远程镜像RSPAN的配置

远程镜像RSPAN的配置组网需求：SwitchA为目的交换机，SwitchA通过GigabitEthernet1/1/2和监控设备PC2相连，GigabitEthernet1/1/2为镜像目的端口，SwitchB为中间交换机，SwitchA的Trunk端口GigabitEthernet1/1/1和SwitchB的Trunk端口GigabitEthernet1/1/1相连，SwitchB的Trunk端口GigabitEthernet1/1/2和SwitchC的Trunk端口GigabitEthernet1/1/1相连，SwitchC为源交换机，SwitchC的端口GigabitEthernet1/1/2和PC1相连，GigabitEthernet1/1/2为镜像源端口，定义GigabitEthernet1/1/3为反射端口。组网图：SwItchC SwitchB SwitchA配置步骤：SwitchC的配置：进入系统视图<SwitchC>system-view创建并进入VLAN10，设置VLAN10为remote-probevlan[SwitchC]vlan10[SwitchC-vlan10]remote-probevlanenable[SwitchC-vlan10]quit进入G1/1/1端口视图[SwitchC]interfaceGigabitEthernet1/1/1设置端口为trunk，并允许vlan10通过[SwitchC-GigabitEthernet1/1/1]porttrunkpermitvlan10[SwitchC-GigabitEthernet1/1/1]quit设置远程源镜像组[SwitchC]mirroring-group1remote-source设置G1/1/2为源端口，并对进方向报文进行监控[SwitchC]mirroring-group1mirroring-portGigabitEthernet1/1/2inbound设置G1/1/3为远程反射端口[SwitchC]mirroring-group1reflector-portGigabitEthernet1/1/38.设置镜像组1的remote-probevlan为10[SwitchC]mirroring-group1remote-probevlan10SwitchB的配置：1.设置vlan10为remote-probevlan[SwitchB]vlan10[SwitchB-vlan10]remote-probevlanenable[SwitchB-vlan10]quit将端口G1/1/1设为trunk口并允许vlan10通过[SwitchB]interfaceGigabitEthernet1/1/1[SwitchB-GigabitEthernet1/1/1]portlink-typetrunk[SwitchB-GigabitEthernet1/1/1]porttrunkpermitvlan10[SwitchB-GigabitEthernet1/1/1]quit将端口G1/1/2设为trunk口并允许vlan10通过[SwitchB]interfaceGigabitEthernet1/1/2[SwitchB-GigabitEthernet1/1/2]portlink-typetrunk[SwitchB-GigabitEthernet1/1/2]porttrunkpermitvlan10SwitchA的配置：1.设置vlan10为remote-probevlan[SwitchA]vlan10[SwitchA-vlan10]remote-probevlanenable[SwitchA-vlan10]quit2.将端口G1/1/1设为trunk口并允许vlan10通过[SwitchA-GigabitEthernet1/1/1]porttrunkpermitvlan10[SwitchA-GigabitEthernet1/1/1]quit设置远程监控镜像组[SwitchA]mirroring-group1remote-destination设置端口G1/1/2为监控端口[SwitchA]mirroring-group1monitor-portGigabitEthernet1/1/25.设置镜像组1的remote-probevlan为10[SwitchA]mirroring-group1remote-probevlan10配置关键点：1.不能将缺省VLAN、管理VLAN设置成Remote-probevlan；需要通过配置保证Remote-probeVLAN从源交换机到目的交换机的二层