H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 176)

161
Traffic from network 10.1.0.0/16 needs to be mirrored to the SecBlade NS card for traffic statistics
collection, as shown in Figure 49 .
• Assign GigabitEthernet 2/0/1 to VLAN 10 and GigabitEthernet 2/0/2 to VLAN 20. VLAN 10 is
an internal VLAN, and VLAN 20 is an external VLAN.
• Configure traffic mirroring in the inbound direction of GigabitEthernet 2/0/1 of the device.
• Enable NetStream on the ten GigabitEthernet port of the SecBlade NS card.
• Traffic information is sent by the SecBlade NS card through management port GigabitEthernet 0/1.
Figure 49 Network diagram for IPv4 NetStream traditional data export
1. Configure the Device.
# Create VLAN 10 and VLAN 20, and assign GigabitEthernet 2/0/1 and GigabitEthernet 2/0/2 to
VLAN 10 and VLAN 20, respectively.
system-view
[Device] vlan 10
[Device-vlan10] port gigabitethernet 2/0/1
[Device-vlan10] vlan 20
[Device-vlan20] port gigabitethernet 2/0/2
[Device-vlan20] quit
# Create VLAN-interface, and assign an IP address to the VLAN-interface.
[Device] interface Vlan-interface 10
[Device-Vlan-interface10] ip address 10.1.1.1 255.255.0.0
[Device-Vlan-interface10] quit
[Device] interface Vlan-interface 20
[Device-Vlan-interface20] ip address 20.1.1.1 255.255.0.0
[Device-Vlan-interface20] quit
# Configure Ten-GigabitEthernet 4/0/1 as a trunk port, and configure the port to allow packets from
VLAN 10 and VLAN 20 to pass through.
[Device] interface ten-gigabitethernet4/0/1
[Device-Ten-GigabitEthernet4/0/1] port link-type trunk
[Device-Ten-GigabitEthernet4/0/1] port trunk permit vlan 10 20
[Device-Ten-GigabitEthernet4/0/1] quit