26-9
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-06
Chapter 26 Configuring SPAN and RSPAN Configuring SPAN and RSPAN
is configured as a SPAN destination, it is removed from the group. After the port is removed from
the SPAN session, it rejoins the EtherChannel group. Ports removed from an EtherChannel group
remain members of the group, but they are in the inactive or suspended state.
If a physical port that belongs to an EtherChannel group is a destination port and the EtherChannel
group is a source, the port is removed from the EtherChannel group and from the list of monitored
ports.
• Multicast traffic can be monitored. For sending and receiving port monitoring, only a single
unedited packet is sent to the SPAN destination port. It does not reflect the number of times that the
multicast packet is sent.
• A private-VLAN port cannot be a SPAN destination port.
• A secure port cannot be a SPAN destination port.
For SPAN sessions, do not enable port security on ports with monitored egress when ingress
forwarding is enabled on the destination port. For RSPAN source sessions, do not enable port
security on any ports with monitored egress.
• An IEEE 802.1x port can be a SPAN source port. You can enable IEEE 802.1x on a port that is a
SPAN destination port; however, IEEE 802.1x is disabled until the port is removed as a SPAN
destination.
For SPAN sessions, do not enable IEEE 802.1x on ports with monitored sending when receive
forwarding is enabled on the destination port. For RSPAN source sessions, do not enable
IEEE 802.1x on any ports that are sending monitored.
Configuring SPAN and RSPAN
These sections contain this configuration information:
• Default SPAN and RSPAN Configuration, page 26-9
• Configuring Local SPAN, page 26-10
• Configuring RSPAN, page 26-16

Default SPAN and RSPAN Configuration

Table 26-1 shows the default SPAN and RSPAN configuration.
Tab le 26-1 Default SPAN and RSPAN Configuration
Feature Default Setting
SPAN state (SPAN and RSPAN) Disabled.
Source port traffic to monitor Both received and sent traffic (both).
Encapsulation type (destination port) Native form (untagged packets).
Ingress forwarding (destination port) Disabled
VLAN filtering On a trunk interface used as a source port, all VLANs are
monitored.
RSPAN VLANs None configured. Default VLAN type is UNI-ENI
isolated.