2-252
Cisco IE 3000 Switch Command Reference
OL-13019-01
Chapter 2      IE 3000 Switch Cisco IOS Commands
monitor session
  • When you enter monitor session session_number destination interface interface-id encapsulation 
dot1q ingress, egress encapsulation uses the IEEE 802.1Q encapsulation method; ingress 
encapsulation depends on the keywords that follow—dot1q or untagged. (This applies to local 
SPAN only; RSPAN does not support encapsulation dot1q.)
  • When you enter monitor session session_number destination interface interface-id encapsulation 
replicate with no other keywords, egress encapsulation replicates the source interface 
encapsulation; ingress forwarding is not enabled. (This applies to local SPAN only; RSPAN does 
not support encapsulation replication.)
  • When you enter monitor session session_number destination interface interface-id encapsulation 
replicate ingress, egress encapsulation replicates the source interface encapsulation; ingress 
encapsulation depends on the keywords that follow—dot1q or untagged. (This applies to local 
SPAN only; RSPAN does not support encapsulation replication.)
Examples This example shows how to create a local SPAN session 1 to monitor both sent and received traffic on 
source port 1 to destination port 2:
Switch(config)# monitor session 1 source interface gigabitethernet1/1 both
Switch(config)# monitor session 1 destination interface gigabitethernet1/2
This example shows how to delete a destination port from an existing local SPAN session:
Switch(config)# no monitor session 2 destination gigabitethernet1/2
This example shows how to limit SPAN traffic in an existing session only to specific VLANs:
Switch(config)# monitor session 1 filter vlan 100 - 110
This example shows how to configure RSPAN source session 1 to monitor multiple source interfaces and 
to configure the destination RSPAN VLAN 900.
Switch(config)# monitor session 1 source interface gigabitethernet1/1 
Switch(config)# monitor session 1 source interface port-channel 2 tx
Switch(config)# monitor session 1 destination remote vlan 900
Switch(config)# end
This example shows how to configure an RSPAN destination session 10 in the switch receiving the 
monitored traffic.
Switch(config)# monitor session 10 source remote vlan 900
Switch(config)# monitor session 10 destination interface gigabitethernet1/2
This example shows how to configure the destination port for ingress traffic on VLAN 5 by using a 
security device that supports IEEE 802.1Q encapsulation. Egress traffic replicates the source; ingress 
traffic uses IEEE 802.1Q encapsulation.
Switch(config)# monitor session 2 destination interface gigabitethernet1/2 encapsulation 
replicate ingress dot1q vlan 5 
This example shows how to configure the destination port for ingress traffic on VLAN 5 by using a 
security device that does not support encapsulation. Egress traffic and ingress traffic are untagged.
Switch(config)# monitor session 2 destination interface gigabitethernet1/2 ingress 
untagged vlan 5 
You can verify your settings by entering the show monitor privileged EXEC command. You can display 
SPAN and RSPAN configurations on the switch by entering the show running-config privileged EXEC 
command. SPAN information appears near the end of the output.