cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1538
Views
0
Helpful
1
Replies

SPAN with more than 1 source interface

Dean Romanelli
Level 4
Level 4

Hi All,

Can I configure SPAN to send traffic from more than 1 source ports to 1 destination interface (sniffer connected)?

For example:

monitor session 1 source interface Gi1/0/1
monitor session 1 source interface Gi1/0/2
monitor session 1 destination interface Gi1/0/24

 

Will that work as expected?

If there are multiple VLANs that go across the source interfaces, I will need to add the "encapsulation dot1q" command to the destination string to see all traffic right?

1 Reply 1

Mark Malone
VIP Alumni
VIP Alumni

Yes that's fine i have 1 in place at the minute collecting phone traffic, works fine collects both phones 2 diff sources

If its trunk port your collecting from you should use the encapsulation command this makes the switch copy the vlan tags to the output port

https://supportforums.cisco.com/document/13891/how-configure-port-monitoring-span-catalyst-2940-2950-2955-2970-3550-or-3750-series

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco