Creating An Rspan Destination Session And Configuring Ingress Traffic - Cisco WS-C3560-48PS-S Software Configuration Manual

Configuring SPAN and RSPAN
Command
Step 7 monitor session session_number
destination interface interface-id
Step 8
end
Step 9
show monitor [session session_number]
show running-config
Step 10 copy running-config startup-config
To delete a SPAN session, use the no monitor session session_number global configuration command.
To remove a destination port from the SPAN session, use the no monitor session session_number
destination interface interface-id global configuration command. To remove the RSPAN VLAN from
the session, use the no monitor session session_number source remote vlan vlan-id.
This example shows how to configure VLAN 901 as the source remote VLAN and port 1 as the
destination interface:
Switch(config)# monitor session 1 source remote vlan 901
Switch(config)# monitor session 1 destination interface gigabitethernet0/1
Switch(config)# end

Creating an RSPAN Destination Session and Configuring Ingress Traffic

Beginning in privileged EXEC mode, follow these steps to create an RSPAN destination session, to
specify the source RSPAN VLAN and the destination port, and to enable ingress traffic on the destination
port for a network security device (such as a Cisco IDS Sensor Appliance).
Refer to the
Note
keywords not related to ingress traffic. This procedure assumes the RSPAN VLAN has already been
configured.
Command
Step 1
configure terminal
Step 2
no monitor session {session_number | all |
local | remote}
Catalyst 3560 Switch Software Configuration Guide
23-20
Purpose
Specify the RSPAN session and the destination interface.
For session_number, enter the number defined in Step 6.
Note
For interface-id, specify the destination interface. The destination
interface must be a physical interface.
Note
Return to privileged EXEC mode.
Verify the configuration.
(Optional) Save the configuration in the configuration file.
"Creating an RSPAN Destination Session" section on page 23-19
Purpose
Enter global configuration mode.
Remove any existing SPAN configuration for the session.
Chapter 23
In an RSPAN destination session, you must use the same
session number for the source RSPAN VLAN and the
destination port.
Though visible in the command-line help string,
encapsulation replicate is not supported for RSPAN. The
original VLAN ID is overwritten by the RSPAN VLAN ID,
and all packets appear on the destination port as untagged.
Configuring SPAN and RSPAN
for details about the
78-16156-01