cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
226
Views
0
Helpful
2
Replies

Can't get RSPAN to work

martintonner
Level 1
Level 1

Guys,

After upgrading the IOS on our 4507rs to 12.2(20)EW and looking forward to using this feature, I can't get it to work! Could someone take a look at the config below and offer any advice:

2 Cat4507rs, same vtp domain, rspan vlan = 109, isl trunk between switches.

swc1 config (sniffer connected on port g7/21)

monitor session 1 destination interface Gi7/21

monitor session 1 source remote vlan 109

swc2config (servers which I am trying to sniff connected her)

monitor session 1 source interface Gi4/10 - 11

monitor session 1 destination remote vlan 109

As far as I can see from Cisco's 'configuring RSPAN' pdf, this should work. Am I missing any hidden details?

2 Replies 2

Kevin Dorrell
Level 10
Level 10

I've not used this myself, but I'm interested in hearing about your experience. Here are some ideas.

Do you have to create VLAN 109 explicitly? The document says you should create the VLAN before you set up the first RSPAN session. OOI, does the RSPAN VLAN appear in a show vlan?

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/12_2_20/config/span.htm#wp1043983

What do you get in response to show monitor session 1 on each switch?

Kevin Dorrell

Luxembourg

Unfortunately I had to wipe the monitor session and just move the sniffer across to the server switch. But 'show monitor session 1' reiterated the config I put above, and confirmed that it was a remote span session.

VLAN 109 was definitely created before attempting the RSPAN session. I think it was set up as:

vlan database

vlan 109

rspan

(or something very similar)

Review Cisco Networking for a $25 gift card