Default Span Configuration; Span Configuration Guidelines - Cisco WS-C3550-12G Software Configuration Manual

Chapter 15 Configuring SPAN

Default SPAN Configuration

Table 15-1
This release supports only local SPAN; remote SPAN (RSPAN) is not supported.
Table 15-1 Default SPAN Configuration
Feature
SPAN state
Source port traffic to monitor
Encapsulation type (destination port)

SPAN Configuration Guidelines

Follow these guidelines when configuring SPAN:
•
•
•
•
•
•
•
•
•
•
•
•
78-11194-03
shows the default SPAN configuration.
Use a network analyzer to monitor ports.
Only two SPAN sessions can be active on a switch at the same time.
The destination port cannot be a source port; a source port cannot be a destination port.
You can have only one destination port per SPAN session. You cannot have two SPAN sessions
using the same destination port.
An EtherChannel port can be a SPAN source port; it cannot be a SPAN destination port.
For a SPAN source port, you can monitor transmitted traffic for a single port or received traffic for
a series or range of ports or VLANs.
When you configure a switch port as a SPAN destination port, it is no longer a normal switch port;
only monitored traffic passes through the SPAN destination port.
A trunk port can be a source port or a destination port. When a destination port is a trunk port,
outgoing packets through the SPAN port carry the encapsulation headers configured by the
user—either Inter-Switch Link (ISL) or IEEE 802.1Q. If no encapsulation type is defined, the
packets are sent in native form.
When you specify a single source port and do not specify a traffic type (Tx, Rx, or both), both is
used as the default.
You can configure a disabled port to be a source or destination port, but the SPAN function does not
start until the destination port and at least one source port or source VLAN are enabled.
For received traffic, you can mix multiple source port and source VLANs within a single SPAN
session. You cannot mix source VLANs and filter VLANs within a SPAN session; you can have
source VLANs or filter VLANs, but not both at the same time.
You can limit SPAN traffic to specific VLANs by using the filter vlan keyword. If a trunk port is
being monitored, only traffic on the VLANs specified with this keyword is monitored. By default,
all VLANs are monitored on a trunk port.
Default Setting
Disabled
Both received and sent traffic (both)
Only received traffic can be monitored on source
Note
VLANs or multiple source ports
Native form (no encapsulation type header)
Catalyst 3550 Multilayer Switch Software Configuration Guide
Configuring SPAN
15-7