06-11-2004 07:08 AM - edited 03-09-2019 07:43 AM
We recently upgraded to SUP-720s and are now running Native code. I used RSPAN to monitor a port on each switch to a third port on switch 2(My CATOS config is below) The 2 ports are in the same VLAN and the switches are connected via a trunk. I would like to monitor both(in and out) from the 2 interfaces on a single capture port.
Using Native I cannot assign an Interface AND the RSPAN vlan to a MONITOR SESSION SOURCE. How do I accomplish what I could do in CATOS in Native without getting double packets. I have tried VACLS but cannot seem to get all the packets, (not all packets traverse the trunk) or I get double packets.
Switch 1
set vlan 2 rspan name rspan-vlan state active
set rspan source 5/9 2 both multicast enable create
Switch 2
set rspan source 6/47 2 both multicast enable create
set rspan destination 3/16 2 inpkts disable learning enable create
06-22-2004 07:45 AM
I believe you cannot do this in Native IOS
You cannot mix individual source ports and source VLANs within a single session.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/122sx/swcg/span.htm#wp1042096
06-22-2004 08:36 AM
I realize that is the problem. I was hoping for a VACL or combination VACL/RSPAN solution.
Thanks-
Kevin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide