I-Broker yePakethe yeNethiwekhi yokuThatha ukuTshintsha iTrafiki kwi-SPAN, RSPAN kunye ne-ERSPAN

I-SPAN

Ungasebenzisa umsebenzi we-SPAN ukukopa iipakethi ukusuka kwizibuko elikhankanyiweyo ukuya kwelinye izibuko kwiswitshi eqhagamshelwe kwisixhobo sokuhlola umsebenzi womnatha wokubeka iliso kunye nokusombulula ingxaki.

I-SPAN ayiluchaphazeli utshintshiselwano lwepakethi phakathi kwezibuko lemvelaphi kunye nezibuko lendawo.Zonke iipakethi ezingenayo nezikhuphayo ukusuka kwindawo yomthombo zikotshelwa kwindawo ekuyiwa kuyo.Nangona kunjalo, ukuba i-traffic ye-mirrored idlula i-bandwidth ye-port ekuyiwa kuyo, umzekelo, ukuba i-100Mbps i-port yokufikela ibeka iliso kwi-traffic ye-1000Mbps yomthombo we-port, iipakethi zingalahlwa.

RSPAN

Isibuko sesibuko esikude (RSPAN) lulwandiso lwezibuko lendawo yesipili (SPAN).Isibuko sesibuko esikude sophula uthintelo lokuba izibuko lemvelaphi kunye nezibuko lendawo kufuneka libe kwisixhobo esinye, ivumela izibuko lemvelaphi kunye nesibuko sokufikela ukuba sivule izixhobo ezininzi zomsebenzi womnatha.Ngale ndlela, umlawuli wothungelwano unokuhlala kwigumbi lesixhobo esisembindini kwaye ajonge iipakethi zedatha yezibuko elibukelwe elikude nge-analyzer.

RSPANithumela zonke iipakethe ezibukwayo kwizibuko lendawo yeRemote mirroring device nge-RSPAN VLAN ekhethekileyo (ebizwa ngokuba yi-Remote VLAN) Iindima zezixhobo ziwela kwiindidi ezintathu:

1) Ukutshintsha koMthombo: Izibuko lomthombo womfanekiso okude wokutshintsha, linoxanduva lokhuphelo lomyalezo wezibuko lomthombo ukusuka kwimveliso yomthombo wokutshintsha kwemveliso, ngokugqithisela kwi-Remote yeVLAN, thumela embindini okanye utshintshe.

2) Ukutshintsha okuPhakathi: kuthungelwano phakathi komthombo kunye nendawo yokuya kuyo, tshintsha, isibuko nge-Remote VLAN yokuhanjiswa kwepakethi ukuya kwelinye okanye ukutshintshela phakathi.Ukuba iswitshi yemvelaphi iqhagamshelwe ngokuthe ngqo kwindawo ekuyiwa kuyo, akukho switsha ephakathi ekhoyo.

I-3) Ukutshintshwa kwendawo ekuyiwa kuyo: Isibuko esikude sokutshintsha kwesibuko, isibuko esivela kwi-Remote VLAN ukufumana umyalezo nge-mirror yokusingisa isibuko sokudlulisa ukujonga izixhobo.

ERSPAN

Encapsulated Remote port mirroring (ERSPAN) lulwandiso lwesibuko sesibuko esikude (RSPAN).Kwiseshini yokujonga isibuko esiqhelekileyo esikude, iipakethi ezibonisiweyo zinokugqithiswa kuphela kwiNqanaba lesi-2 kwaye azikwazi ukudlula kuthungelwano olwenziwayo.Kwiseshini yokujonga isibuko esikude, iipakethi ezibonisiweyo zinokusasazwa phakathi kothungelwano oluqhutywayo.

I-ERSPAN ifaka zonke iipakethe ezinezipili kwiipakethi ze-IP ngetonela ye-GRE kwaye izikhombe kwizibuko lesixhobo sokujonga isipili esikude.Iindima zesixhobo ngasinye zohlulwe zibe ziindidi ezimbini:

I-1) Ukutshintsha komthombo: i-encapsulation ye-port ye-port ye-port ye-port yokutshintsha, inoxanduva lwekopi yomyalezo we-port yemvelaphi evela kwi-output ye-output ye-port ye-output, nge-GRE efakwe kwi-IP yokudlulisa ipakethi, ukutshintshwa kokutshintshwa kwinjongo.

I-2) Ukutshintsha kwendawo ekuyiwa kuyo: i-encapsulation ye-remote mirror indawo yokutshintsha i-port yokutshintsha, iya kufumana umyalezo ngesibuko sokuya kwisibuko, emva kokukhutshwa komyalezo we-GRE othunyelwe ukujonga izixhobo.

Ukuphumeza umsebenzi wokujonga isibuko esikude, iipakethi ze-IP ezigqunywe yi-GRE kufuneka zihanjiswe kwisixhobo sokujonga isipili kwinethiwekhi.

dbf

Packet Encapsulation output
Ixhaswe ukuba ifake naziphi na iipakethi ezikhankanyiweyo kwitrafikhi ethathiweyo ukuya kwi-RSPAN okanye kwi-ERSPAN header kwaye ikhuphe iipakethe kwi-back-end monitoring system okanye network switch

 

bf

Ukupheliswa kwePakethi yeTunnel
Ixhaswe umsebenzi wokuphelisa ipakethe yetonela, enokuthi iqwalasele iidilesi ze-IP, iimaski, iimpendulo ze-ARP, kunye neempendulo ze-ICMP kwii-port input port.I-traffic eya kuqokelelwa kuthungelwano lomsebenzisi ithunyelwa ngokuthe ngqo kwisixhobo ngokusebenzisa iindlela zokugquma itonela ezifana neGRE, GTP, kunye neVXLAN.

 

mgf

VxLAN, VLAN, GRE, MPLS Header Stripping
Ixhaswe i-VxLAN, i-VLAN, i-GRE, i-header ye-MPLS ehluthwe kwipakethi yedatha yokuqala kunye nesiphumo esithunyelwe.

ML-NPB-5060 集中采集


Ixesha lokuposa: Jan-03-2023