案例圖:
Sw1配置:
mirroring-group 1 remote-source
mirroring-group 1 mirroring-port e1/0/10 inbound
mirroring-group 1 mirroring-port e1/0/20 outbound
vlan 10
remote-probe vlan enable
quit
mirroring-group 1 reflector-port e1/0/5 #反射端口
mirroring-group 1 remote-probe vlan 10
inter e1/0/1
port link-type trunk
port trunk permit vlan 10
Sw2配置:
vlan 10
remote-probe vlan enable
inter e/1/0/1
port link-type trunk
port trunk permit vlan 10
inter e1/0/2
port link-type trunk
port trunk permit vlan 10
sw2測試:
Sw3配置:
vlan 10
remote-probe vlan enable
inter e1/0/2
port link-type trunk
port trunk permit vlan 10
quit
mirroring-group 1 remote-destination
mirroring-group 1 monitor-port e1/0/24
mirroring-group 1 remote-probe vlan 10
sw3測試:
下面是ip地址爲192.168.10.66的用戶登陸到ip地址爲192.168.10.2的用戶的
FTP服務器上:
登陸成功。
下面是用snif抓包工具抓包: