cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
258
Views
0
Helpful
2
Replies

RSPAN between two Cat 6500s

kthrasher
Level 1
Level 1

We recently upgraded to SUP-720s and are now running Native code. I used RSPAN to monitor a port on each switch to a third port on switch 2(My CATOS config is below) The 2 ports are in the same VLAN and the switches are connected via a trunk. I would like to monitor both(in and out) from the 2 interfaces on a single capture port.

Using Native I cannot assign an Interface AND the RSPAN vlan to a MONITOR SESSION SOURCE. How do I accomplish what I could do in CATOS in Native without getting double packets. I have tried VACLS but cannot seem to get all the packets, (not all packets traverse the trunk) or I get double packets.

Switch 1

set vlan 2 rspan name rspan-vlan state active

set rspan source 5/9 2 both multicast enable create

Switch 2

set rspan source 6/47 2 both multicast enable create

set rspan destination 3/16 2 inpkts disable learning enable create

2 Replies 2

Prashanth Krishnappa
Cisco Employee
Cisco Employee

I believe you cannot do this in Native IOS

You cannot mix individual source ports and source VLANs within a single session.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/122sx/swcg/span.htm#wp1042096

I realize that is the problem. I was hoping for a VACL or combination VACL/RSPAN solution.

Thanks-

Kevin