26-13
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-07
Chapter 26 Configuring SPAN and RSPAN
Configuring SPAN and RSPAN
Creating a Local SPAN Session and Configuring Ingress Traffic
Beginning in privileged EXEC mode, follow these steps to create a SPAN session, to specify the source
ports or VLANs and the destination ports, and to enable ingress traffic on the destination port for a
network security device (such as a Cisco IDS Sensor Appliance).
Note See the “Creating a Local SPAN Session” section on page 26-10 for details about the keywords not
related to ingress traffic.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
no monitor session {session_number | all |
local | remote}
Remove any existing SPAN configuration for the session.
Step 3
monitor session session_number source
{interface interface-id | vlan vlan-id} [, | -]
[both | rx | tx]
Specify the SPAN session and the source port (monitored port).
Step 4
monitor session session_number
destination {interface interface-id [, | -]
[encapsulation {dot1q | replicate}] [ingress
{[dot1q | untagged] vlan vlan-id}]
Specify the SPAN session, the destination port, the packet
encapsulation, and the ingress VLAN and encapsulation.
For session_number, specify the session number entered in Step 3.
For interface-id, specify the destination port. The destination
interface must be a physical port; it cannot be an EtherChannel, and
it cannot be a VLAN.
(Optional) [, | -] Specify a series or range of interfaces. Enter a space
before and after the comma or hyphen.
(Optional) Enter encapsulation dot1q for IEEE 802.1Q
encapsulation or encapsulation replicate to specify that the
destination interface replicates the source interface encapsulation
method. If not selected, the default is to send packets in native form
(untagged).
Enter ingress with keywords to enable ingress traffic forwarding on
the destination port and specify the encapsulation type:
• dot1q—Forward incoming packets with IEEE 802.1Q
encapsulation with the specified VLAN as the default VLAN.
• untagged—Forward incoming packets with untagged
encapsulation type with the specified VLAN as the default
VLAN.
• vlan vlan-id—The default VLAN. If neither dot1q or untagged
is specified, the default is to forward packets untagged.
Step 5
end Return to privileged EXEC mode.
Step 6
show monitor [session session_number]
show running-config
Verify the configuration.
Step 7
copy running-config startup-config (Optional) Save the configuration in the configuration file.
To Next Page
Loading...
Need help?
General
