SPAN Setup Cisco 930048T - Fiber and Ethernet

[christian.sheppard]

Hello All,

I apologize but I was not able to locate any documentation on this specific setup and my efforts have not yielded any fruit thus far. Thank you in advance for anyone that is able/willing to assist.

Scenario and Objective:

We have a 48 port Cisco 9300 that we would like to setup a SPAN or port monitor for our ingress/egress traffic. The switch (and subsequent traffic) is connected to our Velo device (The ISP's Demarc) by fiber. We have a server that is connected to the same physical switch (It is a switch stack). We wish to create the SPAN with the source being the fiber port and the destination, the standard RJ45 Ethernet port on the same switch that is connected to the server. The server setup has been verified as good. All physical lines are verified as good.

Current Result/Symptoms

No traffic is being monitored on the indicated server.

Current SPAN Configuration:

sh monitor session 1
Session 1
---------
Type : Local Session
Source Ports :
Both : Te2/1/1
Destination Ports : Gi2/0/16
Encapsulation : Native
Ingress : Disabled

[marce1000]

 - Possible cause : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv59791  , in that context look at the current software version on the 9300 , use this advisory release and check again : https://software.cisco.com/download/home/286313950/type/282046477/release/Amsterdam-17.3.4

 M.

[balaji.bandi]

Can you post the interface and relavant monitor span config please to look.

[christian.sheppard]

Hi Balaji,

Thanks for reaching out. Yes, please see below. I also added the same VLAN to the destination port that was found on the source port however, that had no effect.

Source Port

(Show Interface):

TenGigabitEthernet2/1/1 is up, line protocol is up (connected)
Hardware is Ten Gigabit Ethernet, address is <Redacted>
Description: Velo2 Core Routing - GE4
MTU 9198 bytes, BW 10000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 3/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 10Gb/s, link type is auto, media type is SFP-10GBase-CX1
input flow-control is on, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 00:00:01, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 135667000 bits/sec, 13599 packets/sec
5 minute output rate 12645000 bits/sec, 6789 packets/sec
155142925144 packets input, 128166442702687 bytes, 0 no buffer
Received 14067661 broadcasts (6132247 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 6132247 multicast, 0 pause input
0 input packets with dribble condition detected
130951994870 packets output, 68201228734520 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

(Show Run)

Current configuration : 132 bytes
!
interface TenGigabitEthernet2/1/1
description Velo2 Core Routing - GE4
switchport access vlan 1000
switchport mode access
end

Destination Port

(Show Interface):

GigabitEthernet2/0/16 is up, line protocol is down (monitoring)
Hardware is Gigabit Ethernet, address is <Redacted>
Description: SPAN
MTU 9198 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 16/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is on, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 2d21h, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 600995466
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 65191000 bits/sec, 10389 packets/sec
4172474145 packets input, 4052038607414 bytes, 0 no buffer
Received 20252068 broadcasts (7250450 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 7250450 multicast, 0 pause input
0 input packets with dribble condition detected
15068478434 packets output, 3049318671145 bytes, 0 underruns
0 output errors, 0 collisions, 3 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

(Show Run)

<Blank>

[balaji.bandi]

how about showing the run config on destination port and your monitor config?

Drops on the destination could be due to the source is higher  capacity than the destination :

Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 600995466

[christian.sheppard]

Balaji,

I did sir. They are categorized as such but here they are again. There are no drops as there is no traffic. The Rx and Tx for the server reads 0. Again, note that I applied the same VLAN to the destination port and there was not change.

Source Port:

Current configuration : 132 bytes
!
interface TenGigabitEthernet2/1/1
description Velo2 Core Routing - GE4
switchport access vlan 1000
switchport mode access
end

Destination Port

<Blank>

[balaji.bandi]

how about showing the run config on destination port and your monitor config?

Can you post all the information rather bit and pieces ?

[christian.sheppard]

Balaji,

Perhaps I am not understanding you. Both the interface information and running configurations for the switchports in question are already posted. What command are you looking for me to run on the ports?

[balaji.bandi]

Appologies  - have i missed your config ? - sh monitor session 1  (i only see this information).

where is the  your monitor config please ?

[christian.sheppard]

Balaji,

Ohhh! OK, I see what you are asking about, my apologies. Yes please see below.

Session 1
---------
Type : Local Session
Source Ports :
Both : Te2/1/1
Destination Ports : Gi2/0/16
Encapsulation : Native
Ingress : Disabled

[balaji.bandi]

Not sure what is the Code running,

I have just tested one of the Cat 9300 with 16.12.X it works as expected ( show run  - full config will help here)

or refer below document :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-2/configuration_guide/nmgmt/b_172_nmgmt_9300_cg/configuring_span_and_rspan.html#concept_ucz_5yp_mgb

[christian.sheppard]

Balaji,

OK, yeah I saw that doc a bit ago and tried using it. It helped out a lot but I feel as if something is missing. Couple of things though.

1. Just for clarification, the source port is fiber and the destination port is standard Ethernet. I am not sure if that would matter but just double checking.

2. I can't post the entire full running config of the switch but I did post the running configs of the switchports involved. Is there a specific command you wanted me to run?

[balaji.bandi]

1. Just for clarification, the source port is fiber and the destination port is standard Ethernet. I am not sure if that would matter but just double checking.

Since your destination port Gig port if you think that is limittaion, remove exiting session 1

for testing take any port Gig  and configure session 1 using that as source  check, do you see the outcome on the span port to config all good ?

[christian.sheppard]

Hi Balaji,

Thanks. I have tried a couple of other known good Ethernet (Gi) ports as "sources" and the issue persists. As far as the configuration goes, it's possible that I am missing something but I do not know what that would be.

[balaji.bandi]

Can you post the below output : 

show version

show VLAN

show span VLAN 1000 

show run |  sec monitor