Traffic Filter on Span Port

[m.arancibia]

Hi, I need to put a filter on a Span Port (on Cisco 7600) in order to reduce the traffic (the traffic is taked from a MPLS link with a TAP) before inyect it to a sniffer server.

I tried with VACL , ACL but the filter doesnt works.

I 'll appreciate your help.

Regards.

[Antonio Knox]

You can use vlan filters

monitor session 1 source interface type number

monitor session 1 filter vlan vlan-id

monitor session 1 destination interface type number

[m.arancibia]

I already tested this option..the situation is this: I have installed a TAP on TenGig Link (with MPLS), at the output there are 1 Gbps of traffic.

This traffic is injected by port span to another interface , so , in this interface I need filter the traffic by IP Origin/Destiny with that I could reduce the amount of Traffic to 300 Mbps....in theory..

I tried to do that configuring VACL, ACL etc.. but I can reach modify the amount of traffic.

Regards.

[Antonio Knox · Accepted solution]

The feature you're looking for is only availble on IOS 12.2(44)SE for 3560-E series switches but not on the 7600.  The feature is called Flow-Based SPAN.  It's a new feature that isn't available on most Cisco platforms:

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps8802/ps6969/ps5012/prod_bulletin0900aecd807382e4.html

Sorry that it's not available my friend.  You can still filter at the sniffer, though.