Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
en:install_mirror_mode [2015/05/12 09:45] – external edit 127.0.0.1 | en:install_mirror_mode [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | Let SKAT be connected as follows: | ||
- | dna1, | ||
- | dna0 - is connected to the router that receives and redirects subscribers' | ||
- | |||
- | One has to configure DPI for mirrored traffic processing as follows: | ||
- | |||
- | First, assign the input ports that receive the mirrored traffic to in_dev: | ||
- | |||
- | in_dev=dna1: | ||
- | |||
- | Second, assign the ports that get the redirection request to out_dev: | ||
- | |||
- | out_dev=dna0: | ||
- | |||
- | Enable asymmetric mode: | ||
- | asym_mode=1 | ||
- | | ||
- | Set direction of replies out_dev: | ||
- | emit_direction=2 | ||
- | | ||
- | Disable traffic bypass: | ||
- | tap_mode=2 | ||
- | |||
- | And configure MAC replacement: | ||
- | replace_source_mac=00: | ||
- | replace_destination_mac=78: | ||
- | |||
- | It is advised to use an additional 1GbE network card to send the replies in mirrored traffic mode. For example, intel i350 (with DNA license) can be used. This allows to configure an individual port for sending redirection replies and to reserve 10GbE ports to receive the mirrored traffic. | ||
- | |||