Question of SPAN and VACL

[HWangLoyalty_2]

According to the following Cisco's document,we set up the span session and VACL for packet capture purpose on the Cat6500.

http://www.cisco.com/en/US/tech/tk389/tk814/technologies_configuration_example09186a00808122ac.shtml#vacl_config

But when I setup the capture port connected my laptop running Wireshark, I got the following issue message"Capture not allowed on a SPAN destination port". Could you please give me a thought? Thanks a lot!

[Giuseppe Larosa]

Hello Huan,

you have configured both SPAN and capture VACL, but I think they are alternate ways to perform the same task.

if you look at the example in the document you have linked it doesn't use any monitor session commmands see section

"Configuration with VACL"

the commands

switchport capture allowed vlan 40

switchport capture

are enough to make g2/7 destination port for VACL capture feature.

If you want to use VACL capture feature remove SPAN commands.

Hope to help

Giuseppe

[HWangLoyalty_2]

thanks for your response!

I just moved the span session and kept VACL. It looked like working fine.