cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
595
Views
0
Helpful
4
Replies

SPAN RSPAN

j.huizinga
Level 6
Level 6

Hi,

This is the scenario:

2 3560 switches both are populated with IP phones. There is a specific Voice VLAN. The monitoring port is on switch1

It looks like you can not configure SPAN and RSPAN on the same switch using the same destination port.

So I can moonitor voice traffic on switch1 using SPAN or on switch2 using RSPAN.

Is there no way I can monitor both switches here?

Anyone has experience with this?

Thanks,

Jan

1 Accepted Solution

Accepted Solutions

deepak.pandey
Level 1
Level 1

Here the configuration for a switch which is connected to the network monitoring device.

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlan's to RSPAN VLAN 100.

! let's say we want to monitor traffic for multiple vlan which span over multiple switches in this example our source vlans are vlan 2 to vlan 20.

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

! Monitor session 2 captures bidirectional traffic from RSPAN VLAN 100 to interface conected to network monitoring device say fa4/29

monitor session 2 source remote vlan 100

monitor session 2 destination interface fa4/29

On other switches do the following configuration

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlans to RSPAN VLAN 100

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

hope this will help

Regards

Deepak Pandey

View solution in original post

4 Replies 4

ankbhasi
Cisco Employee
Cisco Employee

Hi Jan,

May be I did not understood your question well but configuring RSAPN you can monitor both switch 1 and switch 2 on a destination port which can be on switch 1 or switch 2.

HTH

Ankur

How?

Could you give an example?

Thanks,

Jan

deepak.pandey
Level 1
Level 1

Here the configuration for a switch which is connected to the network monitoring device.

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlan's to RSPAN VLAN 100.

! let's say we want to monitor traffic for multiple vlan which span over multiple switches in this example our source vlans are vlan 2 to vlan 20.

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

! Monitor session 2 captures bidirectional traffic from RSPAN VLAN 100 to interface conected to network monitoring device say fa4/29

monitor session 2 source remote vlan 100

monitor session 2 destination interface fa4/29

On other switches do the following configuration

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlans to RSPAN VLAN 100

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

hope this will help

Regards

Deepak Pandey

Yes this realy helps!

Thank you very much and 5 points for you!

Jan

Review Cisco Networking for a $25 gift card