RSPAN

[BigK]

Hello All,

I am struggling to get Rspan configured to capture packet from ipphone over the WAN. the topology is below. Could someone help with the steps to get it done?

Wireshark (pc) --->SWITCH --> ROUTER -->WAN--> ROUTER --> SWITCH -->IPPHONE

Thanks

Karim

[AndreaTornaghi]

Unfortunately you can't do RSPAN over WAN. Which kind of switch are you using?

From my point of view the only way is to use ERSPAN but it is not supported from all switch.

[BigK]

The switch is 3850 - the router is 4431

[AndreaTornaghi]

You can try to follow the guide below, it's describe how ERSPAN work and how to configure it.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-3/configuration_guide/b_163_consolidated_3850_cg/b_163_consolidated_3850_cg_chapter_01001010.pdf

HTH

[BigK]

@AndreaTornaghi

Thanks Andrea,

After some research I found out that I can do Cisco IOS Embedded Packet Capture

since I have 4431 router. I will do some research about it and let you know. 

Thanks

Karim