Re: how to configure span ports in SDA/DNAC environment

nancyrawls · ‎08-12-2021

How do you configure a span port on an SDA router? C9500

Thanks.

balaji.bandi · ‎08-12-2021

check this user guide help you :

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-2-3/user_guide/b_cisco_dna_center_ug_2_2_3/b_cisco_dna_center_ug_2_2_3_chapter_01111.html?bookSearch=true

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

jalejand · ‎08-13-2021

What kind of SPAN?

SPAN (mirror a port and send the traffic to another port directly connected to the switch):

monitor session 1
source interface x/x both
destination interface x/x encapsulation-replicate

RSPAN (mirror a port and send the traffic on a VLAN instead): Rarely used in SDA as there are no trunks to work with

ERSPAN (mirror a port and send the traffic to a remote device, encapsulating the traffic on an IP /GRE tunnel):

ip access-list extended RTP

10 permit udp any any eq 1234

monitor session 10 type erspan-source

description RTP_Test -

source interface/vlan/etc

filter ip access-group RTP ----- ACL to only replicate relevant traffic

destination

erspan-id 100

mtu 9000 ----- Set by default

ip address 192.168.32.11 ------- Remote recording / capture server

origin ip address 172.19.1.72 --- Loopback 0 IP from the fabric node
no shut

None of these can be yet automated by DNAC; the traffic copy feature can only support router platforms as per the time of this writting

Mike.Cifelli · ‎02-01-2022

@jalejand Does SDA support ERSPAN session across the fabric between two ENs? I have conducted several tests, but not getting expected results. My test case platform info: Both ENs are C9300-48UXM running 17.03.04

nancyrawls · ‎08-16-2021

Running DNAC 1.3.3.6 and don't have the service.

markus.forrer · ‎02-03-2022

I think you have to go for a upgrade of your DNAC.

At least DNAC Version 2.2.3.4 brings the following support.

You can configure Switched Port Analyzer (SPAN) and Encapsulated Remote Switched Port Analyzer (ERSPAN) sessions on switches to share IP traffic for application assurance and endpoint analytics.