D-Link DWS-1008 Informations techniques télécharger pdf (Page 376)

375

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Snoop Commands

Usage:

Trafﬁc that matches a snoop ﬁlter is copied after it is decrypted. The decrypted

(clear) version is sent to the observer.

For best results:

• Do not specify an observer that is associated with the AP where the snoop ﬁlter is

running. This conﬁguration causes an endless cycle of snoop trafﬁc.

• If the snoop ﬁlter is running on a Distributed AP, and the AP used a DHCP server

in its local subnet to conﬁgure its IP information, and the AP did not receive a

default gateway address as a result, the observer must also be in the same subnet.

Without a default gateway, the AP cannot ﬁnd the observer.

• The AP that is running a snoop ﬁlter forwards snooped packets directly to the

observer. This is a one-way communication, from the AP to the observer. If

the observer is not present, the AP still sends the snoop packets, which use

bandwidth. If the observer is present but is not listening to TZSP trafﬁc, the

observer continuously sends ICMP error indications back to the AP. These ICMP

messages can affect network and AP performance.

Examples

The following command conﬁgures a snoop ﬁlter named snoop1 that matches

on all trafﬁc, and copies the trafﬁc to the device that has IP address 10.10.30.2:

DWS-1008# set snoop snoop1 observer 10.10.30.2 snap-length 100

The following command conﬁgures a snoop ﬁlter named snoop2 that matches on all data trafﬁc

between the device with MAC address aa:bb:cc:dd:ee:ff and the device with MAC address

11:22:33:44:55:66, and copies the trafﬁc to the device that has IP address 10.10.30.3:

DWS-1008# set snoop snoop2 frame-type eq data mac-pair aa:bb:cc:dd:ee:ff

11:22:33:44:55:66 observer 10.10.30.3 snap-length 100

set snoop map

Maps a snoop ﬁlter to a radio on a Distributed AP. A snoop ﬁlter does take effect until you

map it to a radio and enable the ﬁlter.

Syntax:

set snoop map ﬁlter-name dap dap-num radio {1 | 2}

ﬁlter-name Name of the snoop ﬁlter.

dap dap-num Number of a Distributed AP to which to map the

snoop ﬁlter.

radio 1

Radio 1 of the AP.

radio 2

Radio 2 of the AP.

Defaults:

Snoop ﬁlters are unmapped by default.

1 2 ... 371 372 373 374 375 376 377 378 379 380 381 ... 405 406

Commentaires sur ces manuels

Pas de commentaire

D-Link DWS-1008 Informations techniques Page 376

Commentaires sur ces manuels

Produits connexes et manuels pour Commutateurs de réseau D-Link DWS-1008