取消
显示结果 
搜索替代 
您的意思是: 
cancel
964
查看次数
10
有帮助
2
回复

N9372-PX 交换机做TAP交换机入流量和出流量不匹配。

custertroy_fr
Level 1
Level 1

如题:

使用9372做为TAP交换机,其中1-13接口连接了镜像源,把这些流量发给47和48口,发现1-13口input流量为15G左右,但是在47和48口的出流量加一起只有3G左右,这是什么原因。

配置如下:

ip access-list TAP-ANQUANZU
statistics per-entry
10 permit udp any any redirect Ethernet1/48
20 permit tcp any any redirect Ethernet1/48
30 permit icmp any any redirect Ethernet1/48
40 permit ip any any redirect Ethernet1/48
50 remark TAP-ANQUANZU-to-E1/48


ip access-list TAP-ANQUANZU-E1/47
statistics per-entry
10 permit udp any any redirect Ethernet1/47
20 permit tcp any any redirect Ethernet1/47
30 permit icmp any any redirect Ethernet1/47
40 permit ip any any redirect Ethernet1/47

 

mac access-list TAP-MAC
statistics per-entry
10 permit any any redirect Ethernet1/48

 

interface Ethernet1/1-5
ip port access-group TAP-ANQUANZU-E1/47 in
mac port access-group TAP-MAC
switchport mode trunk
mode tap-aggregation
spanning-tree bpdufilter enable

 

interface Ethernet1/6-13
ip port access-group TAP-ANQUANZU in
mac port access-group TAP-MAC
switchport mode trunk
mode tap-aggregation
spanning-tree bpdufilter enable

 

hardware access-list tcam region ifacl 512 double-wide
hardware access-list tcam region qos 0
hardware access-list tcam region vacl 0
hardware access-list tcam region e-racl 0
hardware access-list tcam region span 0
hardware access-list tcam region vpc-convergence 0
hardware access-list tcam region mac-ifacl 512

 

show version

Software
BIOS: version 07.34
NXOS: version 7.0(3)I2(2a)
BIOS compile time: 08/11/2015
NXOS image file is: bootflash:///nxos.7.0.3.I2.2a.bin

 

2 条回复2

custertroy_fr
Level 1
Level 1

我顶

custertroy_fr
Level 1
Level 1

我再顶

快捷链接