cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4289
Views
0
Helpful
21
Replies

rspan breaks connectivity

paolo bevilacqua
Hall of Fame
Hall of Fame

For the first time I have been trying remote span by the manual, but cannot use it.

As soon I enter °monitor session 1 destination remote vlan XX", connectivity for the monitored vlan ceases.

When I negate the command, connecitivity resumes immediately.

If I monitor a source port instead or a vlan, the same happens, no more connectivity throught that port.

Vlan XX is configured as remote span and this information is propagated by VTP to all switches-

The same happens if I do the command on the VTP server switch.

The monitored port or vlan only have some hundreds PPS  traffic.

I have tried with various 2960 and 3750 with up to date IOS.

Local span works just fine.

Why that may be happening ?

21 Replies 21

Gotch ya.....now I got it.

Could it be flooding so much traffic that it cause the loss of connectivity?

Mike

burleyman wrote:

Gotch ya.....now I got it.

Could it be flooding so much traffic that it cause the loss of connectivity?

Mike


That's always a possibility with RSPAN but Paolo has said there is minimal traffic in vlan 253 so it is unlikely. There seems to be littel wrong with what config we have been supplied so it's not obvious what is happening exactly.

Jon

Hi Paolo,

I saw this issue with 2960C 12.2(35)SE5. Reachability to the server connected to the source port is lost rigth after I enabled mirroring.

Did you open a TAC case and get any feedback? I'd appreciate if you can share the results.

Cheers,

Hakan

Peter Paluch
Cisco Employee
Cisco Employee

Jon,

Good point. Also, Paolo: with regard to the article described a few days ago here:

https://supportforums.cisco.com/message/3198475#3198475

can you see any RSTP-related messages appearing on the upstream switch after you start the RSPAN session? What is the show span output on the upstream switch in the moment the RSPAN session is activated?

Best regards,

Peter

Peter's note is a good one. The only issue I can see is Gi1/0/21 being pruned by VTP. If this is not involved in the path there have been issues with switches inspecting BPDUs from RSPAN sessions previously. If the upstream box is blocking due to receiving VLAN253 BPDUs, this could be the source of the loss. Since the routing is done elsewhere, we need to follow the path to the VLAN gateway and review the STP state when RSPAN is enabled.

Inspecting the full STP topology and reviewing for changes when RSPAN is enabled will help here.

I have the same issue with two 3560s.  If I SPAN a VLAN as the source and then specify the destination as the RSPAN VLAN, all connectivity is broken to the remote switch.  If I change the source from VLAN to port based I maintain connectivity but only see broadcast and multicast on the capture port. 

ggudava
Level 1
Level 1

Someone resolved this problem?

Review Cisco Networking products for a $25 gift card