10-17-2021 02:40 AM
Hello. I'm trying to setup RSPAN to capture all the traffic come in and out of a switch port. I double checked all the configs but the traffic is not getting mirrored properly. Please see the attached diagram.
c9300(config)#vlan 100 c9300(config)#remote-span c9300(config)#monitor session 10 source interface Gi1/0/2 c9300(config)#monitor session 10 source interface Gi1/0/3 c9300(config)#monitor session 10 destination remote vlan 100 c9500(config)#vlan 100 c9500(config)#remote-span c9500(config)#monitor session 10 source remote vlan 100 c9500(config)#monitor session 10 destination interface Twe1/0/10
On wireshark, I can only see a very few packets such as broadcast and some L2 traffic between the servers. What am I missing? If I take a capture directly on the switch using 'monitor capture xxx' command, I can see all the traffic.
Appreciate any response.
Solved! Go to Solution.
10-20-2021 01:31 AM
Thank you for the Feedback and good to know, as we suggested and requested you need to provide more information of complete config for us to understand the environment and config so we can guide as per we know the information. is that OLD VLAN using any where other remote span ?
Glad any way good here.
08-29-2022 04:18 AM
I've now encountered the same issue when I'm trying to RSPAN traffic to app-hosting's AppGigabitInterface. Did you ever manage to solve this issue? Thanks
08-29-2022 04:21 AM
Hi, I picked a different VLAN for the RSPAN which fixed the issue for me. Initially, I was using VLAN 100 and it didn't work. I then picked a different random one which started working.
If you need more info - https://www.packetswitch.co.uk/cisco-ios-xe-rspan-configuration-example/
08-29-2022 06:47 AM
I've already tried a couple (100, 999). Just random VLANs. Still no success
I'll verify that my configuration is the same as in the link you've posted.
Thanks
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: