I have implemented RSPAN in my network to VoIP monitoring. I want to filter only VoIP traffic and discard the rest. The RSPAN sources are on 3560 and 2960 catalyst switch. I m thinking implementing VACL filtering SCCP and RTP packets. I think the configuration will be similar to:
#access-list 141 permit tcp any any range 2000 2002
#access-list 141 permit any any range 16384 32767
#monitor session 1 source interface G0/1 both
#monitor session 1 filter ip access-group 141
#monitor session 1 filter vlan 100
#monitor session 1 destination remote vlan 41
Please let me know if you have any consideration about it.
Thanks in advance.