I-SPAN
Ungasebenzisa umsebenzi we-SPAN ukukopa iipakethi ukusuka kwizibuko elikhankanyiweyo ukuya kwelinye izibuko kwiswitshi eqhagamshelwe kwisixhobo sokuhlola umsebenzi womnatha wokubeka iliso kunye nokusombulula ingxaki.
I-SPAN ayiluchaphazeli utshintshiselwano lwepakethi phakathi kwezibuko lemvelaphi kunye nezibuko lendawo. Zonke iipakethi ezingenayo nezikhuphayo ukusuka kwindawo yomthombo zikotshwa kwindawo ekuyiwa kuyo. Nangona kunjalo, ukuba i-traffic ye-mirrored idlula i-bandwidth ye-port ekufikeni, umzekelo, ukuba i-100Mbps i-port yokufikela ibeka iliso kwi-traffic ye-1000Mbps yomthombo we-port, iipakethi zingalahlwa.
RSPAN
Izibuko lezibuko elikude (RSPAN) lulwandiso lwezibuko lendawo yesipili (SPAN). Isibuko sesibuko esikude sophula uthintelo lokuba izibuko lemvelaphi kunye nezibuko lendawo kufuneka libe kwisixhobo esinye, ivumela izibuko lemvelaphi kunye nesibuko sokufikela ukuba sivule izixhobo ezininzi zomsebenzi womnatha. Ngale ndlela, umlawuli wothungelwano unokuhlala kwigumbi lesixhobo esisembindini kwaye ajonge iipakethi zedatha yezibuko elibukelwe elikude nge-analyzer.
RSPANithumela zonke iipakethe ezibukwayo kwizibuko lendawo yeRemote mirroring device nge-RSPAN VLAN ekhethekileyo (ebizwa ngokuba yi-Remote VLAN) Iindima zezixhobo ziwela kwiindidi ezintathu:
1) Ukutshintsha koMthombo: Izibuko lomthombo womfanekiso okude wokutshintsha, linoxanduva lokhuphelo lomyalezo wezibuko lomthombo osuka kwimveliso yomthombo wokutshintsha kwemveliso, ngokugqithisela kwi-Remote VLAN, thumela embindini okanye utshintshe.
2) Ukutshintsha okuPhakathi: kuthungelwano phakathi komthombo kunye nendawo yokuya kuyo, tshintsha, isibuko nge-Remote VLAN yokuhanjiswa kwepakethi ukuya kwelinye okanye ukutshintshela phakathi. Ukuba iswitshi yemvelaphi iqhagamshelwe ngokuthe ngqo kwindawo ekuyiwa kuyo, akukho switsha ephakathi ekhoyo.
I-3) Ukutshintshwa kwendawo ekuyiwa kuyo: Isibuko esikude sokutshintsha kwesibuko, isibuko esivela kwi-Remote VLAN ukufumana umyalezo nge-mirror yokusingisa isibuko sokudlulisa ukujonga izixhobo.
ERSPAN
Encapsulated Remote port mirroring (ERSPAN) lulwandiso lwesibuko sesibuko esikude (RSPAN). Kwiseshini eqhelekileyo yokujonga isibuko esikude, iipakethi ezibonisiweyo zinokugqithiswa kuphela kuLuhlu 2 kwaye azikwazi ukudlula kuthungelwano olwenziwayo. Kwiseshini yokujonga isibuko esikude, iipakethi ezibonisiweyo zinokugqithiselwa phakathi kothungelwano oluqhutywayo.
I-ERSPAN ifaka zonke iipakethe ezinezipili kwiipakethi ze-IP ngetonela ye-GRE kwaye izikhombe kwizibuko lesixhobo sokujonga isipili esikude. Iindima zesixhobo ngasinye zohlulwe zibe ziindidi ezimbini:
I-1) Ukutshintsha komthombo: i-encapsulation ye-port ye-port ye-port ye-port yokutshintsha, inoxanduva lwekopi yomyalezo we-port yemvelaphi evela kwi-output ye-output ye-port ye-output, nge-GRE efakwe kwi-IP yokudlulisa ipakethi, ukutshintshwa kokutshintshwa kwinjongo.
I-2) Ukutshintsha kwendawo ekuyiwa kuyo: i-encapsulation ye-remote mirror indawo yokutshintsha i-port yokutshintsha, iya kufumana umyalezo ngesibuko sokuya kwisibuko, emva kokukhutshwa komyalezo we-GRE othunyelwe ukujonga izixhobo.
Ukuphumeza umsebenzi wokujonga isibuko esikude, iipakethi ze-IP ezigqunywe yi-GRE kufuneka zihanjiswe kwisixhobo sokujonga isipili kwinethiwekhi.
Packet Encapsulation output
Ixhaswa ukuba ifake naziphi na iipakethi ezikhankanyiweyo kwitrafikhi ethathiweyo ukuya kwi-RSPAN okanye kwi-ERSPAN header kwaye ikhuphe iipakethi kwi-back-end monitoring system okanye network switch.
Ukupheliswa kwePakethi yeTunnel
Ixhaswe umsebenzi wokuphelisa ipakethe yetonela, enokuthi iqwalasele iidilesi ze-IP, iimaski, iimpendulo ze-ARP, kunye neempendulo ze-ICMP kwii-port input port. I-traffic eya kuqokelelwa kuthungelwano lomsebenzisi ithunyelwa ngokuthe ngqo kwisixhobo ngokusebenzisa iindlela zokugquma itonela ezifana neGRE, GTP, kunye neVXLAN.
VxLAN, VLAN, GRE, MPLS Header Stripping
Ixhaswe i-VxLAN, i-VLAN, i-GRE, i-header ye-MPLS ehluthwe kwipakethi yedatha yokuqala kunye nesiphumo esithunyelwe.
Ixesha lokuposa: Jan-03-2023