Showing results for 
Search instead for 
Did you mean: 

Community Helping Community

Nexus 1000v ERSPAN Configuration







This document outlines the configuration for Nexus 1000v ERSPAN sessions terminating on Nexus 7000 and Catalyst 6500 switches. ERSPAN requires a vmkernel interface which is used as the GRE tunnel source. This vmkernel can be the same as the management vmk or it can be a dedicated interface. The monitor session only requires the source traffic type and a destination IP configured. All other parameters are optional. The source can be an interface, port-channel, or vlan. The destination IP is the address of the target device.



The Switched Port Analyzer (SPAN) feature (sometimes called port mirroring or port monitoring) allows network traffic to be analyzed by a network analyzer such as a Cisco SwitchProbe or other Remote Monitoring (RMON) probe. SPAN lets you monitor traffic on one or more ports, or one or more VLANs, and send the monitored traffic to one or more destination ports where the network analyzer is attached..

The interfaces from which traffic can be monitored are called SPAN sources. These include Ethernet, virtual Ethernet, port-channel, and VLAN. When a VLAN is specified as a SPAN source, all supported interfaces in the VLAN are SPAN sources. Traffic can be monitored in the receive direction, the transmit direction, or both directions. Each local SPAN session must have at least one destination port (also called a monitoring port) that receives a copy of traffic from the source ports or VLANs. An ERSPAN destination is specified by an IP address.

In ERSPAN, source SPAN interface and destination SPAN interface may be on different devices interconnected by an IP network. ERSPAN traffic is GRE-encapsulated


Related Information


Configure and Verify Network State Tracking on Nexus 1000v
How to Deploy a Nexus 1000v lab with a single ESX host
Command Enhancements in version 1.4 of Nexus 1000v

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here