Erspan Sources; Erspan Sessions; Localized Erspan Sessions - Cisco Nexus 9000 Series Configuration Manual

ERSPAN Sources

ERSPAN Sources
The interfaces from which traffic can be monitored are called ERSPAN sources. Sources designate the traffic
to monitor and whether to copy ingress, egress, or both directions of traffic. ERSPAN sources include the
following:
• Ethernet ports (but not subinterfaces)
• Port channels
• The inband interface to the control plane CPU
• VLANs
• Satellite ports and host interface port channels on the Cisco Nexus 2000 Series Fabric Extender (FEX)
A single ERSPAN session can include mixed sources in any combination of the above.
Note

ERSPAN Sessions

You can create ERSPAN sessions that designate sources to monitor.

Localized ERSPAN Sessions

An ERSPAN session is localized when all of the source interfaces are on the same line card.
An ERSPAN session with a VLAN source is not localized.
Note
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
198
When a VLAN is specified as an ERSPAN source, all supported interfaces in the VLAN
Note
are ERSPAN sources.
VLANs can be ERSPAN sources only in the ingress direction.
Note
Note These interfaces are supported in Layer 2 access mode and Layer 2 trunk mode. They
are not supported in Layer 3 mode, and Layer 3 subinterfaces are not supported.
FEX ports are supported as ERSPAN sources in the ingress direction for all traffic and
Note
in the egress direction only for known Layer 2 unicast traffic.
Configuring ERSPAN