SPAN, RSPAN, iyo ERSPAN waa farsamooyin loo isticmaalo isku xidhka si loo qabto loona kormeero taraafikada si loo baaro. Waa kan dulmar kooban mid walba:
SPAN (Falanqeeyaha Dekadda la beddelay)
Ujeeddo: Waxaa loo isticmaalaa in lagu milicsado taraafikada dekedo gaar ah ama VLAN-yada marka loo wareego deked kale si loola socdo.
Isticmaal Kiis: Ku habboon falanqaynta taraafikada maxalliga ah ee hal shididood. Gaadiidku waxa ay u milicsanayaan deked loo qoondeeyey halkaas oo falanqeeye shabakadu uu qabsan karo.
RSPAN ( SPAN fog )
Ujeedada: Waxay ku kordhisaa awoodaha SPAN dhamaan furayaasha kala duwan ee shabakada
Isticmaal Kiis: Waxay ogolaataa la socodka taraafikada ka beddelashada mid kale ee isku xidhka jirridda. Faa'iido u leh xaaladaha halka qalabka la socodka uu ku yaal beddelaad kale.
ERSPAN ( SPAN- fog fog oo la duubay)
Ujeeddo: Isku darka RSPAN iyo GRE (Generic Routing Encapsulation) si loo koobo taraafikada muraayadda leh.
Isticmaal Kiis: Waxay u ogolaataa la socodka taraafikada shabakadaha la leexiyay. Tani waxay faa'iido u leedahay naqshadaha shabakadaha adag halkaasoo taraafikada loo baahan yahay in lagu qabto qaybo kala duwan.
Isbeddelka dekedda Analyzer (SPAN) waa nidaam la socodka taraafikada oo hufan, waxqabad sare leh. Waxay hagtaa ama muraayada gaadiidka ka imanaya dekedda isha ama VLAN ilaa deked u socota. Tan waxaa mararka qaarkood loo yaqaan kormeerka fadhiga. SPAN waxa loo isticmaalaa cilad-baadhista arrimaha isku xidhka iyo xisaabinta isticmaalka shabakada iyo waxqabadka, iyo kuwo kale oo badan. Waxaa jira saddex nooc oo SPANs ah oo lagu taageerayo badeecadaha Cisco…
a. SPAN ama SPAN maxaliga ah.
b. SPAN fog (RSPAN).
c. Meel fog oo la duubay SPAN (ERSPAN).
Si aad u ogaato:"Mylinking™ Network Broker oo leh SPAN, RSPAN iyo ERSPAN Tilmaamo"
SPAN / muraayada taraafigga / muraayadda dekedda waxaa loo isticmaalaa ujeedooyin badan, hoos waxaa ku jira qaar.
- Ku dhaqangelinta IDS/IPS qaab sinada.
- xalalka duubista wicitaanka VOIP.
- Sababaha u hoggaansanaanta amniga si loola socdo loona falanqeeyo taraafikada.
- Xallinta arrimaha isku xirka, la socodka taraafikada.
Iyada oo aan loo eegin nooca SPAN ee socda, isha SPAN waxay noqon kartaa nooc kasta oo deked ah tusaale ahaan deked la wareego, deked beddelaad jireed, deked gelaysa, jir, VLAN (dhammaan dekedaha firfircoon ayaa isha lagu hayaa furaha), EtherChannel (ama deked ama deked dhan -channel interfaces) iwm Ogsoonow in deked loo habeeyey meesha SPAN eysan ka mid noqon karin isha SPAN VLAN.
Kalfadhiyada SPAN waxay taageeraan la socodka taraafikada soo galitaanka (ingress SPAN), socodka socodka (egress SPAN), ama taraafikada u qulqulaya labada jiho.
- Ingress SPAN (RX) koobiyada taraafikada ay heleen dekedaha isha iyo VLAN-yada ee dekeda loo socdo. SPAN waxay koobiyaysaa taraafikada ka hor wax ka bedel kasta (tusaale ka hor VACL ama shaandhaynta ACL, QoS ama booliska galitaanka ama egress).
- Egress SPAN (TX) waxay nuqul ka sameysaa taraafikada laga soo gudbiyo dekadaha isha iyo VLAN-yada ee la geeyo halka loo socdo. Dhammaan shaandhaynta ama wax ka beddelka la xidhiidha VACL ama filtarrada ACL, QoS ama galitaanka ama falcelinta bilayska ayaa la qaadayaa ka hor inta uusan u gudbin taraafikada dekedda u socota SPAN.
- Marka labada ereyga muhiimka ah la isticmaalo, SPAN waxay nuqul ka sameysaa taraafikada shabakadda ee ay heshay oo ay u gudbiso dekedaha isha iyo VLAN-yada dekedda loo socdo.
- SPAN/RSPAN inta badan way iska indha tirtaa CDP, STP BPDU, VTP, DTP iyo pagP. Si kastaba ha ahaatee noocyadan taraafikada waa la gudbin karaa haddii amarka nuqul ka mid ah la habeeyey.
SPAN ama SPAN maxaliga ah
SPAN muraayadaha taraafikada hal ama in ka badan oo is-dhexgal ah oo ku saabsan beddelka hal ama in ka badan oo is-dhexgal ah oo isku mid ah; Markaa SPAN inta badan waxaa loogu yeeraa SPAN MAXAALAAN.
Tilmaamaha ama xaddidaadaha SPAN maxalliga ah:
-Lakabka 2 ee dekedaha la beddeley iyo lakabka 3da dekedoodba waxa loo habayn karaa in ay noqdaan dekedo la soo jeediyo.
- Isha waxay noqon kartaa hal ama dhowr dekedood ama VLAN, laakiin maaha kuwan isku dhafan.
- Dekadaha jirdu waa dekedo ilo sax ah oo lagu qasay dekedo aan jirrid ahayn.
- Ilaa 64 dekedood oo SPAN ah ayaa lagu habeyn karaa beddelka.
- Marka aan habaynno deked ku socota, qaabaynteedii asalka ahayd waa la beddelaa. Haddii qaabeynta SPAN meesha laga saaro, qaabeynta asalka ah ee dekeddaas waa la soo celinayaa.
- Marka la habeeyo deked loo socdo, dekeddu waa laga saarayaa xidhmo kasta oo EtherChannel ah haddii ay qayb ka ahayd mid. Haddii ay ahaan lahayd deked la leexiyay, qaabaynta meesha SPAN waxay meesha ka saaraysaa qaabaynta dekeda la leexiyay.
- Dekadaha meesha la aado ma taageeraan amniga dekeda, xaqiijinta 802.1x, ama VLAN-yada gaarka ah.
- Dekeddu waxay u shaqayn kartaa sidii deked loo socdo hal fadhi oo SPAN ah.
-Dekeddu looma qaabayn karo deked loo socdo haddii ay tahay deked ilbax ah ama qayb ka mid ah isha VLAN.
- Isku xirka kanaalka dekedaha (EtherChannel) waxaa loo habeyn karaa inay noqdaan dekedo isha laakiin maaha deked u socota SPAN.
- Jihada taraafikada waa "labadaba" asal ahaan ilaha SPAN.
-Dekedaha la-socodku weligood kama qaybqaataan tusaale-geedeedka. Ma taageeri karo DTP, CDP iwm. SPAN Maxaliga ah waxa ku jira BPDUs taraafikada la kormeerayo, markaa BPDUs kasta oo lagu arko dekedda loo socdo ayaa laga soo min guuriyay dekedda isha. Markaa waligaa ha ku xidhin furaha nooca SPAN maxaa yeelay waxay sababi kartaa isku xidhka shabakada Qalabka AI wuxuu wanaajin doonaa hufnaanta shaqada, iyoAI aan la ogaan karinadeeggu wuxuu wanaajin karaa tayada qalabka AI.
- Marka VLAN loo habeeyo sida isha SPAN (inta badan loo yaqaan VSPAN) oo leh ikhtiyaarka soo gelista iyo ka bixista labadaba, baakadaha nuqul ka mid ah u soo gudbiya dekedda isha kaliya haddii baakidhyadu isku beddelaan isla VLAN. Mid ka mid ah baakidhku waxa uu ka yimid taraafikada gudaha ee dekedda soo galeysa, iyo nuqulka kale ee baakidhku waa taraafikada egress-ka ee dekedda.
- VSPAN waxay la socotaa kaliya taraafikada ka baxa ama gala lakabka 2 ee dekedaha VLAN.
SPAN fog (RSPAN)
SPAN Fog (RSPAN) waxay la mid tahay SPAN, laakiin waxay taageertaa dekedaha isha, isha VLANs, iyo dekedaha loo socdo ee furayaasha kala duwan, kuwaas oo bixiya la socodka fogaanta ee dekedaha isha ee loo qaybiyey furayaasha badan waxayna u ogolaataa meesha la rabo inay dhexdhexaadiso aaladaha qabashada shabakada. Fadhi kasta oo RSPAN ah waxa uu qaadaa taraafikada SPAN dulmaraysa isticmaale-u cayimay RSPAN VLAN ee dhammaan furayaasha ka qaybqaata. VLAN-kan ayaa markaa lagu xidhaa shixnado kale, taas oo u oggolaanaysa taraafikada fadhiga RSPAN in lagu dhex raro furayaasha badan oo la geeyo goobta qabashada. RSPAN waxay ka kooban tahay fadhiga isha RSPAN, RSPAN VLAN, iyo fadhiga RSPAN.
Tilmaamaha ama xaddidaadaha RSPAN:
-VLAN gaar ah waa in loo habeeyaa halka loo socdo SPAN kaas oo ka gudbi doona dareemada dhexe iyada oo loo marayo isku xirka jirridda ee ku wajahan dekeda loo socdo.
- Wuxuu abuuri karaa nooc isku mid ah - ugu yaraan hal deked ama ugu yaraan hal VLAN laakiin ma noqon karo isku darka.
Meesha loogu talagalay kalfadhigu waa RSPAN VLAN halkii ay ka ahaan lahayd hal deked oo beddeleysa, markaa dhammaan dekedaha ku yaal RSPAN VLAN waxay heli doonaan taraafikada muraayadda leh.
-U habee VLAN kasta sidii RSPAN VLAN ilaa inta dhamaan aaladaha shabakada ee ka qaybqaata ay taageerayaan qaabaynta RSPAN VLANs, oo isticmaal isla RSPAN VLAN fadhi kasta oo RSPAN ah
- VTP waxay faafin kartaa qaabaynta VLANs ee lambarkoodu yahay 1 ilaa 1024 sida RSPAN VLANs, waa inay gacanta ku habeeyaan VLAN-yada nambarada ka sarreeya 1024 sida RSPAN VLANs dhammaan ilaha, dhexe, iyo aaladaha shabakada meesha loo socdo.
- Barashada ciwaanka MAC waa naafo gudaha RSPAN VLAN.
Meel fog oo la duubay SPAN (ERSPAN)
SPAN (ERSPAN) oo meel fog laga soo koobay waxay u keentaa xidhidhaynta guud (GRE) dhammaan taraafikada la qabtay waxayna u ogolaataa in lagu kordhiyo qaybaha lakabka 3.
ERSPAN waa aCisco lahaanshahasifada waxaana diyaar u ah Katalyst 6500, 7600, Nexus, iyo ASR 1000 dhufto ee maanta. ASR 1000 waxa ay taageertaa isha ERSPAN (kormeerka) kaliya ee Fast Ethernet, Gigabit Ethernet, iyo isku xidhka kanaalka dekeda.
Tilmaamaha ama xaddidaadaha ERSPAN:
- Kulamada isha ERSPAN ma koobiyanayaan ERSPAN GRE taraafikada ka imaanaya dekedaha isha. Kalfadhi kasta oo ERSPAN ah wuxuu yeelan karaa dekedo ama VLANs ilo ahaan, laakiin labadaba maaha.
- Iyadoo aan loo eegin cabbir kasta oo la habeeyey ee MTU, ERSPAN waxay abuurtaa baakidh 3 lakab ah oo noqon kara ilaa 9,202 bytes. Taraafikada ERSPAN waxaa laga yaabaa inay hoos u dhigto is-dhexgal kasta oo ka jira shabakadda kaas oo xoojiya cabbirka MTU ee ka yar 9,202 bytes.
- ERSPAN ma taageerto baakooyinka kala-goynta Qaybta "ha jajabin" waxa lagu dejiyay cinwaanka IP-ga ee xidhmooyinka ERSPAN. Kulamada loo socdo ERSPAN dib isuma keeni karaan baakadaha ERSPAN ee kala go'ay.
- Aqoonsiga ERSPAN wuxuu ka soocaa taraafikada ERSPAN ee imanaysa isla cinwaanka IP-ga ee fadhiyada kala duwan ee ERSPAN ee kala duwan; Aqoonsiga ERSPAN ee habaysan waa inuu ku habboonaadaa isha iyo aaladaha loo socdo.
- Deked isha ah ama isha VLAN, ERSPAN waxay la socon kartaa soo galitaanka, ka bixida, ama labadaba gudaha iyo taraafikada. Sida caadiga ah, ERSPAN waxay la socotaa dhammaan taraafikada, oo ay ku jiraan multicast iyo Bridge Protocol Data Unit (BPDU).
- Tunnel interface oo lagu taageeray sida dekedaha isha ee fadhiga isha ERSPAN waa GRE, IPinIP, SVTI, IPv6, IPV6 dusheeda tunnel IP, Multipoint GRE (mGRE) iyo Interfaces Tunnel Virtual Tunnel (SVTI).
- Xulashada shaandhada VLAN maaha mid shaqaynaysa fadhiga kormeerka ERSPAN ee is-dhexgalka WAN.
- ERSPAN on Cisco ASR 1000 Taxanaha Routers taageertaa kaliya lakabka 3 interfaces. Isku xirka Ethernet laguma taageero ERSPAN marka loo qaabeeyey isku xidhka Lakabka 2
- Marka fadhiga lagu habeeyo qaabaynta ERSPAN CLI, aqoonsiga fadhiga iyo nooca kalfadhiga lama bedeli karo. Si aad u bedesho, waa in aad marka hore isticmaashaa qaabka qaabaynta amarka si aad meesha uga saarto fadhiga oo aad dib u habaynayso fadhiga.
Siideynta Cisco IOS XE 3.4S : - La socodka xirmooyinka tunnel-ka ee aan IPsec-ilaalin waxaa lagu taageeraa IPV6 iyo IPV6 ka badan IP tunnel interfaces kaliya fadhiyada isha ERSPAN, ma aha fadhiyada ERSPAN.
Siideynta Cisco IOS XE 3.5S, taageerada waxaa lagu daray noocyada soo socda ee WAN interfaces sida dekedaha isha ee fadhiga isha: Serial (T1/E1, T3/E3, DS0) , Xidhmada SONET (POS) (OC3, OC12) iyo Multilink PPP (multilink, pos, iyo ereyada muhiimka ah ee taxanaha ah ayaa lagu daray amarka interface isha).
Isticmaalka ERSPAN sida SPAN Maxalli ah:
Si loo isticmaalo ERSPAN si aan ula socono taraafikada hal ama ka badan oo dekedo ama VLANs isku qalab ah, waa in aan abuurno isha ERSPAN iyo fadhiyada ERSPAN ee isla aaladda, socodka xogtu waxa ay ka dhacdaa gudaha router-ka, taas oo la mid ah tan gudaha SPAN.
Qodobada soo socda ayaa lagu dabaqi karaa marka ERSPAN loo isticmaalayo SPAN maxaliga ah:
-Labada kulan waxay leeyihiin aqoonsi ERSPAN isku mid ah.
- Labada kulanba waxay leeyihiin cinwaan IP isku mid ah. Ciwaanka IP-gani waa router-yada cinwaanka IP-ga; taas oo ah, ciwaanka IP-ga loopback ama ciwaanka IP-ga ee lagu habeeyay deked kasta.
| (config) # kormeer kalfadhi 10 nooca erspan-source |
| (config-mon-erspan-src)# isha interface Gig0/0/0 |
| (config-mon-erspan-src)# meesha |
| (config-mon-erspan-src-dst) # ciwaanka IP 10.10.10.1 |
| (config-mon-erspan-src-dst) # asalka ciwaanka ip 10.10.10.1 |
| (config-mon-erspan-src-dst)# erspan-id 100 |
Waqtiga boostada: Agoosto-28-2024
