跳至主要內容
登出

歡迎來到 Dell

我的帳戶
  • 簡單快速地下訂單
  • 檢視訂單及追蹤商品運送狀態
  • 建立並存取您的產品清單
  • 使用「公司管理」來管理您的 Dell EMC 網站、產品和產品層級連絡人。
登入 建立帳戶 Premier 登入 合作夥伴計畫登入
與我們連絡

您的 Dell.com 購物車

Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

PDF

Enabling Flow-Based Monitoring

Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead of all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You can specify traffic using standard or extended access-lists.
  1. Enable flow-based monitoring for a monitoring session. MONITOR SESSION mode flow-based enable
  2. Define access-list rules that include the keyword monitor. Dell Networking OS only considers port monitoring traffic that matches rules with the keyword monitor. CONFIGURATION mode ip access-list For more information, see Access Control Lists (ACLs) .
  3. Apply the ACL to the monitored port. INTERFACE mode ip access-group access-list

Example of the flow-based enable Command

To view an access-list that you applied to an interface, use the show ip accounting access-list command from EXEC Privilege mode. 
Dell(conf)#monitor session 0
                                 Dell(conf-mon-sess-0)#flow-based enable
                                 Dell(conf)#
                                 ip access-list ext testflow
                                 Dell(config-ext-nacl)#seq 5 permit icmp any any count bytes 
                                 monitor
                                 Dell(config-ext-nacl)#seq 10 permit ip 102.1.1.0/24 any count bytes 
                                 monitor
                                 Dell(config-ext-nacl)#seq 15 deny udp any any count bytes
                                 Dell(config-ext-nacl)#seq 20 deny tcp any any count bytes
                                 Dell(config-ext-nacl)#exit
                                 Dell(conf)#interface gig 1/1
                                 Dell(conf-if-gi-1/1)#
                                 ip access-group testflow in
                                 Dell(conf-if-gi-1/1)#show config
                                 !
                                 interface GigabitEthernet 1/1
                                 ip address 10.11.1.254/24
                                 ip access-group testflow in
                                 shutdown
                                 Dell(conf-if-gi-1/1)#exit
                                 Dell(conf)#do show ip accounting access-list testflow
                                 !
                                 Extended Ingress IP access list testflow on GigabitEthernet 1/1
                                 Total cam count 4
                                 seq 5 permit icmp any any monitor count bytes (0 packets 0 bytes)
                                 seq 10 permit ip 102.1.1.0/24 any monitor count bytes (0 packets 0 bytes)
                                 seq 15 deny udp any any count bytes (0 packets 0 bytes)
                                 seq 20 deny tcp any any count bytes (0 packets 0 bytes)
                                 Dell(conf)#do show monitor session 0
                                 SessionID Source Destination Direction Mode      Type
                                 --------- ------ ----------- --------- ----      ----
                                 0         Gi 1/1 Gi 1/2      rx        interface Flow-based

對此內容評分

準確
實用
易懂
這篇文章對您有用嗎？
0/3000 characters
  請給予評分 (1 到 5 顆星)。
  請給予評分 (1 到 5 顆星)。
  請給予評分 (1 到 5 顆星)。
  本文章是否有幫助？請選擇。
  評語中不得包含下列特殊字元：<>()\