Creating An Rspan Destination Session And Enabling Ingress Traffic - Cisco Catalyst 3550 series Software Configuration Manual

Chapter 24 Configuring SPAN and RSPAN
Command
Step 5 show monitor [session session_number]
Step 6
copy running-config startup-config
This example shows how to configure VLAN 901 as the source remote VLAN and port 5 as the
destination interface:
Switch(config)# monitor session 1 source remote vlan 901
Switch(config)# monitor session 1 destination interface fastEthernet0/5
Switch(config)# end

Creating an RSPAN Destination Session and Enabling Ingress Traffic

Beginning in privileged EXEC mode, follow these steps to create an RSPAN destination session, to
specify the source RSPAN VLAN, and to enable ingress traffic on the destination port for a network
security device (such as a Cisco IDS Sensor Appliance):
Command
Step 1
configure terminal
Step 2
monitor session session_number source
remote vlan vlan-id
Step 3 monitor session session_number
destination interface interface-id
[encapsulation {dot1q [ingress vlan vlan id]
| ISL [ingress]} | ingress vlan vlan id]
Step 4
end
78-11194-09
Purpose
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the RSPAN session and the source RSPAN VLAN.
For session_number, specify 1 or 2.
For vlan-id, specify the source RSPAN VLAN to monitor.
Specify the RSPAN session, the destination port, the packet
encapsulation, and the ingress VLAN.
For session_number, specify 1 or 2.
For interface-id, specify the destination port. Valid interfaces include
physical interfaces.
(Optional) Specify the encapsulation of the packets transmitted on
the RSPAN destination port. If no encapsulation is specified, all
transmitted packets will be sent in native format (untagged).
Enter encapsulation dot1q to send native VLAN packets
•
untagged and all other VLAN tx packets tagged dot1q.
Enter encapsulation isl to send all tx packets encapsulated using
•
ISL.
(Optional) Specify whether forwarding is enabled for ingress traffic
on the SPAN destination port.
For native (untagged) and dot1q encapsulation, specify ingress
•
vlan vlan id to enable ingress forwarding with vlan id as the
native VLAN; vlan id will also be used as the native VLAN for
transmitted packets.
• Specify ingress to enable ingress forwarding when using ISL
encapsulation.
Return to privileged EXEC mode.
Catalyst 3550 Multilayer Switch Software Configuration Guide
Configuring RSPAN
24-19