如何在3650 L3交换机中监视特定端口上的流量？

Question

我有思科WS-C3650-48TS SW版本03.03.05SE作为L3，我需要监测主干端口上的流量？

它消耗了多少带宽？

Answer 1

显示接口命令将为您提供5分钟的输入和输出带宽。

Switch# show interfaces gigabitethernet3/0/2
GigabitEthernet3/0/2 is down, line protocol is down (notconnect)
  Hardware is Gigabit Ethernet, address is 2037.064d.4381 (bia 2037.064d.4381)
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Auto-duplex, Auto-speed, media type is 10/100/1000BaseTX
  input flow-control is off, output flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input never, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     0 input packets with dribble condition detected
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

如果您想要创建带宽图，可以使用类似于MRTG的工具来通过SNMP设置接口流量的定期轮询。MRTG将创建一个很好的数据图表。

要启用PRTG，请在交换机上设置一个只读社区字符串：

snmp-server community <your-community-string> ro

然后使用以下设置在PRTG中配置设备：

IP Address/DNS Name: IP address of switch
Sensor Management: Automatic device identification (standard, recommended)

Credentials for SNMP Devices:
SNMP Version: 2c
Community String: <your-community-string>

还有其他选项允许您查看端口上单个业务流的带宽，如IP记帐和NetFlow，尽管这些选项通常不能在L3交换机上正常工作，因为它们依赖于进程交换的通信量。

Answer 2

为了获得遍历主干端口的pkt统计信息的简单视图，您可以使用pkt计数器构建一个ACL，并在您感兴趣的IP或VLAN上设置一个筛选器，以便对它们进行计数。