Cisco Systems WSC2960XR48TSI Creating a Local SPAN Session and Configuring Incoming Traffic

23-13
Catalyst 2960 Switch SoftwareConfiguration Guide
78-16881-01
Chapter23 Configuring SPAN and RSPAN
Configuring SPAN and RSPAN
This example shows how to disable received traffic monitoring on port 1, which was configured for
bidirectional monitoring:
Switch(config)# no monitor session 1 source interface gigabitethernet0/1 rx
The monitoring of traffic received on port 1 is disabled, but traffic sent from this port continues to be
monitored.
This example shows how to remove any existing configuration on SPAN session 2, configure SPAN
session 2 to monitor received traffic on all ports belonging to VLANs 1 through 3, and send it to
destination Gigabit Ethernet port 2. The configuration is then modified to also monitor all traffic on all
ports belonging to VLAN 10.
Switch(config)# no monitor session 2
Switch(config)# monitor session 2 source vlan 1 - 3 rx
Switch(config)# monitor session 2 destination interface gigabitethernet0/2
Switch(config)# monitor session 2 source vlan 10
Switch(config)# end
Creating a Local SPAN Session and Configuring Incoming Traffic
Beginning in privileged EXEC mode, follow these steps to create a SPAN session, to specify the source
ports or VLANs and the destination ports, and to enable incoming traffic on the destination port for a
network security device (such as a Cisco IDS Sensor Appliance).
For details about the keywords not related to incoming traffic, see the “Creating a Local SPAN Session”
section on page 23-10.
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 no monitor session {session_number | all |
local | remote}
Remove any existing SPAN configuration for the session.
Step3 monitor session session_number source
{interface interface-id | vlan vlan-id} [, | -]
[both | rx | tx]
Specify the SPAN session and the source port (monitored port).