Umthengisi weePakethi zeNethiwekhi uza kubamba iTrafikhi yoTshintsho kwi-SPAN, RSPAN kunye ne-ERSPAN

I-SPAN

Ungasebenzisa umsebenzi we-SPAN ukukopa iipakethi ukusuka kwizibuko elithile ukuya kwelinye izibuko kwiswitshi eqhagamshelwe kwisixhobo sokujonga inethiwekhi ukuze kujongwe kwaye kulungiswe iingxaki zenethiwekhi.

I-SPAN ayichaphazeli ukutshintshiselana kweepakethi phakathi kwezibuko lomthombo kunye nezibuko lendawo ekuyiwa kuyo. Zonke iipakethi ezingenayo neziphumayo kwizibuko lomthombo zikopishwa kwizibuko lendawo ekuyiwa kuyo. Nangona kunjalo, ukuba ithrafikhi ebonisiweyo idlula umda we-bandwidth yezibuko lendawo ekuyiwa kuyo, umzekelo, ukuba izibuko lendawo ekuyiwa kuyo le-100Mbps lijonga ithrafikhi yezibuko lomthombo le-1000Mbps, iipakethi zinokulahlwa.

I-RSPAN

Ukuzijonga ii-port mirroring ezikude (RSPAN) kukwandiswa kwe-local port mirroring (SPAN). Ukuzijonga ii-port mirroring ezikude kuyaphula umda wokuba i-source port kunye ne-destination port kufuneka zibe kwisixhobo esinye, nto leyo evumela i-source port kunye ne-destination port ukuba zijikeleze izixhobo ezininzi zenethiwekhi. Ngale ndlela, umlawuli wenethiwekhi unokuhlala kwigumbi lezixhobo eliphakathi aze ajonge iipakethi zedatha ze-remote mirroring port nge-analyzer.

I-RSPANithumela zonke iipakethi ezibonisiweyo kwizibuko eliya kwindawo yesixhobo sokubukisa esikude nge-RSPAN VLAN ekhethekileyo (ebizwa ngokuba yi-Remote VLAN). Iindima zezixhobo zahlulwe zibe ziindidi ezintathu:

1) Iswitshi yoMthombo: Iswitshi yomthombo womfanekiso okude, inoxanduva lwekopi yomyalezo weswitshi yomthombo ovela kwiswitshi yomthombo, ngokusebenzisa i-Remote VLAN forwarding, idlulisele embindini okanye ekutshintsheni.

2) Iswitshi esiPhakathi: kwinethiwekhi ephakathi kweswitshi yomthombo kunye nendawo oya kuyo, switshi, jonga nge-Remote VLAN packet transmission ukuya kwenye okanye ukuze utshintshele embindini. Ukuba iswitshi yomthombo iqhagamshelwe ngqo kwindawo oya kuyo, akukho switshi ephakathi ekhoyo.

3) Iswitshi Yokufikela: Isango leswitshi elikude, isibuko esivela kwi-VLAN ekude ukuze kufumaneke umyalezo ngesango leswitshi eliya kwisibuko ukuze kujongwe izixhobo.

I-ERSPAN

I-Encapsulated Remote port mirroring (ERSPAN) lulwandiso lwe-remote port mirroring (RSPAN). Kwiseshoni eqhelekileyo ye-remote port mirroring, iipakethi ezibonisiweyo zinokudluliselwa kuphela kwi-Layer 2 kwaye azinakudlula kwinethiwekhi ejikeleziweyo. Kwiseshoni ye-encapsulated remote port mirroring, iipakethi ezibonisiweyo zinokudluliselwa phakathi kweenethiwekhi ezijikeleziweyo.

I-ERSPAN ihlanganisa zonke iipakethi ezibonisiweyo kwiipakethi ze-IP nge-tunnel ye-GRE ize izithumele kwizibuko eliya kwindawo yesixhobo sokubukisa esikude. Iindima zesixhobo ngasinye zahlulwe zibe ziindidi ezimbini:

1) Iswitshi yoMthombo: i-encapsulation yi-remote image source port yeswitshi, inoxanduva lwekopi yomyalezo we-source port ovela kwi-source switch output port output, nge-GRE encapsulated kwi-IP packet forwarding, i-transfer switches to purpose.

2) Iswitshi Yokufikela: i-encapsulation remote mirror destination port yeswitshi, iya kufumana umyalezo nge-mirror mirror destinationport, emva kokususa i-capsulation umyalezo we-GRE uthunyelwe kwizixhobo zokubeka esweni.

Ukuze kuphunyezwe umsebenzi wokujonga izibuko ezikude, iipakethi ze-IP ezifakwe yi-GRE kufuneka zihanjiswe ziye kwisixhobo sokujonga indawo ekuyo kwinethiwekhi.

i-dbf

Imveliso yePakethi yokuVala
Ixhaswa ukugquma naziphi na iipakethi ezichaziweyo kwitrafikhi ebanjiweyo kwi-RSPAN okanye kwi-ERSPAN header kwaye ikhuphe iipakethi kwinkqubo yokubeka esweni emva okanye kwiswitshi yenethiwekhi

 

bf

Ukupheliswa kwePakethi yeTunnel
Ixhase umsebenzi wokuphelisa ipakethi yetonela, onokumisela iidilesi ze-IP, iimaski, iimpendulo ze-ARP, kunye neempendulo ze-ICMP kwiipoti zokufaka ithrafikhi. Ithrafikhi eza kuqokelelwa kwinethiwekhi yomsebenzisi ithunyelwa ngqo kwisixhobo ngeendlela zokufaka itonela ezifana ne-GRE, GTP, kunye ne-VXLAN.

 

mgf

Ukuhluzwa kweentloko ze-VxLAN, VLAN, GRE, MPLS
Ixhase i-header ye-VxLAN, VLAN, GRE, MPLS ehluthwe kwiphakheji yedatha yokuqala kwaye ikhuphe imveliso ethunyelweyo.

ML-NPB-5060 集中采集


Ixesha lokuthumela: Jan-03-2023