Cisco Systems 2960 Configuring SPAN and RSPAN

23-9
Catalyst 2960 Switch SoftwareConfiguration Guide
78-16881-01
Chapter23 Configuring SPAN and RSPAN
Configuring SPAN and RSPAN
If a physical port that belongs to an EtherChannel group is a destination p ort and the EtherChannel
group is a source, the port is removed from the EtherChannel group and fro m the list of monitored
ports.
•Multicast traffic can be monitored. For egress and ingress port monitoring, only a single unedited
packet is sent to the SPAN destination port. It does not reflect the number of times the multicast
packet is sent.
•A secure port cannot be a SPAN destination port.
For SPAN sessions, do not enable port security on ports with monitored egress when ingress
forwarding is enabled on the destination port. For RSPAN source sessions, do not enable port
security on any ports with monitored egress.
•An IEEE 802.1x port can be a SPAN source port. You can enable IEEE 802.1x on a port that is a
SPAN destination port; however, IEEE 802.1x is disabled until the port is removed as a SPAN
destination.
For SPAN sessions, do not enable IEEE 802.1x on ports with monitored egress when ingress
forwarding is enabled on the destination port. For RSPAN source sessions, do not enable
IEEE 802.1x on any ports that are egress monitored.
Configuring SPAN and RSPAN
These sections contain this configuration information:
•Default SPAN and RSPAN Configuration, page 23-9
•Configuring Local SPAN, page 23-10
•Configuring RSPAN, page 23-16
Default SPAN and RSPAN Configuration
Table23-1 shows the de fault SPAN and RSPAN configuration.
Table23-1 Default SPAN and RSPAN Configuration
Feature Default Setting
SPAN state (SPAN and RSPAN) Disabled.
Source port traffic to monitor Both received and sent traffic (both).
Encapsulation type (destination port) Native form (untagged packets).
Ingress forwarding (destination port) Disabled
VLAN filtering On a trunk interface used as a source port, all VLANs are
monitored.
RSPAN VLANs None configured.