetStream, sFlow, and TWAMP Light.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring MQC-based Local Traffic Mirroring

Example for Configuring MQC-based Local Traffic Mirroring

Networking Requirements

In Figure 8-16, the science and technology department and administrative department of a company use the network segments 10.1.1.0/24 and 10.1.2.0/24, respectively, to access the Internet or communicate with each other through the Switch. The monitoring device (Server) is directly connected to the Switch.

The following traffic from the science and technology department needs to be monitored by the Server:
  • Traffic to the Internet
  • Traffic to the administrative department
Figure 8-16  MQC-based local traffic mirroring networking

Configuration Roadmap

The configuration roadmap is as follows:
  1. Configure GE1/0/2 of the Switch as a local observing port to forward mirrored packets to the Server.
  2. Configure a traffic classifier on the Switch to match Internet access traffic and traffic sent to the administrative department, and configure a traffic behavior to mirror traffic to a local observing port.
  3. Configure a traffic policy on the Switch, bind the traffic classifier and traffic behavior to the traffic policy, and apply the traffic policy to GE1/0/1.

Procedure

  1. Configure an observing port.

    # Configure GE1/0/2 of the Switch as a local observing port.

    <HUAWEI> system-view
    [HUAWEI] sysname Switch
    [Switch] observe-port 1 interface gigabitethernet 1/0/2
    

  2. Configure a traffic classifier.

    # Create a traffic classifier c1 on the Switch, and configure rules to match two types of traffic: traffic with source address 10.1.1.0/24 and destination TCP port number WWW and traffic with source address 10.1.1.0/24 and destination address 10.1.2.0/24.

    [Switch] acl number 3000
    [Switch-acl-adv-3000] rule permit tcp source 10.1.1.0 0.0.0.255 destination-port eq www
    [Switch-acl-adv-3000] quit
    [Switch] acl number 3001
    [Switch-acl-adv-3001] rule permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0 0.0.0.255
    [Switch-acl-adv-3001] quit
    [Switch] traffic classifier c1 operator or
    [Switch-classifier-c1] if-match acl 3000
    [Switch-classifier-c1] if-match acl 3001
    [Switch-classifier-c1] quit

  3. Configure a traffic behavior.

    # Create a traffic behavior b1 on the Switch, and define traffic mirroring in the traffic behavior to copy specified traffic to local observing port GE1/0/2.

    [Switch] traffic behavior b1
    [Switch-behavior-b1] mirroring to observe-port 1
    [Switch-behavior-b1] quit
    NOTE:

    When configuring outbound traffic mirroring on the cards (except X series cards) that support outbound traffic mirroring, do not configure other traffic behaviors. Otherwise, outbound traffic mirroring is ineffective.

  4. Configure a traffic policy and apply it to an interface.

    # Create a traffic policy named p1 on the Switch, bind the traffic behavior and traffic classifier to the traffic policy, and apply the traffic policy to the inbound direction of GE1/0/1 to monitor specified traffic of the science and technology department.

    [Switch] traffic policy p1
    [Switch-trafficpolicy-p1] classifier c1 behavior b1
    [Switch-trafficpolicy-p1] quit
    [Switch] interface gigabitethernet 1/0/1
    [Switch-GigabitEthernet1/0/1] traffic-policy p1 inbound
    [Switch-GigabitEthernet1/0/1] return

  5. Verify the configuration.

    # Check the traffic classifier configuration.

    <Switch> display traffic classifier user-defined c1
      User Defined Classifier Information:
       Classifier: c1
        Precedence: 5
        Operator: OR
        Rule(s) : if-match acl 3000
                  if-match acl 3001

    # Check the traffic policy configuration.

    <Switch> display traffic policy user-defined p1
      User Defined Traffic Policy Information:
      Policy: p1
       Classifier: c1
        Operator: OR
         Behavior: b1
          Permit
          Mirroring  to observe-port 1
    

    # Check the observing port configuration.

    <Switch> display observe-port
      ----------------------------------------------------------------------
      Index          : 1
      Untag-packet   : No
      Interface      : GigabitEthernet1/0/2
      ----------------------------------------------------------------------
    

    # Check the mirroring configuration.

    <Switch> display port-mirroring
      ----------------------------------------------------------------------
      Observe-port 1 : GigabitEthernet1/0/2
      ----------------------------------------------------------------------
      Stream-mirror:
      ----------------------------------------------------------------------
           Behavior                  Direction  Observe-port
      ----------------------------------------------------------------------
      1    b1                        -          Observe-port 1
      ----------------------------------------------------------------------
    

Configuration Files

  • Switch configuration file

    #
    sysname Switch
    #
    observe-port 1 interface GigabitEthernet1/0/2
    #
    acl number 3000
     rule 5 permit tcp source 10.1.1.0 0.0.0.255 destination-port eq www
    acl number 3001
     rule 5 permit ip source 10.1.1.0 0.0.0.255 destination 10.1.2.0 0.0.0.255
    #
    traffic classifier c1 operator or precedence 5
     if-match acl 3000
     if-match acl 3001
    #
    traffic behavior b1
     permit
     mirroring to observe-port 1
    #
    traffic policy p1 match-order config
     classifier c1 behavior b1
    #
    interface GigabitEthernet1/0/1
     traffic-policy p1 inbound
    #
    return
    
Translation
Download
Updated: 2019-10-21

Document ID: EDOC1000178113

Views: 134698

Downloads: 53

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next