Cisco Nexus 5600 Series - Configuring an ACL Filter for a SPAN Session

Procedure
PurposeCommand or Action
Enters global configuration mode.switch# configure terminal
Step 1
Enters monitor configuration mode for the
specified SPAN session.
switch(config) # monitor session
session-number
Step 2
Creates a descriptive name for the SPAN
session.
switch(config-monitor) # description
description
Step 3
The following example shows how to configure a SPAN session description:
switch# configure terminal
switch(config) # monitor session 2
switch(config-monitor) # description monitoring ports eth2/2-eth2/4
switch(config-monitor) #
Configuring an ACL Filter for a SPAN Session
To selectively monitor traffic in a SPAN session, you can configure an access-control list (ACL) to filter
packets. The SPAN session ignores any permit or deny actions specified in the access-list, and spans only the
packets that match the access-list filter criteria.
Procedure
PurposeCommand or Action
Enters global configuration mode.switch# configure terminal
Step 1
Enters monitor configuration mode and specifies the
SPAN session for which the ACL filter is to be
configured.
switch(config) # monitor session
session-number
Step 2
Configures the ACL filter for packets in the specified
SPAN session. The ACL filter can be a MAC or an
IP access-list.
switch(config-monitor) # [no] filter
access-group acl_filter
Step 3
(Optional)
Displays the status of SPAN sessions, including the
configuration status of ACL filter.
switch(config-monitor) # show monitor
session session-number
Step 4
(Optional)
Copies the running configuration to the startup
configuration.
switch(config-monitor) # copy
running-config startup-config
Step 5
This example shows how to configure an ACL filter for a SPAN session:
switch# configure terminal
switch(config) # monitor session 3
Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x
186 OL-31641-01
Configuring SPAN
Configuring an ACL Filter for a SPAN Session