Chapter 30 Configuring SPAN and RSPAN

Configuring SPAN and RSPAN

 

Command

Purpose

Step 7

 

 

monitor session session_number

Specify the RSPAN session and the destination interface.

 

destination interface interface-id

For session_number, enter the number defined in Step 6.

 

 

 

 

In an RSPAN destination session, you must use the same session

 

 

number for the source RSPAN VLAN and the destination port.

 

 

For interface-id, specify the destination interface. The destination

 

 

interface must be a physical interface.

 

 

Though visible in the command-line help string, encapsulation

 

 

replicate is not supported for RSPAN. The original VLAN ID is

 

 

overwritten by the RSPAN VLAN ID, and all packets appear on the

 

 

destination port as untagged.

Step 8

 

 

end

Return to privileged EXEC mode.

Step 9

 

 

show monitor [session session_number]

Verify the configuration.

 

show running-config

 

Step 10

 

 

copy running-config startup-config

(Optional) Save the configuration in the configuration file.

 

 

 

To delete a SPAN session, use the no monitor session session_number global configuration command. To remove a destination port from the SPAN session, use the no monitor session session_number destination interface interface-idglobal configuration command. To remove the RSPAN VLAN from the session, use the no monitor session session_number source remote vlan vlan-id.

This example shows how to configure VLAN 901 as the source remote VLAN and port 1 as the destination interface:

Switch(config)# monitor session 1 source remote vlan 901

Switch(config)# monitor session 1 destination interface gigabitethernet2/0/1

Switch(config)# end

Creating an RSPAN Destination Session and Configuring Incoming Traffic

Beginning in privileged EXEC mode, follow these steps to create an RSPAN destination session, to specify the source RSPAN VLAN and the destination port, and to enable incoming traffic on the destination port for a network security device (such as a Cisco IDS Sensor Appliance).

For details about the keywords not related to incoming traffic, see the “Creating an RSPAN Destination Session” section on page 30-19. This procedure assumes that the RSPAN VLAN has already

been configured.

 

Command

Purpose

Step 1

 

 

configure terminal

Enter global configuration mode.

Step 2

 

 

no monitor session {session_number all

Remove any existing SPAN configuration for the session.

 

local remote}

 

Step 3

 

 

monitor session session_number source

Specify the RSPAN session and the source RSPAN VLAN.

 

remote vlan vlan-id

For session_number, the range is 1 to 66.

 

 

 

 

For vlan-id, specify the source RSPAN VLAN to monitor.

 

 

 

 

Catalyst 3750-E and 3560-E Switch Software Configuration Guide

30-20

OL-9775-02

Page 656
Image 656
Cisco Systems 3750E manual 30-20