01-30-2025 09:52 PM
Network gangsters, i'm labbing a real world scenario im dealing with and wondering if this is possible.
I need to SPAN the circled interfaces to the 'SPAN-COLLECTOR' destination. RSPAN from remote vlan 99 on LAB_DC02SWT01 sends it across the trunk to LAB_DC01SWT01 to the collector just fine. The problem comes with sourcing ports on the switch directly connected to the collector. I can't create another monitor session since an interface can only be the destination of one session. If I try to source the ports, g0/3 and g1/0 on LAB_DC01SWT01 and send to remote vlan 99 destination it doesn't work, like this:
#LAB_DC01SWT01
monitor session 10 source interface Gi0/3 , g1/0
monitor session 10 destination remote vlan 99
Can this be done?
01-31-2025 12:38 AM
01-31-2025 01:24 AM - edited 01-31-2025 02:03 AM
Hello
Rspan should allow you multiple sources , we have it running in production what switch are you trying to run it on?
Edited--Just realised what you were asking , apologies>
try this:
DC2sw
monitor session 10 source interface Gi0/3 , g1/0
monitor session 10 destination remote vlan 99
DC1sw
monitor session 10 source interface Gi0/3 , g1/0
monitor session 10 destination remote vlan 99
monitor session 11 source remote vlan 99
monitor session 11 destination interface Gi0/0
01-31-2025 06:31 AM
I've tried that, documentation states you can't use a local source to a remote vlan destination. Came to the conclusion I will need a small hub at the destination for 2 span sessions since the collector only has one port. Thanks guys!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide