span ro rspan from one switchport to another switchport

Answered Question
Aug 9th, 2007
User Badges:
  • Silver, 250 points or more

Is it possible to monitor a switchport on one switch and send that traffic to another port on a different switch? switches are connected using trunks.

Correct Answer by wochanda about 9 years 8 months ago

Yes, RSPAN is what you need. If your switches run IOS, here is the idea:


Source:

vlan 511

remote-span


monitor session 1 source interface Fastethernet0/11

monitor session 1 destination remote vlan 511


All switches between:


vlan 511

remote-span


Destination:

monitor session 1 source remote vlan 511

monitor session 1 destination interface Fa0/31


The config is the same on most IOS switches, here is the guide for the 2970:

http://www.cisco.com/en/US/docs/switches/lan/catalyst2970/software/release/12.2_25_se/configuration/guide/swspan.html#wp1081130

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
wochanda Thu, 08/09/2007 - 05:14
User Badges:
  • Silver, 250 points or more

Yes, RSPAN is what you need. If your switches run IOS, here is the idea:


Source:

vlan 511

remote-span


monitor session 1 source interface Fastethernet0/11

monitor session 1 destination remote vlan 511


All switches between:


vlan 511

remote-span


Destination:

monitor session 1 source remote vlan 511

monitor session 1 destination interface Fa0/31


The config is the same on most IOS switches, here is the guide for the 2970:

http://www.cisco.com/en/US/docs/switches/lan/catalyst2970/software/release/12.2_25_se/configuration/guide/swspan.html#wp1081130

Tshi M Thu, 08/09/2007 - 05:30
User Badges:
  • Silver, 250 points or more

Thanks for the quick reply...I should have been more specific and mentioned that the source port is not part of a VLAN. It is used to connect to our WAN. Does the switchport need to be part of the VLAN created for the RSPAN?

wochanda Thu, 08/09/2007 - 05:34
User Badges:
  • Silver, 250 points or more

Nope, that doesn't matter. So long as the port on the source switch is some sort of ethernet port this will work.


If it is some sort of WAN port on the 6500, let me know and i'll give you tips on how to grab that traffic.

Tshi M Thu, 08/09/2007 - 05:45
User Badges:
  • Silver, 250 points or more

Thanks... it is indeed a port on the 6509.

wochanda Thu, 08/09/2007 - 05:55
User Badges:
  • Silver, 250 points or more

If it is an ethernet port, that is fine.


If it is a port on a Flexwan/OSM/SIP module, let me know.

Actions

This Discussion