Local Span; Remote Span - Cisco IE-3000-8TC Software Configuration Manual

Understanding SPAN and RSPAN
These sections contain this conceptual information:
•
•
•
•

Local SPAN

Local SPAN supports a SPAN session entirely within one switch; all source ports or source VLANs and
destination ports are in the same switch. Local SPAN copies traffic from one or more source ports in any
VLAN or from one or more VLANs to a destination port for analysis. For example, in
traffic on port 5 (the source port) is mirrored to port 10 (the destination port). A network analyzer on
port 10receives all network traffic from port 5 without being physically attached to port 5.
Figure 30-1
1

Remote SPAN

RSPAN supports source ports, source VLANs, and destination ports on different switches, enabling
remote monitoring of multiple switches across your network.
A and Switch B. The traffic for each RSPAN session is carried over a user-specified RSPAN VLAN that
is dedicated for that RSPAN session in all participating switches. The RSPAN traffic from the source
ports or VLANs is copied into the RSPAN VLAN and forwarded over trunk ports carrying the RSPAN
VLAN to a destination session monitoring the RSPAN VLAN. Each RSPAN source switch must have
either ports or VLANs as RSPAN sources. The destination is always a physical port, as shown on Switch
C in the figure.
Cisco IE 3000 Switch Software Configuration Guide
30-2
Local SPAN, page 30-2
Remote SPAN, page 30-2
SPAN and RSPAN Concepts and Terminology, page 30-3
SPAN and RSPAN Interaction with Other Features, page 30-8
Example of Local SPAN Configuration on a Single Switch
1 2 3 4 5 6 7 8 9 10 11 12
6 7
5 8
4 9
3
2
Network analyzer
Port 5 traffic mirrored
on Port 10
11
12
10
Chapter 30 Configuring SPAN and RSPAN
Figure
Figure 30-2 shows source ports on Switch
30-1, all
OL-13018-03