如何剥离观察端口报文携带的VLAN标签
可以通过如下方法剥离观察端口镜像报文携带的VLAN标签:
- 允许修改观察端口的配置
通过在观察端口配置命令port hybrid untagged vlan vlan-id将观察端口的VLAN标签剥离。
例如:GE1/0/1为观察端口,需要剥离的VLAN标签是4094。
<Switch> system-view [Switch] interface gigabitethernet 1/0/1 [Switch-GigabitEthernet1/0/1] port link-type hybrid [Switch-GigabitEthernet1/0/1] port hybrid untagged vlan 4094
- 不允许修改观察端口的配置
此时可以在观察端口与观察终端中间再挂机一台交换机SW,如图8-26所示,在SW上剥离VLAN标签。
按照如下步骤进行配置:
<SW> system-view [SW] interface gigabitethernet 1/0/1 [SW-GigabitEthernet1/0/1] port link-type trunk [SW-GigabitEthernet1/0/1] port trunk allow-pass vlan 4094 [SW-GigabitEthernet1/0/1] quit [SW] interface gigabitethernet 1/0/2 [SW-GigabitEthernet1/0/2] port link-type access [SW-GigabitEthernet1/0/2] port default vlan 4094 [SW-GigabitEthernet1/0/2] quit [SW] vlan 4094 [SW-vlan4094] mac-address learning disable