Ga naar hoofdinhoud
Uitloggen

Welkom bij Dell

Mijn account
  • Snel en eenvoudig bestellen
  • Bestellingen en de verzendstatus bekijken
  • Een lijst met producten maken en openen
  • Beheer uw Dell EMC locaties, producten en contactpersonen op productniveau met Company Administration.
Inloggen Een account maken Inloggen bij Premier Aanmelden voor partnerprogramma
Contact

Uw Dell.com-winkelwagentjes

Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

PDF

Enabling Flow-Based Monitoring

Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead of all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You can specify traffic using standard or extended access-lists.
  1. Enable flow-based monitoring for a monitoring session. MONITOR SESSION mode flow-based enable
  2. Define access-list rules that include the keyword monitor. Dell Networking OS only considers port monitoring traffic that matches rules with the keyword monitor. CONFIGURATION mode ip access-list For more information, see Access Control Lists (ACLs) .
  3. Apply the ACL to the monitored port. INTERFACE mode ip access-group access-list

Example of the flow-based enable Command

To view an access-list that you applied to an interface, use the show ip accounting access-list command from EXEC Privilege mode. 
Dell(conf)#monitor session 0
                                 Dell(conf-mon-sess-0)#flow-based enable
                                 Dell(conf)#
                                 ip access-list ext testflow
                                 Dell(config-ext-nacl)#seq 5 permit icmp any any count bytes 
                                 monitor
                                 Dell(config-ext-nacl)#seq 10 permit ip 102.1.1.0/24 any count bytes 
                                 monitor
                                 Dell(config-ext-nacl)#seq 15 deny udp any any count bytes
                                 Dell(config-ext-nacl)#seq 20 deny tcp any any count bytes
                                 Dell(config-ext-nacl)#exit
                                 Dell(conf)#interface gig 1/1
                                 Dell(conf-if-gi-1/1)#
                                 ip access-group testflow in
                                 Dell(conf-if-gi-1/1)#show config
                                 !
                                 interface GigabitEthernet 1/1
                                 ip address 10.11.1.254/24
                                 ip access-group testflow in
                                 shutdown
                                 Dell(conf-if-gi-1/1)#exit
                                 Dell(conf)#do show ip accounting access-list testflow
                                 !
                                 Extended Ingress IP access list testflow on GigabitEthernet 1/1
                                 Total cam count 4
                                 seq 5 permit icmp any any monitor count bytes (0 packets 0 bytes)
                                 seq 10 permit ip 102.1.1.0/24 any monitor count bytes (0 packets 0 bytes)
                                 seq 15 deny udp any any count bytes (0 packets 0 bytes)
                                 seq 20 deny tcp any any count bytes (0 packets 0 bytes)
                                 Dell(conf)#do show monitor session 0
                                 SessionID Source Destination Direction Mode      Type
                                 --------- ------ ----------- --------- ----      ----
                                 0         Gi 1/1 Gi 1/2      rx        interface Flow-based

Beoordeel deze inhoud

Nauwkeurig
Nuttig
Eenvoudig te begrijpen
Was dit artikel nuttig?
0/3000 characters
  Geef een beoordeling (1-5 sterren).
  Geef een beoordeling (1-5 sterren).
  Geef een beoordeling (1-5 sterren).
  Selecteer of het artikel nuttig is of niet.
  Opmerkingen mogen geen speciale tekens bevatten: <>() \