ERSPAN: Mirroring traffic from multiple VLANs to a remote destination?

[Matthias.G]

Hello everyone,

I would like to learn if it is possible to mirror traffic from multiple vlans to an analyzer device that is connected to a remote switch. I made a sketch and changed some IPs and vlans for simplicity.

All traffic that arrives on either core-switch within vlans 1-4 should be forwarded to the analyzer on port 37 Core-B.

My initial thoughts on how to achieve this are based on youtube examples and reading the whitepapers, though I have yet to find a reference for this obviously rather niche issue. I don't expect it to work straight away and my means of testing the config are currently limited.

Best regards

Matt

[M02@rt37 · Accepted solution]

Hello @Matthias.G,

Please check Cisco off. documentations

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/system_management/521_n1_1/b_5k_System_Mgmt_Config_521N11/b_5k_System_Mgmt_Config_521N11_chapter_010001.html

 https://www.cisco.com/c/en/us/support/docs/switches/nexus-5000-series-switches/113501-nexus5000-erspan-config.html

[Joseph W. Doherty]

Matt, from M02@rt37 references, to your is it possible question, the answer appears to be yes.  That documentation also appears to have all the details, but if it doesn't mention "volume" considerations, don't overlook those.