Ko te SPAN, te RSPAN, me te ERSPAN he tikanga e whakamahia ana i roto i te whatunga hei hopu me te aroturuki i ngā waka hei tātari. Anei tētahi tirohanga poto mō ia mea:
SPAN (Kaitātari Tauranga Whakawhiti)
Kaupapa: Hei whakaata i ngā waka mai i ngā tauranga motuhake, i ngā VLAN rānei i runga i tētahi pana ki tētahi atu tauranga hei aroturuki.
Tauira Whakamahi: He pai mō te tātaritanga waka ā-rohe i runga i te pana kotahi. Ka whakaatahia te waka ki tētahi tauranga kua tohua hei hopu i te raraunga e te kaitātari whatunga.
RSPAN (SPAN Mamao)
Kaupapa: Whakawhanui ake i ngā āheinga SPAN puta noa i ngā pana maha i roto i te whatunga.
Tauira Whakamahi: Ka āhei te aroturuki i te haere o ngā waka mai i tētahi pana ki tētahi atu mā te hononga matua. He whai hua mō ngā āhuatanga kei reira te taputapu aroturuki i runga i tētahi atu pana.
ERSPAN (SPAN Mamao Kua Tākaihia)
Kaupapa: Ka whakakotahi i te RSPAN me te GRE (Generic Routing Encapsulation) hei ārai i te waka whakaata.
Tauira Whakamahi: Ka taea te aroturuki i ngā waka puta noa i ngā whatunga kua araia. He mea whai hua tēnei i roto i ngā hanganga whatunga uaua e hiahiatia ana te hopu i ngā waka puta noa i ngā wāhanga rerekē.
He pūnaha aroturuki waka whai hua, he mahi teitei te Switch port Analyzer (SPAN). Ka ārahi, ka whakaata rānei i te waka mai i tētahi tauranga pūtake, VLAN rānei ki tētahi tauranga ūnga. I ētahi wā ka kiia tēnei ko te aroturuki wātū. Ka whakamahia te SPAN hei whakatau i ngā take hononga me te tatau i te whakamahinga me te mahi whatunga, me ētahi atu. E toru ngā momo SPAN e tautokona ana i runga i ngā hua Cisco …
a. SPAN, SPAN ā-rohe rānei.
b. Mamao SPAN (RSPAN).
c. SPAN mamao kua whakakōpiritia (ERSPAN).
Kia mōhio ai: "Kaihoko Mōkihi Whatunga Mylinking™ me ngā Āhuatanga SPAN, RSPAN me ERSPAN"
He maha ngā whakamahinga o te SPAN / traffic mirroring / port mirroring, kei raro nei ētahi.
- Te whakatinana i te IDS/IPS i te aratau pōrearea.
- Ngā otinga hopu waea VOIP.
- Ngā take mō te aro turuki me te tātari i ngā waka nā runga i ngā ture haumarutanga.
- Te whakatau i ngā raruraru hononga, te aroturuki i te waka.
Ahakoa te momo SPAN e rere ana, ka taea e te pūtake SPAN te whakamahi i tētahi momo tauranga, arā, he tauranga kua araia, he tauranga pana tinana, he tauranga urunga, he pūtu, he VLAN (ka aroturukitia ngā tauranga hohe katoa o te pana), he EtherChannel (he tauranga, he atanga tauranga-hongere katoa rānei) me ētahi atu. Kia mahara, kāore e taea te whai wāhi o tētahi tauranga kua whirihorahia mō te ūnga SPAN ki tētahi VLAN pūtake SPAN.
Ka tautokohia e ngā wātū SPAN te aroturuki i ngā waka e tomo mai ana (ingress SPAN), ngā waka e puta mai ana (egress SPAN), ngā waka rānei e rere ana i ngā taha e rua.
- Ka tāruatia e te Ingress SPAN (RX) ngā waka e whiwhihia ana e ngā tauranga pūtake me ngā VLAN ki te tauranga ūnga. Ka tāruatia e te SPAN ngā waka i mua i tētahi whakarerekētanga (hei tauira, i mua i tētahi tātari VACL, ACL rānei, QoS, tirotiro tomo, tirotiro putanga rānei).
- Ka tāruatia e te Putanga SPAN (TX) ngā rerenga raraunga e tukuna ana mai i ngā tauranga pūtake me ngā VLAN ki te tauranga ūnga. Ka mahia ngā tātari, ngā whakarerekētanga rānei e tika ana mā te tātari VACL, ACL rānei, QoS, ngā mahi tirotiro urunga, putanga rānei i mua i te tukunga whakamua a te pana i ngā rerenga raraunga ki te tauranga ūnga SPAN.
- Ina whakamahia te kupumatua e rua, ka tāruatia e te SPAN ngā raraunga whatunga i whiwhihia, i tukuna hoki e ngā tauranga pūtake me ngā VLAN ki te tauranga ūnga.
- Kāore a SPAN/RSPAN e aro ki ngā anga CDP, STP BPDU, VTP, DTP me PAgP. Heoi, ka taea te tuku atu i ēnei momo waka mena ka whirihorahia te whakahau tārua encapsulation.
SPAN, SPAN Ā-Rohe rānei
Ka whakaatahia e te SPAN te rere o ngā raraunga mai i tētahi atanga, neke atu rānei, i runga i te pana ki tētahi atanga, neke atu rānei, i runga i te pana kotahi; nō reira, e kiia ana te SPAN ko te ROHE SPAN.
Ngā aratohu, ngā here rānei ki te SPAN ā-rohe:
- Ka taea te whirihora i ngā tauranga whakawhiti Papa 2 me ngā tauranga Papa 3 hei tauranga pūtake, hei tauranga ūnga rānei.
- Ka taea te pūtake mai i tētahi, i ētahi atu tauranga rānei, i tētahi VLAN rānei, engari ehara i te ranunga o ēnei.
- He tauranga pūtake tika ngā tauranga pūtake matua, ā, he tauranga pūtake kore-matua anō hoki.
- Tae atu ki te 64 ngā tauranga ūnga SPAN ka taea te whirihora i runga i te pana.
- Ina whirihorahia e mātou he tauranga ūnga, ka tuhia anōtia tōna whirihoranga taketake. Mēnā ka tangohia te whirihoranga SPAN, ka whakahokia mai te whirihoranga taketake i runga i taua tauranga.
- Ina whirihorahia he tauranga ūnga, ka tangohia te tauranga mai i tētahi paihere EtherChannel mēnā he wāhanga o tētahi. Mēnā he tauranga kua araia, ka whakakorehia e te whirihoranga ūnga SPAN te whirihoranga tauranga kua araia.
- Kāore ngā tauranga ūnga e tautoko i te haumarutanga tauranga, te manatoko 802.1x, ngā VLAN tūmataiti rānei.
- Ka taea e te tauranga te mahi hei tauranga ūnga mō te wātū SPAN kotahi anake.
- Kāore e taea te whirihora i tētahi tauranga hei tauranga ūnga mēnā he tauranga pūtake o tētahi wātū whānui, he wāhanga rānei o te pūtake VLAN.
- Ka taea te whirihora i ngā atanga hongere tauranga (EtherChannel) hei tauranga pūtake engari kāore hei tauranga ūnga mō SPAN.
- Ko te ahunga o te waka he "rua" i te taunoa mō ngā pūtake SPAN.
- Kāore ngā tauranga ūnga e whai wāhi ki tētahi tauira rākau-whānui. Kāore e taea te tautoko i te DTP, CDP me ētahi atu. Kei roto i te SPAN ā-rohe ngā BPDU i roto i te waka e aroturukitia ana, nō reira ko ngā BPDU katoa e kitea ana i te tauranga ūnga ka tāruatia mai i te tauranga pūtake. Nō reira, kaua rawa e hono i tētahi pana ki tēnei momo SPAN nā te mea ka puta he koropiko whatunga. Ka whakapai ake ngā taputapu AI i te pai o te mahi, ā,AI kāore e kiteaka taea e te ratonga te whakapai ake i te kounga o ngā taputapu AI.
- Ina whirihorahia te VLAN hei pūtake SPAN (e kiia ana ko te VSPAN) me ngā kōwhiringa tomo me te putanga kua whirihorahia, ka tukuna ngā mōkihi tārua mai i te tauranga pūtake mena ka whakawhitihia ngā mōkihi i roto i te VLAN kotahi. Ko tētahi tārua o te mōkihi nō te waka tomo i runga i te tauranga tomo, ā, ko tētahi atu tārua o te mōkihi nō te waka putanga i runga i te tauranga putanga.
- Ka aroturukihia anake e te VSPAN ngā waka e wehe atu ana, e tomo ana rānei ki ngā tauranga Papa 2 o te VLAN.
Mamao SPAN (RSPAN)
He rite te Remote SPAN (RSPAN) ki te SPAN, engari e tautoko ana i ngā tauranga pūtake, ngā VLAN pūtake, me ngā tauranga ūnga i runga i ngā pana rerekē, e whakarato ana i te aroturuki mamao i ngā waka mai i ngā tauranga pūtake kua tohatohahia ki runga i ngā pana maha, ā, ka taea ai e te ūnga te pokapū i ngā taputapu hopu whatunga. Ka haria e ia wātū RSPAN te waka SPAN mā runga i tētahi RSPAN VLAN motuhake kua tohua e te kaiwhakamahi i roto i ngā pana katoa e whai wāhi ana. Kātahi ka honoa tēnei VLAN ki ētahi atu pana, ka taea ai te kawe i te waka wātū RSPAN puta noa i ngā pana maha, ka tukuna ki te teihana hopu ūnga. Kei roto i te RSPAN tētahi wātū pūtake RSPAN, tētahi RSPAN VLAN, me tētahi wātū ūnga RSPAN.
Ngā aratohu, ngā here rānei ki te RSPAN:
- Me whirihora he VLAN motuhake mō te ūnga SPAN ka whakawhiti i roto i ngā pana waenga mā roto i ngā hononga matua ki te tauranga ūnga.
- Ka taea te waihanga i te momo pūtake kotahi – kia kotahi te tauranga, kia kotahi rānei te VLAN engari kāore e taea te whakakotahi.
- Ko te ūnga mō te wātū ko RSPAN VLAN kaua ko te tauranga kotahi i roto i te whakawhiti, nō reira ka whiwhi ngā tauranga katoa i roto i te RSPAN VLAN i te waka whakaata.
- Whirihorahia tētahi VLAN hei VLAN RSPAN mena ka tautokohia e ngā taputapu whatunga katoa te whirihoranga o ngā VLAN RSPAN, ā, ka whakamahia te VLAN RSPAN kotahi mō ia wātū RSPAN
- Ka taea e te VTP te hora i te whirihoranga o ngā VLAN tau 1 ki te 1024 hei RSPAN VLAN, me whirihora ā-ringa ngā VLAN tau teitei ake i te 1024 hei RSPAN VLAN i runga i ngā pūrere whatunga pūtake, takawaenga, me te ūnga katoa.
- Kua monoa te ako wāhitau MAC i roto i te RSPAN VLAN.
SPAN mamao kua whakakīia (ERSPAN)
Mā te SPAN mamao kua whakakīia (ERSPAN) ka kawea mai te whakakīia ara whānui (GRE) mō ngā waka katoa kua hopukina, ā, ka taea hoki te whakawhānui puta noa i ngā rohe Papa 3.
He ERSPANCisco rangatiraāhuatanga, ā, e wātea ana ki ngā tūāpapa Catalyst 6500, 7600, Nexus, me ASR 1000 anake tae noa ki tēnei wā. Ka tautokona e te ASR 1000 te pūtake ERSPAN (aroturuki) i runga i te Fast Ethernet, Gigabit Ethernet, me ngā atanga tauranga-hongere anake.
Ngā aratohu, ngā here rānei ki te ERSPAN:
- Kāore ngā wātū pūtake ERSPAN e tārua i ngā waka kua whakaurua ki te ERSPAN GRE mai i ngā tauranga pūtake. Ka taea e ia wātū pūtake ERSPAN te whai tauranga, VLAN rānei hei pūtake, engari kāore e rua.
- Ahakoa te rahi o te MTU kua whirihorahia, ka hangaia e te ERSPAN ngā mōkihi Papa 3 ka roa pea ki te 9,202 paita. Tērā pea ka whakatakahia te rere o te ERSPAN e tētahi atanga i roto i te whatunga e whakamana ana i te rahi MTU iti iho i te 9,202 paita.
- Kāore a ERSPAN e tautoko i te wehewehenga o ngā mōkihi. Kei roto i te pane IP o ngā mōkihi ERSPAN te moka "kaua e wehewehe". Kāore e taea e ngā wātū ūnga ERSPAN te whakakotahi anō i ngā mōkihi ERSPAN kua wehewehea.
- Mā te ERSPAN ID ka wehewehea te waka ERSPAN e tae mai ana ki te wāhitau IP ūnga kotahi mai i ngā wāhanga pūtake ERSPAN rerekē; me ōrite te ERSPAN ID whirihorahia i runga i ngā pūrere pūtake me ngā pūrere ūnga.
- Mō tētahi tauranga pūtake, mō tētahi VLAN pūtake rānei, ka taea e te ERSPAN te aroturuki i te urunga, te putanga, te urunga me te putanga rānei o ngā waka. Mā te taunoa, ka aroturukihia e te ERSPAN ngā waka katoa, tae atu ki ngā anga maha-whakaata me te Bridge Protocol Data Unit (BPDU).
- Ko ngā atanga kauhanga e tautokona ana hei tauranga pūtake mō tētahi wātū pūtake ERSPAN ko GRE, IPinIP, SVTI, IPv6, IPv6 over IP kauhanga, Multipoint GRE (mGRE) me Secure Virtual Tunnel Interfaces (SVTI).
- Kāore te kōwhiringa tātari VLAN e mahi i roto i tētahi wā aroturuki ERSPAN i runga i ngā atanga WAN.
- Ka tautokona e te ERSPAN i runga i ngā Pouara Raupapa Cisco ASR 1000 ngā atanga Papa 3 anake. Kāore e tautokona ngā atanga Ethernet i runga i te ERSPAN ina whirihorahia hei atanga Papa 2.
- Ina whirihorahia he wātū mā te whirihoranga ERSPAN CLI, kāore e taea te whakarerekē i te ID wātū me te momo wātū. Hei whakarerekē i a rāua, me whakamahi tuatahi koe i te puka no o te whakahau whirihoranga hei tango i te wātū, kātahi ka whirihora anō i te wātū.
- Cisco IOS XE Putanga 3.4S :- Ka tautokona te aroturuki i ngā mōkihi kauhanga kāore i tiakina e te IPsec i runga i ngā atanga kauhanga IPv6 me te IPv6 i runga i te IP ki ngā wātū pūtake ERSPAN anake, kaua ki ngā wātū ūnga ERSPAN.
- Cisco IOS XE Release 3.5S, i tāpirihia te tautoko mō ēnei momo atanga WAN hei tauranga pūtake mō tētahi wātū pūtake: Serial (T1/E1, T3/E3, DS0), Packet over SONET (POS) (OC3, OC12) me Multilink PPP (i tāpirihia ngā kupumatua multilink, pos, me te raupapa ki te whakahau atanga pūtake).
Te whakamahi i te ERSPAN hei SPAN ā-Rohe:
Hei whakamahi i te ERSPAN hei aroturuki i te rere o ngā raraunga mā roto i tētahi, neke atu rānei o ngā tauranga, i ngā VLAN rānei i roto i te pūrere kotahi, me waihanga he pūtake ERSPAN me ngā wātū ūnga ERSPAN i roto i te pūrere kotahi, ka puta te rere o ngā raraunga i roto i te pouara, he rite ki tērā i roto i te SPAN ā-rohe.
Ko ngā āhuatanga e whai ake nei ka whai pānga i te wā e whakamahi ana i te ERSPAN hei SPAN ā-rohe:
- He rite tonu te ERSPAN ID o ngā wāhanga e rua.
- He rite tonu te wāhitau IP o ngā wātū e rua. Ko tēnei wāhitau IP ko te wāhitau IP o ngā pouara; arā, ko te wāhitau IP whakamuri, ko te wāhitau IP rānei i whirihorahia i runga i tētahi tauranga.
| (whirihoranga)# aroturuki wātū 10 momo erspan-pūtake |
| (config-mon-erspan-src)# atanga pūtake Gig0/0/0 |
| (config-mon-erspan-src)# ūnga |
| (config-mon-erspan-src-dst)# wāhitau ip 10.10.10.1 |
| (config-mon-erspan-src-dst)# wāhitau ip taketake 10.10.10.1 |
| (config-mon-erspan-src-dst)# erspan-id 100 |
Wā tuku: 28 o Ākuhata-2024
