monitor session

[Network Pro]

hi,

i would like to monitor traffic between multiple source ports to multiple destination ports on a nexus 7k. i lknow when you set up monitor session is between source and destination (laptop or traffic analyser) but is there a way i can set up between source and multiple destination ports and capture that traffic ?

Thanks                  

[Arumugam Muthaiah]

Hi,

• A destination port can only be configured in one SPAN session at a time
  
• Source port can be a single port or multiple ports or a VLAN, which is also called a monitored port. You can monitor all the packets for source port which is received (ingress), transmitted (egress), or bidirectional (both). A replication of the packets is sent to the destination port for analyzation.
  
• For VLAN-based SPAN (VSPAN), all ports in VLAN are source ports. So the traffic in the VLAN is monitored. You can apply VLAN based filter on trunk port of the switch to limit SPAN traffic monitor
  
• The destination port is a port that was connected to the device such as SwitchProbe device or other Remote Monitoring (RMON) probe or security device that can receive and analyze the copied packets from single or multiple source port
  

Refer:

SPAN Configuration on a Nexus 7000 Series Switches

http://www.cisco.com/en/US/products/ps9402/products_configuration_example09186a0080b8253b.shtml

Cisco Nexus 7000 Series NX-OS System Management Configuration Guide, Release 5.x

http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/system_management/configuration/guide/sm_14span.html

Regards,

Aru

*** Please rate if the post is useful ***

[Network Pro]

would i be able to do a remote span and vlan span on same monitor session to a single destination ?

[Arumugam Muthaiah]

Hi,

You can configure an RSPAN VLAN for use only as a SPAN session source

For sources, you can specify Ethernet ports, port channels, the supervisor inband interface, VLANs, and RSPAN VLANs. You can specify private VLANs (primary, isolated, and community) in SPAN sources.

Please see the below reference how to implement it.

Refer:

http://www.cisco.com/image/gif/paws/113438/rspan-nexus-7000-00.pdf

Regards,

Aru

*** Please rate if the post is useful ***