I-Network Packet Broker Yokuthwebula Ukushintsha Kwethrafikhi ku-SPAN, RSPAN kanye ne-ERSPAN

I-SPAN

Ungasebenzisa umsebenzi we-SPAN ukuze ukopishe amaphakethe kusuka embobeni ethile uye kwenye imbobo ekushintsheni okuxhunywe kudivayisi yokuqapha inethiwekhi ukuze kuqashwe inethiwekhi nokuxazulula inkinga.

I-SPAN ayithinti ukushintsha kwephakethe phakathi kwembobo yomthombo kanye nembobo okuyiwa kuyo.Wonke amaphakethe angenayo nakhiphayo esuka embobeni yomthombo akopishelwa embobeni okuyiwa kuyo.Nokho, uma ithrafikhi yesibuko idlula umkhawulokudonsa wembobo okuyiwa kuyo, isibonelo, uma imbobo yendawo engu-100Mbps iqapha ithrafikhi yembobo yomthombo engu-1000Mbps, amaphakethe angase alahlwe.

I-RSPAN

I-Remote port mirroring (RSPAN) iyisandiso se-port mirroring yasendaweni (SPAN).Isibuko sembobo esikude siphula umkhawulo wokuthi imbobo yomthombo kanye nembobo okuyiwa kuyo kufanele kube kudivayisi efanayo, okuvumela imbobo yomthombo kanye nembobo okuyiwa kuyo ukuthi isebenzise amadivayisi amaningi enethiwekhi.Ngale ndlela, umlawuli wenethiwekhi angakwazi ukuhlala egumbini lempahla emaphakathi futhi abheke amaphakethe wedatha wembobo yezibuko ekude nge-analyzer.

I-RSPANidlulisa wonke amaphakethe anezibuko endaweni okuyiwa kuyo yedivayisi yesibuko Esikude nge-VLAN ekhethekile ye-RSPAN(ebizwa ngokuthi i-Remote VLAN) Izindima zamadivayisi ziwela ezigabeni ezintathu:

1) Ukushintsha Umthombo: Imbobo yeswishi yomthombo wesithombe esikude, inesibopho sekhophi yomlayezo wembobo yomthombo ophuma kokuphumayo kwembobo yeswishi yomthombo, ngokudluliswa kwe-VLAN yesilawuli kude, dlulisela phakathi noma ukushintsha.

2) I-Intermediate Switch: kunethiwekhi ephakathi komthombo nendawo yokushintsha, shintsha, isibuko ngokudluliswa kwephakethe le-Remote VLAN uye kokulandelayo noma ukushintsha phakathi.Uma iswishi yomthombo ixhunywe ngokuqondile kuswishi yendawo, akukho ukushintsha okuphakathi okukhona.

3) Ukushintsha Indawo: Imbobo yeswishi yesibuko esikude, isibuko esivela ku-Remote VLAN ukuze sithole umlayezo ngembobo yesibuko esiyiwa kuyo ukuze kuqashwe okokusebenza.

ERSPAN

I-Ecapsulated Remote port mirroring (ERSPAN) iyisandiso se-remote port mirroring (RSPAN).Kuseshini evamile yesibuko sembobo ekude, amaphakethe anezibuko angadluliswa kuphela Kusendlalelo 2 futhi awakwazi ukudlula kunethiwekhi enomzila.Kuseshini yokubona isibuko sembobo ekude, amaphakethe anezibuko angadluliselwa phakathi kwamanethiwekhi ahanjiswayo.

I-ERSPAN ihlanganisa wonke amaphakethe anezibuko kumaphakethe e-IP ngomhubhe we-GRE futhi iwaqondise endaweni okuyiwa kuyo yedivayisi yesibuko esikude.Imisebenzi yedivayisi ngayinye ihlukaniswe izigaba ezimbili:

1) Ukushintsha Umthombo: imbobo yomthombo weswishi yesithombe esikude, inesibopho sekhophi yomlayezo wembobo yomthombo ophuma kokuphumayo kwembobo yokushintsha umthombo, nge-GRE efakwe phakathi kokudlulisela iphakethe le-IP, ukudlulisa amaswishi aye enjongweni.

2) Ukushintsha Indawo: i-encapsulation yesibuko esikude lapho kuyiwa khona port of switch, izothola umlayezo ngembobo yesibuko esiyiwa kuyo, ngemva kokudluliselwa komlayezo we-GRE ukuze kuqashwe okokusebenza.

Ukuze usebenzise umsebenzi wokubukisa ngembobo ekude, amaphakethe e-IP ahlanganiswe yi-GRE kumele ahambiseke kudivayisi yesibuko yendawo okuyiwa kuyo kunethiwekhi.

dbf

Okukhiphayo kwePakethe Encapsulation
Isekelwe ukuze ihlanganise noma yimaphi amaphakethe ashiwo kuthrafikhi ethwebuliwe kunhlokweni ye-RSPAN noma ye-ERSPAN futhi ikhiphe amaphakethe kusistimu yokuqapha engemuva noma iswishi yenethiwekhi.

 

bf

Ukunqanyulwa kwephakethe le-Tunnel
Kusekelwe umsebenzi wokunqanyulwa kwephakethe lomhubhe, elingamisa amakheli e-IP, imaski, izimpendulo ze-ARP, nezimpendulo ze-ICMP zezimbobo zokufaka ithrafikhi.Ithrafikhi ezoqoqwa kunethiwekhi yomsebenzisi ithunyelwa ngokuqondile kudivayisi ngokusebenzisa izindlela zokuhlanganisa umhubhe njenge-GRE, GTP, ne-VXLAN

 

mgf

I-VxLAN, VLAN, GRE, MPLS Header Stripping
Kusekelwe unhlokweni we-VxLAN, VLAN, GRE, MPLS ehlutshiwe ephaketheni ledatha langempela kanye nokuphumayo okudluliselwa phambili.

I-ML-NPB-5060 集中采集


Isikhathi sokuthumela: Jan-03-2023