案例图:
Sw1配置:
mirroring-group 1 remote-source
mirroring-group 1 mirroring-port e1/0/10 inbound
mirroring-group 1 mirroring-port e1/0/20 outbound
vlan 10
remote-probe vlan enable
quit
mirroring-group 1 reflector-port e1/0/5 #反射端口
mirroring-group 1 remote-probe vlan 10
inter e1/0/1
port link-type trunk
port trunk permit vlan 10
Sw2配置:
vlan 10
remote-probe vlan enable
inter e/1/0/1
port link-type trunk
port trunk permit vlan 10
inter e1/0/2
port link-type trunk
port trunk permit vlan 10
sw2测试:
Sw3配置:
vlan 10
remote-probe vlan enable
inter e1/0/2
port link-type trunk
port trunk permit vlan 10
quit
mirroring-group 1 remote-destination
mirroring-group 1 monitor-port e1/0/24
mirroring-group 1 remote-probe vlan 10
sw3测试:
下面是ip地址为192.168.10.66的用户登陆到ip地址为192.168.10.2的用户的
FTP服务器上:
登陆成功。
下面是用snif抓包工具抓包: