cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
544
Views
0
Helpful
4
Replies

SPAN RSPAN

j.huizinga
Level 6
Level 6

Hi,

This is the scenario:

2 3560 switches both are populated with IP phones. There is a specific Voice VLAN. The monitoring port is on switch1

It looks like you can not configure SPAN and RSPAN on the same switch using the same destination port.

So I can moonitor voice traffic on switch1 using SPAN or on switch2 using RSPAN.

Is there no way I can monitor both switches here?

Anyone has experience with this?

Thanks,

Jan

1 Accepted Solution

Accepted Solutions

deepak.pandey
Level 1
Level 1

Here the configuration for a switch which is connected to the network monitoring device.

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlan's to RSPAN VLAN 100.

! let's say we want to monitor traffic for multiple vlan which span over multiple switches in this example our source vlans are vlan 2 to vlan 20.

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

! Monitor session 2 captures bidirectional traffic from RSPAN VLAN 100 to interface conected to network monitoring device say fa4/29

monitor session 2 source remote vlan 100

monitor session 2 destination interface fa4/29

On other switches do the following configuration

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlans to RSPAN VLAN 100

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

hope this will help

Regards

Deepak Pandey

View solution in original post

4 Replies 4

ankbhasi
Cisco Employee
Cisco Employee

Hi Jan,

May be I did not understood your question well but configuring RSAPN you can monitor both switch 1 and switch 2 on a destination port which can be on switch 1 or switch 2.

HTH

Ankur

How?

Could you give an example?

Thanks,

Jan

deepak.pandey
Level 1
Level 1

Here the configuration for a switch which is connected to the network monitoring device.

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlan's to RSPAN VLAN 100.

! let's say we want to monitor traffic for multiple vlan which span over multiple switches in this example our source vlans are vlan 2 to vlan 20.

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

! Monitor session 2 captures bidirectional traffic from RSPAN VLAN 100 to interface conected to network monitoring device say fa4/29

monitor session 2 source remote vlan 100

monitor session 2 destination interface fa4/29

On other switches do the following configuration

!Define the RSPAN VLAN Let's say vlan 100

vlan 100

remote-span

! Monitor session 1 captures bidirectional traffic from source vlans to RSPAN VLAN 100

monitor session 1 source vlan 2 - 20

monitor session 1 destination remote vlan 100

hope this will help

Regards

Deepak Pandey

Yes this realy helps!

Thank you very much and 5 points for you!

Jan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card