Default Span And Rspan Configuration; Configuring Local Span; Span Configuration Guidelines; Creating A Local Span Session - Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual

Configuring SPAN and RSPAN

Default SPAN and RSPAN Configuration

Table 24-1
Table 24-1
Feature
SPAN state (SPAN and RSPAN)
Source port traffic to monitor
Encapsulation type (destination port)
Ingress forwarding (destination port)
VLAN filtering
RSPAN VLANs

Configuring Local SPAN

These sections contain this configuration information:
•
•
•
•

SPAN Configuration Guidelines

Follow these guidelines when configuring SPAN:
•
•
•
•
•
•
•
•
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
24-10
shows the default SPAN and RSPAN configuration.
Default SPAN and RSPAN Configuration
SPAN Configuration Guidelines, page 24-10
Creating a Local SPAN Session, page 24-11
Creating a Local SPAN Session and Configuring Ingress Traffic, page 24-13
Specifying VLANs to Filter, page 24-15
You can configure a total of two local SPAN sessions or RSPAN source sessions on each switch. You
can have a total of 66 SPAN sessions (local, RSPAN source, and RSPAN destination) on a switch.
For SPAN sources, you can monitor traffic for a single port or VLAN or a series or range of ports
or VLANs for each session. You cannot mix source ports and source VLANs within a single SPAN
session.
The destination port cannot be a source port; a source port cannot be a destination port.
You cannot have two SPAN sessions using the same destination port.
When you configure a switch port as a SPAN destination port, it is no longer a normal switch port;
only monitored traffic passes through the SPAN destination port.
Entering SPAN configuration commands does not remove previously configured SPAN parameters.
You must enter the no monitor session {session_number | all | local | remote} global configuration
command to delete configured SPAN parameters.
For local SPAN, outgoing packets through the SPAN destination port carry the original
encapsulation headers—untagged or IEEE 802.1Q—if the encapsulation replicate or
encapsulation dot1q keywords are specified. If the keywords are not specified, the packets are sent
in native form. For RSPAN destination ports, outgoing packets are not tagged.
You can configure a disabled port to be a source or destination port, but the SPAN function does not
start until the destination port and at least one source port or source VLAN are enabled.
Chapter 24
Default Setting
Disabled.
Both received and sent traffic (both).
Native form (untagged packets).
Disabled
On a trunk interface used as a source port, all VLANs are
monitored.
None configured. Default VLAN type is UNI isolated.
Configuring SPAN and RSPAN
78-17058-01