Configuring Span; Default Span Configuration - Cisco Catalyst 2360 Software Configuration Manual

Configuring SPAN

•
•
•
Configuring SPAN
These sections contain this configuration information:
•
•

Default SPAN Configuration

Table 20-1
Table 20-1
Feature
SPAN state
Source port traffic to monitor
Encapsulation type (destination port)
Ingress forwarding (destination port)
VLAN filtering
Catalyst 2360 Switch Software Configuration Guide
20-6
VLAN and trunking—You can modify VLAN membership or trunk settings for source or
destination ports at any time. However, changes in VLAN membership or trunk settings for a
destination port do not take effect until you remove the SPAN destination configuration. Changes
in VLAN membership or trunk settings for a source port immediately take effect, and the respective
SPAN sessions automatically adjust accordingly.
EtherChannel—You can configure an EtherChannel group as a source port but not as a SPAN
destination port. When a group is configured as a SPAN source, the entire group is monitored.
If a physical port is added to a monitored EtherChannel group, the new port is added to the SPAN
source port list. If a port is removed from a monitored EtherChannel group, it is automatically
removed from the source port list.
A physical port that belongs to an EtherChannel group can be configured as a SPAN source port and
still be a part of the EtherChannel. In this case, data from the physical port is monitored as it
participates in the EtherChannel. However, if a physical port that belongs to an EtherChannel group
is configured as a SPAN destination, it is removed from the group. After the port is removed from
the SPAN session, it rejoins the EtherChannel group. Ports removed from an EtherChannel group
remain members of the group, but they are in the inactive or suspended state.
If a physical port that belongs to an EtherChannel group is a destination port and the EtherChannel
group is a source, the port is removed from the EtherChannel group and from the list of monitored
ports.
Multicast traffic can be monitored. For egress and ingress port monitoring, only a single unedited
packet is sent to the SPAN destination port. It does not reflect the number of times the multicast
packet is sent.
Default SPAN Configuration, page 20-6
Configuring Local SPAN, page 20-7
shows the default SPAN configuration.
Default SPAN and RSPAN Configuration
Default Setting
Disabled.
Both received and sent traffic (both).
Native form (untagged packets).
Disabled
On a trunk interface used as a source port, all VLANs are
monitored.
Chapter 20 Configuring SPAN
OL-19808-01