IP Traffic Export (Router上类似于SW上SPAN的技术）

配置备份如下:

*********最简单配置************

ip traffic-export profile test

interface FastEthernet1/0

mac-address 0200.4c4f.4f50

*********最终配置备份**********

ip traffic-export profile test

interface FastEthernet1/0 <这是IDS所在的出接口>

bidirectional

incoming access-list incoming.acl

outgoing access-list outgoing.acl

mac-address 0200.4c4f.4f50 <这是IDS的MAC,记住一定是直连或者同一VLAN>

incoming sample one-in-every 2

outgoing sample one-in-every 3

interface FastEthernet0/0 <这是被监控的接口>

ip address 202.100.1.2 255.255.255.0

ip traffic-export apply test

R2#sh ip traffic-export

Router IP Traffic Export Parameters

Monitored Interface FastEthernet0/0

Export Interface FastEthernet1/0

Destination MAC address 0200.4c4f.4f50

bi-directional traffic export is on

Output IP Traffic Export Information Packets/Bytes Exported 28/2480

Packets Dropped 39

Sampling Rate one-in-every 3 packets

Access List outgoing.acl [named extended IP]

Input IP Traffic Export Information Packets/Bytes Exported 27/2420

Packets Dropped 38

Sampling Rate one-in-every 2 packets

Access List incoming.acl [named extended IP]

Profile test is Active

录像下载视频:

http://www.rayfile.com/files/4df1c73a-3ec2-11df-bad1-0015c55db73d/