RSPAN C9350

[roniberger123]

Hi,

I have C9350 17.18.02 smart switch that is connected directly to IDS and I have a few C9200 I want all of them vlans to be monitored.
C9350 not supporting the remote-span command.
Which solution I can use?

Thanks in advance, Roni

[Htonieto]

Hello @roniberger123 

As per Cisco documentation it is supported in C9350, please check the following documents, there is a how to configure and it's limitations.

RSPAN Configuration Guidelines

[roniberger123]

Hi,

Thanks for your response.

The issue I’m facing is that on my Cisco Catalyst 9350 (running 17.18.02), when I create an RSPAN VLAN (for example, VLAN 301), I do not have the option to configure it with the remote-span command.

It seems like the command is not available under VLAN configuration, so I’m unable to mark the VLAN as an RSPAN VLAN.

Attaching screenshot:

[Htonieto]

Hello @roniberger123, now your question is clearer.

As per this Cisco documentation you're doing the right thing, not sure why is not a valid.

Configuration Examples for SPAN and RSPAN

You can try just specify the RSPAN VLAN and see if works.

SW(config)#monitor session 1 destination remote vlan ?
  <1006-4094>  Remote SPAN destination extended RSPAN VLAN number
  <2-1001>     Remote SPAN destination RSPAN VLAN number

[kevin.charron@atlascopco.com]

I have the exact same issue trying to deploy Cyber Vision on a C9350. I have it running on a C9300 and IE3400, but the commands just aren't available. I'm also running 17.18.2 as per the documentation. 

[gtrejoor]

Hello roniberger123

I would like to address your concern about the RSPAN feature on the Smart Switches C9350; short answer, the C9350 doesn't support the RSPAN feature yet. Nevertheless, you can use the other mirroring options available on this platform: Local SPAN or ERSPAN.

You can find the support on the next URL https://www.cisco.com/c/dam/en/us/products/collateral/switches/c9350-series-smart-switches/c9350-series-smart-switches-ds.pdf

I'm testing on the lab using IOS 26.1.1a and the option is available:

C9350-24P(config)#monitor session 1 type ?
erspan-source Encapsulated RSPAN Source Session 

If this post helps you resolve your concern, please consider marking it as a solution or giving it a like.

Regards,