Cisco Support Community

Nexus 5010 erspan config and vlan interface

Hi there,

I'm having problems configuring an ERSPAN session on my Nexus 5010 and I'm not sure where to go next.  The ERSPAN config looks pretty straight forward ( however, when I try and use vrf management, it says this is not allowed.  I am using these as pure L2 switches, with the mgmt0 interface being my only access into the device. 

So since it seems like you aren't allowed to use the management vrf for ERSPAN, I went ahead and configured a new vrf to use. I also ran an additional 1Gbps fiber link down to another device so I could have a path other than the mgmt interface. The Nexus is connected on Eth1/3 to a routed interface on a 6500.  Here's the config I'm trying to use:

vrf context NetOps


vlan 123

state active

no shut


interface Vlan123

  no shutdown

  vrf member NetOps

  ip address


interface Ethernet1/3

  switchport access vlan 123

  speed 1000


NX5K-02# sh vlan id 123

VLAN Name                             Status    Ports

---- -------------------------------- --------- -------------------------------

123  VLAN0123                         active    Po20, Eth1/3

VLAN Type  Vlan-mode

---- ----- ----------

123  enet  CE




Primary  Secondary  Type             Ports

-------  ---------  ---------------  -------------------------------------------

NX5K-02# sh int vlan 123

Vlan123 is down, line protocol is down

  Hardware is EtherSVI, address is  547f.ee37.a3fc

  Internet Address is

  MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

NX5K-02# sh int vl123 br


Interface Secondary VLAN(Type)                    Status Reason


Vlan123   --                                      down   suspended

So I can't seem to get the vlan123 interface to come up, and as a result, my monitor session has no where to go:

NX5K-02# sh monitor session 1

   session 1


type              : erspan-source

state             : down (No route exists for configured destination ip)

erspan-id         : 100

vrf-name          : NetOps

destination-ip    :

ip-ttl            : 255

ip-dscp           : 0

origin-ip         : (global)

source intf       :

    rx            : Eth101/1/9

    tx            :

    both          :

source VLANs      :

    rx            :

Can anyone help point me in the right direction?

Thanks in advance,


Everyone's tags (2)
Community Member

This is still an issue for us

This is still an issue for us. We still do have a problem. Especially if they sit on the same vlan of the mgmt0 vrf.

CreatePlease to create content