Manuals / Cisco Systems / Computer Equipment / Switch

Cisco Systems C2960XSTACK, WSC2960X24TDL, WSC2960X48TSL SPAN and RSPAN Concepts and Terminology

Models: WSC2960X24TSL C2960XSTACK WSC2960X24PDL WSC2960X24TSLL WSC2960X24PSL WSC2960X48TSL WSC2960X24TDL

1 112

Download 112 pages 36.97 Kb

Page 82

Image 82

Configuring SPAN and RSPAN

SPAN and RSPAN

The figure below shows source ports on Switch A and Switch B. The traffic for each RSPAN session is carried over a user-specified RSPAN VLAN that is dedicated for that RSPAN session in all participating switches. The RSPAN traffic from the source ports or VLANs is copied into the RSPAN VLAN and forwarded over trunk ports carrying the RSPAN VLAN to a destination session monitoring the RSPAN VLAN. Each RSPAN source switch must have either ports or VLANs as RSPAN sources. The destination is always a physical port, as shown on Switch C in the figure.

Figure 6: Example of RSPAN Configuration

SPAN and RSPAN Concepts and Terminology

•SPAN Sessions, page 31-4

•Monitored Traffic

•Source Ports

•Source VLANs

•VLAN Filtering

•Destination Port

•RSPAN VLAN

	Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX
70	OL-29044-01

Page 82

Image 82

Cisco Systems C2960XSTACK manual SPAN and RSPAN Concepts and Terminology, VLAN Filtering Destination Port RSPAN VLAN

Contents

Cisco Systems, Inc Americas HeadquartersFirst Published July 10 170 West Tasman Drive San Jose, CACisco Systems, Inc. All rights reserved Information About Using the Command-Line Interface Command Modes Obtaining Documentation and Submitting a Service RequestUsing the Command-Line Interface Using the Help System Understanding Abbreviated CommandsCisco Networking Services IDs and Device Hostnames 16 ConfigID Cisco Configuration Engine Software Configuration ServiceEvent Service NameSpace Mapper DeviceID Hostname and DeviceID Hostname, DeviceID, and ConfigIDFinding Feature Information Prerequisites for SNMP Feature History and Information for Cisco Discovery ProtocolConfiguring Simple Network Management Protocol SNMP MIB Variables Access SNMP NotificationsSPAN Configuration Guidelines RSPAN Configuration Guidelines SPAN and RSPAN Interaction with Other FeaturesDefault SPAN and RSPAN Configuration Configuration Guidelines FSPAN and FRSPAN Configuration GuidelinesContents Feature History and Information for SPAN and RSPANExamples Creating an RSPAN VLAN OL-29044-01viii ContentsOL-29044-01 Document Conventions Obtaining Documentation and Submitting a Service Request, pagePreface Document Conventions, page Related Documentation, pageConvention Tip Means the following information will help you solve a problemReader Alert Conventions DescriptionObtaining Documentation and Submitting a Service Request Related DocumentationPreface Obtaining Documentation and Submitting a Service Request OL-29044-01Command Modes Using the Command-Line InterfaceInformation About Using the Command-Line Interface Information About Using the Command-Line Interface, pagethe configure Access MethodAbout This Mode vlan-id command5. command ? 6. command keyword ? Using the Help System2. abbreviated-command-entry ? 3. abbreviated-command-entry Tab Command or ActionCLI Error Messages Understanding Abbreviated CommandsNo and default Forms of Commands Lists all commands available for a particular commandConfiguring the Command History How to Use the CLI to Configure FeaturesConfiguration Logging Error MessageRepeat the key sequence to recall successively older commands Changing the Command History Buffer SizeRecalling Commands more recent commandsprivileged EXEC mode Enabling and Disabling Editing FeaturesDisabling the Command History Feature Reenables the enhanced editing mode for the current terminalterminal no editing Editing Commands through Keystrokesin the privileged EXEC mode Ctrl-B or use the left arrow keyEsc D Editing Command Lines That Wrap1. access-list 2. Ctrl-A 3. Return key Esc C1. show more command begin include exclude regular-expression Searching and Filtering Output of show and more Commandsaccess-list show more command begin include excludeCommand or Action Example Accessing the CLI through a Console Connection or through TelnetPurpose Accessing the CLI through a Console Connection or through Telnet Using the Command-Line InterfaceOL-29044-01 Finding Feature Information, page Finding Feature InformationPrerequisites for Configuring the Configuration Engine Prerequisites for Configuring the Configuration Engine, pageCisco Configuration Engine Software Restrictions for Configuring the Configuration EngineInformation About Configuring the Configuration Engine Cisco Networking Services IDs and Device Hostnames, on pageConfiguration Service Figure 1 Cisco Configuration Engine Architectural OverviewConfigID Event ServiceCisco Networking Services IDs and Device Hostnames Prerequisites for Configuring the Configuration Engine, on pageHostname and DeviceID Hostname, DeviceID, and ConfigIDDeviceID Refreshing DeviceIDs, on pageCisco IOS CNS Agents Initial ConfigurationAutomated CNS Configuration, on page Related TopicsSynchronized Configuration Automated CNS ConfigurationIncremental Partial Configuration Required Configuration1. configure terminal How to Configure the Configuration EngineInitial Configuration, on page Enabling the CNS Event Agentreconnect-time time backup configure terminalEnters the global configuration mode What to Do Next3. cns config partial hostname ip-address port-number Event Service, on page2. cns config initial hostname ip-address port-number cns config initial hostname ip-addresson the switch Enabling an Initial Configuration for Cisco IOS CNS AgentEnables the Cisco IOS CNS agent and initiates a partial configuration Returns to privileged EXEC modecli config-text 1. configure terminal 2. cns template connect name3. cli config-text each command line in the templateStep 7 discover controller controller-type dlci Returns to global configuration modeexit Step 8 template name ... nameip route network-number hostname string string udi event image commandhostname name address is network-numberCommand or Action port-number event no-persist pagepage source ip-address syntax-check Returns to privileged EXEC modeRefreshing DeviceIDs 1. show cns config connections5. configure terminal 3. show cns event connectionsno cns event ip-address port-number show cns config connectionsshow cns event connections cns event ip-address port-numberEnabling the Cisco IOS CNS Agent, on page Enabling a Partial Configuration for Cisco IOS CNS Agentcns config partial ip-address hostname Hostname and DeviceID, on pageshow cns config outstanding Monitoring CNS ConfigurationsCommand show cns config statsdocs/netmgmt/configurationengine/1.5 Feature History and Information for the Configuration EngineConfiguration Engine Setup installationlinux/guide/setup1.htmlHow to Configure CDP, page Monitoring and Maintaining CDP, page Configuring the Cisco Discovery ProtocolFinding Feature Information, page Information About CDP, page Feature History and Information for Cisco Discovery Protocol, pageConfiguring CDP Characteristics How to Configure CDPDefault CDP Configuration Feature4. cdp advertise-v2 5. end 1. configure terminal 2. cdp timer seconds 3. cdp holdtime secondscdp timer seconds cdp holdtime secondsDisabling CDP 1. configure terminal 2. no cdp run 3. endDisables CDP Monitoring and Maintaining CDP, on pageEnabling CDP 1. configure terminal 2. cdp run 3. endEnables CDP if it has been disabled Enabling CDP, on pageDisabling CDP on an Interface 3. no cdp enable 4. endand enters interface configuration mode Disabling CDP, on page3. cdp enable 4. end no cdp enableDisables CDP on the interface specified in Step Enabling CDP on an InterfaceResets the traffic counters to zero cdp enableEnables CDP on a disabled interface Monitoring and Maintaining CDPSwitches Configuring CDP Characteristics, on pageCisco IOS Configuration Fundamentals Command show cdp entry entry-name version protocolDescription Feature History and Information for Cisco Discovery ProtocolTechnical Assistance LinkHow to Configure SNMP, page Monitoring SNMP Status, page Configuring Simple Network Management ProtocolFinding Feature Information, page Prerequisites for SNMP, page Prerequisites for SNMPLevel AuthenticationModel EncryptionLevel AuthenticationModel EncryptionSNMP Overview Restrictions for SNMPInformation About SNMP SNMP Manager FunctionsSNMP Community Strings SNMP MIB Variables AccessSNMP Agent Functions OperationSNMP Notifications SNMP ifIndex MIB Object ValuesDefault Setting Default SNMP ConfigurationSNMP Configuration Guidelines Interface TypeDisabling the SNMP Agent How to Configure SNMP1. configure terminal 2. no snmp-server 3. end Before You Begin3. access-list access-list-number deny permit source source-wildcard Configuring Community StringsDisables the SNMP agent operation no snmp-serverStep 2 snmp-server community string view view-name ro rw access-list-numberStep 3 access-list access-list-number deny permit source source-wildcardsnmp-server engineID local Configuring SNMP Groups and Users5. end engineid-string remote ip-addressaccess access-list v3 encrypted access access-list auth md5 sha notifyview access access-listgroup-name remote host udp-port port v1 access access-list v2c auth-password priv des 3des aes 128 192 256 priv-passwordCommand or Action Example Configuring SNMP NotificationsStep 5 end Example PurposeNotification Type Keyword configcopy-config bridgeport-security 1 snmp-server enable traps port-security2 snmp-server enable traps port-security trap-rate rate snmphost udp-port port v1 access access-list 6. snmp-server enable traps notification-types9. snmp-server trap-timeout seconds 10. end v2c access access-list v3 encrypted access2 snmp-server enable traps port-security trap-rate rate Step 6 snmp-server enable traps notification-types1 snmp-server enable traps port-security range is 1 to 1000 the default isto 1000 the default is 30 seconds Setting the Agent Contact and Location Informationsnmp-server trap-timeout seconds 1. configure terminal 2. snmp-server contact textsnmp-server contact text 2. snmp-server tftp-server-list access-list-numberLimiting TFTP Servers Used Through SNMP Sets the system contact stringStep 2 snmp-server tftp-server-list access-list-numberMonitoring SNMP Status Command or Actionshow snmp running-config outputSNMP Examples show snmp engineIDModification Switchconfig# snmp-server enable traps entityRelease Cisco IOS 15.02EXSPAN and RSPAN Configuration Examples, page Configuring SPAN and RSPANHow to Configure SPAN and RSPAN, page Feature History and Information for SPAN and RSPAN, pageRSPAN Restrictions for SPAN and RSPANSPAN An RSPAN source session cannot have a local destination port Flow-Based SPAN FSPAN and Flow-Based RSPAN FRSPANRSPAN Local SPAN Information About SPAN and RSPANSPAN and RSPAN nameFigure 4 Example of Local SPAN Configuration on a Single Device Remote SPANFigure 5 Example of Local SPAN Configuration on a Device Stack SPAN Sessions, page Monitored Traffic Source Ports Source VLANs SPAN and RSPAN Concepts and TerminologyVLAN Filtering Destination Port RSPAN VLAN SPAN Sessions Monitored TrafficSource Ports VLAN Filtering Source VLANsDestination Port RSPAN VLAN SPAN and RSPAN Interaction with Other Features Flow-Based SPAN SPAN and RSPAN and Device StacksSPAN Configuration Guidelines Default SPAN and RSPAN ConfigurationConfiguration Guidelines FeatureFSPAN and FRSPAN Configuration Guidelines How to Configure SPAN and RSPANRSPAN Configuration Guidelines Creating a Local SPAN Sessioninterface interface-id vlan vlan-id Step 2 no monitor session sessionnumber all local remoteStep 3 monitor session sessionnumber source both rx txCommand or Action Example Creating a Local SPAN Session and Configuring Incoming TrafficStep 5 end Returns to privileged EXEC modemonitor session sessionnumber source no monitor session sessionnumber alllocal remote interface interface-id vlan vlan-idReturns to privileged EXEC mode Command or Actionuntagged encapsulation type with the specified VLAN as the default Specifying VLANs to FilterStep 4 monitor session sessionnumber filter vlan Configuring a VLAN as an RSPAN VLANinterface interface-id vlan-idvlan vlan-id 2. vlan vlan-id3. remote-span 4. end remote-spanStep 2 no monitor session sessionnumber all local remote Creating an RSPAN Source Session4. monitor session sessionnumber destination remote vlan vlan-id 1. configure terminal5. monitor session sessionnumber destination remote vlan vlan-id monitor session sessionnumberdestination remote vlan vlan-id Command or ActionCommand or Action Step 2 no monitor session sessionnumber all local remoteStep 5 monitor session sessionnumber destination remote vlan vlan-id configure terminal5. no monitor session sessionnumber all local remote Creating an RSPAN Destination Session3. remote-span 4. exit 6. monitor session sessionnumber source remote vlan vlan-idmonitor session sessionnumber source no monitor session sessionnumber alllocal remote remote vlan vlan-id1. configure terminal 3. monitor session sessionnumber source remote vlan vlan-idStep 3 monitor session sessionnumber source remote vlan vlan-id Command or ActionCommand or Action Configuring an FSPAN SessionEnters global configuration mode 1. configure terminalExample Command or ActionStep 2 no monitor session sessionnumber all local remote Step 3 monitor session sessionnumber source5. vlan vlan-id Configuring an FRSPAN Sessionaccess-list-number name 6. remote-span 7. exitEnters global configuration mode Command or Actionconfigure terminal DETAILED STEPSMonitoring SPAN and RSPAN Operations ipv6 mac access-group access-list-number nameor FRSPAN configuration vlan vlan-idSPAN and RSPAN Configuration Examples Example Configuring Local SPANRelease Feature History and Information for SPAN and RSPANExamples Creating an RSPAN VLAN ModificationModification defined in terms of access lists thatRelease SPAN Destination Port Support onI N D E