SPAN
Iwe unogona kushandisa iyo SPAN basa kukopa mapaketi kubva pane yakatarwa chiteshi kuenda kune imwe chiteshi pane switch yakabatana kune network yekutarisa mudziyo wetiweki yekutarisa uye kugadzirisa matambudziko.
SPAN haikanganise kuchinjanisa kwepaketi pakati penzvimbo yechiteshi nechiteshi chekuenda. Ese mapaketi anopinda uye anobuda kubva kusource port anokopwa kunzvimbo yekuenda. Nekudaro, kana iyo miratidzo traffic yakapfuura bandwidth yechiteshi chekuenda, semuenzaniso, kana iyo 100Mbps yekuenda chiteshi ichiongorora traffic ye1000Mbps source port, mapaketi anogona kuraswa.
RSPAN
Remote port mirroring (RSPAN) ndiko kuwedzera kwenzvimbo yechiteshi chemirroring (SPAN). Remote port mirroring inotyora muraudzo wekuti chiteshi nechiteshi chinofanira kunge chiri pamudziyo mumwe chete, zvichiita kuti chiteshi chezvikepe uye nzvimbo yekusvika ikwanise kutenderedza midziyo yakawanda inetiweki. Nenzira iyi, maneja wetiweki anogona kugara mukamuri repakati remidziyo uye otarisa mapaketi edatha echiteshi chemiratidzo chiri kure kuburikidza neanalyzer.
RSPANinotumira mapaketi ese akamisikidzwa kuenda kuchiteshi cheRemote mirroring mudziyo kuburikidza neyakakosha RSPAN VLAN (inonzi Remote VLAN) Mabasa emidziyo anowira mumapoka matatu:
1) Source Shandura: Remote mufananidzo sosi chiteshi chekuchinja, ine basa reiyo kopi yekubva pachiteshi meseji kubva kune sosi switch inobuda pachiteshi chinobuda, kuburikidza neRemote VLAN kutumira, kuendesa pakati kana kushandura.
2) Yepakati Shandura: mune network pakati pechitubu uye kwekuenda chinja, chinja, girazi kuburikidza Remote VLAN pakiti kutumira kune inotevera kana kushandura pakati. Kana iyo sosi switch yakabatana zvakananga kune kwainochinja, hapana yepakati switch iripo.
3) Kwekuenda Chinja: Remote girazi rekuenda chiteshi chekuchinja, girazi kubva Remote VLAN kuti ugamuchire meseji kuburikidza negirazi rekuenda chiteshi chemberi chekutarisa michina.
ERSPAN
Encapsulated Remote port mirroring (ERSPAN) ndeyekuwedzerwa kweremote port mirroring (RSPAN). Mune yakajairwa kure kure port mirroring chikamu, magirazi mapaketi anogona kutapurirana chete paLayer 2 uye haakwanise kupfuura nenetiweki yakafambiswa. Mune yakavharirwa kure chiteshi chemiratidzo chikamu, miratidzo mapaketi anogona kutapurirana pakati penzira dzakafambiswa.
ERSPAN inovharira mapaketi ese ane magirazi mumapakeji eIP kuburikidza neGRE tunnel uye inoaendesa kunzvimbo yekuenda kune iri kure girazi mudziyo. Mabasa echigadzirwa chimwe nechimwe akakamurwa kuita mapoka maviri:
1) Source Shandura: encapsulation iri kure mufananidzo sosi chiteshi chekuchinja, ine basa rekopi yeiyo sosi yechiteshi meseji kubva kune sosi switch inobuda pachiteshi kubuda, kuburikidza neGRE yakavharirwa muIP packet kutumira, kuendesa switch kune chinangwa.
2) Kwekuenda Chinja: encapsulation kure girazi kwainoenda chiteshi chekuchinja, inogashira meseji kuburikidza negirazi regirazi rekuenda port, mushure mekushomeka GRE meseji inotumirwa kuti itarise michina.
Kuti uite iyo iri kure port mirroring basa, IP mapaketi akavharidzirwa neGRE anofanirwa kuchinjika kuenda kunzvimbo yekuona girazi pane network.
Packet Encapsulation output
Inotsigirwa kuti ivhare chero mapaketi akatsanangurwa mutraffic yakatorwa kuenda kuRSPAN kana ERSPAN musoro uye kuburitsa mapaketi kuseri-kumagumo monitoring system kana network switch.
Tunnel Packet Kugumisa
Yakatsigira iyo tunnel packet yekumisa basa, iyo inogona kugadzirisa IP kero, masks, ARP mhinduro, uye ICMP mhinduro dzetraffic yekupinza ports. Traffic ichaunganidzwa pane network yevashandisi inotumirwa zvakananga kuchishandiso kuburikidza netunnel encapsulation nzira dzakadai seGRE, GTP, uye VXLAN.
VxLAN, VLAN, GRE, MPLS Header Stripping
Yakatsigira iyo VxLAN, VLAN, GRE, MPLS musoro wakabviswa muyekutanga data packet uye kutumirwa kuburitsa.
Nguva yekutumira: Jan-03-2023
