RSPAN configuration

[DHOUHA BEN HAMZA]

Hi,

I'd like to sniffer a single VLAN. I configured RSPAN according the indication of the Cisco Technical document. But I don’t have traffic in the sniffer when I try to capture it.

1/ I have this following test platform:

SW2 F0/24 ==cross cable== F0/24 SW1

2/ SW1 and SW2 is 2950 catalyst With 12.1(14)EA1a IOS Version.

3/With following configuration:

SW2

switch2#show running-config

spanning-tree mode pvst

no spanning-tree optimize bpdu transmission

spanning-tree extend system-id

!

interface FastEthernet0/9

switchport access vlan 100

!

interface FastEthernet0/10

switchport access vlan 100

!

interface FastEthernet0/11

switchport access vlan 100

!

interface FastEthernet0/12

switchport access vlan 100

!

interface FastEthernet0/13

switchport access vlan 100

!

interface FastEthernet0/14

switchport access vlan 100

!

interface FastEthernet0/15

!

interface FastEthernet0/23

!

interface FastEthernet0/24

switchport mode trunk

!

monitor session 1 source interface Fa0/9 - 16

monitor session 1 destination remote vlan 10 reflector-port Fa0/23

end

SW1

switch1#show running-config

spanning-tree mode pvst

no spanning-tree optimize bpdu transmission

spanning-tree extend system-id

!

interface FastEthernet0/9

!

interface FastEthernet0/24

switchport mode trunk

!

monitor session 1 destination interface Fa0/9

monitor session 1 source remote vlan 10

end

in Switch2 I connected workstation: Port f0/9, Port f0/10, Port f0/11, Port f0/12, Port f0/13, Port f0/14

in Switch1 I connected my sniffer : port f0/9

what must I add or remove in this configure so that works well.

thanks in advanced

Best regards

[milan.kulik]

Hi,

have you created VLAN 10 with the remote-span option?

See http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12114ea1/2950scg/swvlan.htm#29686 for details.

You probably read the step-by-step instructions how to configure RSPAN on 2950s http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12114ea1/2950scg/swspan.htm

Regards,

Milan

[DHOUHA BEN HAMZA]

Hi,

I have create VLAN 10 with the remote-span:

switch2#show vlan

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19, Fa0/20, Fa0/21, Fa0/22

Fa0/23

10 test active

20 VLAN0020 active

100 VLAN0100 active Fa0/9, Fa0/10, Fa0/11, Fa0/12, Fa0/13, Fa0/14

Remote SPAN VLANs

-----------------------------------------------------

10

switch2#

I have apply all this steps in my test platform but he doesn't work please if you have an idea or other document, I would be appreciative.

Thanks in advanced

Best regards

[steven.lee]

Hi all, can I use any unused physical port that without any cable attachs to it as a reflector port for the rspan?

regards,

Steven Lee

[milan.kulik]

Hi,

"The following ports cannot be used as reflector ports:

Gigabit uplink ports on the WS-4013 Supervisor II

Gigabit uplink ports on the 2980G-A

Gigabit ports on the WS-4232-L3 module"

see http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/8_2/confg/span.htm#1023673 for details.

But generally you can use a port without any cable connected.

Regards,

Milan

[steven.lee]

Hi, I tried to get rspan working between 2950, 3550 and 6509. Can I define rspan source in 2950, rspan destination in 6509? I tried but it's not working.

regards,

Steven