Monitor Session - Cisco Catalyst 3560X-24P Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands

monitor session

Use the monitor session global configuration command on the switch stack or on a standalone switch
to start a new Switched Port Analyzer (SPAN) session or Remote SPAN (RSPAN) source or destination
session, to start a new flow-based SPAN (FSPAN) session or flow-based RSPAN (FRSPAN) source or
destination session, to enable ingress traffic on the destination port for a network security device (such
as a Cisco IDS Sensor Appliance), to add or delete interfaces or VLANs to or from an existing SPAN or
RSPAN session, and to limit (filter) SPAN source traffic to specific VLANs. Use the no form of this
command to remove the SPAN or RSPAN session or to remove source or destination interfaces or filters
from the SPAN or RSPAN session. For destination interfaces, the encapsulation options are ignored with
the no form of the command.
Syntax Description
session_number
destination
interface interface-id
encapsulation replicate
ingress
OL-21522-02
monitor session session_number destination {interface interface-id [, | -] [encapsulation
replicate] [ingress {dot1q vlan vlan-id | isl | untagged vlan vlan-id | vlan vlan-id}]} | {remote
vlan vlan-id}
no monitor session session_number destination {interface interface-id [, | -] [encapsulation
replicate] [ingress {dot1q vlan vlan-id | isl | untagged vlan vlan-id | vlan vlan-id}]} | {remote
vlan vlan-id}
monitor session session_number filter vlan vlan-id [, | -]
monitor session session_number filter {ip | ipv6 | mac} access-group {access-list-number | name}
monitor session session_number source {interface interface-id [, | -] [both | rx | tx]} | {vlan
vlan-id [, | -] [both | rx | tx]}| {remote vlan vlan-id}
no monitor session {session_number | all | local | remote}
no monitor session session_number filter vlan vlan-id [, | -]
no monitor session session_number filter {ip | ipv6 | mac} access-group
no monitor session session_number source {interface interface-id [, | -] [both | rx | tx]} | {vlan
vlan-id [, | -] [both | rx | tx]}| {remote vlan vlan-id}
Specify the session number identified with the SPAN or RSPAN session.
The range is 1 to 66.
Specify the SPAN or RSPAN destination. A destination must be a physical
port.
Specify the destination or source interface for a SPAN or RSPAN session.
Valid interfaces are physical ports (including type, stack member, module,
and port number). For source interface, port channel is also a valid
interface type, and the valid range is 1 to 48.
(Optional) Specify that the destination interface replicates the source
interface encapsulation method. If not selected, the default is to send
packets in native form (untagged).
These keywords are valid only for local SPAN. For RSPAN, the RSPAN
VLAN ID overwrites the original VLAN ID; therefore, packets are always
sent untagged.
(Optional) Enable ingress traffic forwarding.
Catalyst 3750-X and 3560-X Switch Command Reference
monitor session
2-403