02-08-2020 06:28 AM
Hi All
I have 3 separate access switches (2960XR) with different vlans on them. These 3 switches have layer 2 connectivity to a Cisco 3850-12S switch.
If I set up 3 separate monitor sessions (1 on each of the 3 access switches) and mark the desitination as an RSPAN vlan will it allow me to copy the source traffic from each switch vlan to the one RSPAN vlan (ie aggregating a copy of the traffic from the source vlans to the one destination RSPAN Vlan) ?
02-08-2020 09:23 AM
- Not exactly : The RSPAN traffic from the source ports or VLANs is copied into the RSPAN VLAN and forwarded over trunk ports carrying the RSPAN VLAN to a destination session monitoring the RSPAN VLAN. Each RSPAN source switch must have either ports or VLANs as RSPAN sources. The destination is always a physical port.
M.
02-08-2020 10:13 AM
ok so if i do something like the following would this work ?:
switch1
Monitor session 1 source vlan 10
Monitor session 1 destination remote vlan 100
switch2
Monitor session 1 source vlan 20
Monitor session 1 destination remote vlan 100
Switch3
Monitor session 1 source vlan 30
Monitor session 1 destination remote vlan 100
Switch4
Vlan 100
Name RSPANvlan
Remote-span
Monitor session 1 destination interface gix/x/x
02-08-2020 09:14 PM
Make you VLAN 100 created all switches and allowed in the port-channel or trunk to carry the traffic.
here is reference guide :
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide