Router traffic mirroring

[MaxDemajo]

I am trying to set up the equivalent of a SPAN port on my router but my research has not been fruitful. 

I researched the 'monitor' command, which seemed to be what I was looking for, but the problem is that it doesn't seem possible to mirror data from a port/VLAN directly to another port. As far as I can see this data is only exportable to file like a PCAP, but it is an absolute necessity that the data is mirrored exactly to another port in real-time, in the exact same way a SPAN port would work.

Am I missing something with this function? Is it actually possible to do the above?

[balaji.bandi]

Not sure if i understand the requirement here.

you looking X  port Mirror to another Port or VLAN traffic to mirror to other Physiscal port ?

SPAN can do full morror of the traffic with out any further filters or alternative method is network TAP.

you can do alternative to span as per below guide :

https://www.ciscozine.com/switchport-capture-a-good-alternative-to-span-port/

[MaxDemajo]

Hi BB,

Thanks for your response. Yes, I want to mirror one or multiple physical interfaces out of another single physical interface. Mirroring VLANs out of a single physical interface would also work.

The reason I am not using SPAN is that it is only available on switches and not routers, and I would really rather not have to dish out a couple hundred for a physical TAP.

I will look into the resource you posted, thank you.

[Cristian Matei · Accepted solution]

Hi,

  The feature you're looking for is RITE (Router IP Traffic Export):

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cfg/configuration/15-mt/sec-usr-cfg-15-mt-book/sec-ip-traff-export.html#GUID-82F0F21C-4A69-4742-9173-66D56C91E42D

https://www.ciscozine.com/ip-traffic-export-how-to-mirror-traffic-on-a-router/

Regards,

Cristian Matei.

[MaxDemajo]

My man! This is exactly what I was looking for. Thanks very much!