Consolidated Platform Configuration Guide, Cisco Ios Release 15.2(4)E (Catalyst 2960-X Switches - Cisco Catalyst 2960 series Configuration Manual

DETAILED STEPS
Command or Action
Step 1
enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3 no monitor session {session_number | all |
local | remote}
Example:
Switch(config)# no monitor session 1
Step 4 monitor session session_number source
{interface interface-id | vlan vlan-id} [, | -]
[both | rx | tx]
Example:
Switch(config)# monitor session 1
source interface gigabitethernet1/0/1
tx
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Enters the global configuration mode.
Removes any existing SPAN configuration for the session.
• For session_number, the range is 1 to 66.
• all—Removes all SPAN sessions.
• local—Removes all local sessions.
• remote—Removes all remote SPAN sessions.
Specifies the RSPAN session and the source port (monitored port).
• For session_number, the range is 1 to 66.
• Enter a source port or source VLAN for the RSPAN session:
• (Optional) [, | -]—Specifies a series or range of interfaces. Enter a
space before and after the comma; enter a space before and after the
hyphen.
• (Optional) both | rx | tx—Specifies the direction of traffic to monitor.
If you do not specify a traffic direction, the source interface sends
both sent and received traffic.

Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)

How to Configure SPAN and RSPAN
◦ For interface-id, specifies the source port to monitor. Valid
interfaces include physical interfaces and port-channel logical
interfaces (port-channel port-channel-number). Valid
port-channel numbers are 1 to 48.
◦ For vlan-id, specifies the source VLAN to monitor. The range
is 1 to 4094 (excluding the RSPAN VLAN).
A single session can include multiple sources (ports or VLANs),
defined in a series of commands, but you cannot combine
source ports and source VLANs in one session.
◦both—Monitors both received and sent traffic.
◦rx—Monitors received traffic.
493