I'm having a little trouble with setting up ERSPAN. The configuration appears to be sending traffic to the correct destination, but wrong MAC address. This is my configuration:
monitor session 2 type erspan-source
source interface Gi1/37
destination
erspan-id 1
ip address 10.24.11.121
origin ip address 10.24.11.121
vrf core_10
My destination system has 2 interfaces addresses:
eth0 [IP 10.24.11.120] [MAC 00:50:56:BD:6C:69]
eth1 [IP 10.24.11.121] [MAC 00:50:56:BD:2F:30]
When I run a TCPDUMP on either interface I see ALL the ERSPAN GRE traffic. I'm using: [tcpdump -e -i eth0] which results returns:
14:09:38.286350 00:1c:b1:ad:64:00 (oui Unknown) > 00:50:56:bd:6c:69 (oui Unknown), ethertype IPv4 (0x0800), length 116: 10.24.11.121 > 10.24.11.121: GREv0, seq 4294967295, proto unknown (0x88be), length 82: gre-proto-0x88be
14:09:38.286439 00:1c:b1:ad:64:00 (oui Unknown) > 00:50:56:bd:6c:69 (oui Unknown), ethertype IPv4 (0x0800), length 330: 10.24.11.121 > 10.24.11.121: GREv0, seq 4294967295, proto unknown (0x88be), length 296: gre-proto-0x88be
14:09:38.286444 00:1c:b1:ad:64:00 (oui Unknown) > 00:50:56:bd:6c:69 (oui Unknown), ethertype IPv4 (0x0800), length 330: 10.24.11.121 > 10.24.11.121: GREv0, seq 4294967295, proto unknown (0x88be), length 296: gre-proto-0x88be
14:09:38.286585 00:1c:b1:ad:64:00 (oui Unknown) > 00:50:56:bd:6c:69 (oui Unknown), ethertype IPv4 (0x0800), length 116: 10.24.11.121 > 10.24.11.121: GREv0, seq 4294967295, proto unknown (0x88be), length 82: gre-proto-0x88be
14:09:38.286593 00:1c:b1:ad:64:00 (oui Unknown) > 00:50:56:bd:6c:69 (oui Unknown), ethertype IPv4 (0x0800), length 116: 10.24.11.121 > 10.24.11.121: GREv0, seq 4294967295, proto unknown (0x88be), length 82: gre-proto-0x88be
Am I misinterpreting the results, but does this traffic look like it is destined for the MAC address of eth0 but the IP of eth1?
Any help would be appreciated. Thanks.
