Configuring SPAN
Command
Step 3
monitor session session_number source
interface interface-id [, | -] [both | rx | tx]
Step 4
monitor session session_number
destination interface interface-id
[encapsulation {dot1q}] [ingress vlan
vlan id]
Step 5
end
Step 6
show monitor [session session_number]
Step 7
copy running-config startup-config
This example shows how to configure the destination port for ingress traffic on VLAN 5 by using a
security device that does not support IEEE 802.1Q encapsulation.
Switch(config)# monitor session 1 destination interface fastethernet0/5 ingress vlan 5
This example shows how to configure the destination port for ingress traffic on VLAN 5 by using a
security device that supports IEEE 802.1Q encapsulation.
Switch(config)# monitor session 1 destination interface fastethernet0/5 encapsulation
dot1q ingress vlan 5
This example shows how to disable ingress traffic forwarding on the destination port.
Switch(config)# monitor session 1 destination interface fastethernet0/5 encapsulation
dot1q
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
24-10
Purpose
Specify the SPAN session and the source port (monitored port).
For session_number, specify 1.
For interface-id, specify the source port to monitor. Valid interfaces
include physical interfaces and port-channel logical interfaces
(port-channel port-channel-number).
(Optional) [, | -] Specify a series or range of interfaces. Enter a space
before and after the comma; enter a space before and after the
hyphen.
(Optional) Specify the direction of traffic to monitor. If you do not
specify a traffic direction, the source interface sends both sent and
received traffic.
both—Monitor both received and sent traffic.
•
rx—Monitor received traffic.
•
tx—Monitor sent traffic.
•
Specify the SPAN session, the destination port (monitoring port), the
packet encapsulation, and the ingress VLAN.
For session_number, specify 1.
For interface-id, specify the destination port. Valid interfaces include
physical interfaces.
(Optional) Specify the encapsulation header for outgoing packets. If
not specified, packets are sent in native form.
•
dot1q—Use IEEE 802.1Q encapsulation.
(Optional) Enter ingress vlan vlan id to enable ingress forwarding
and specify a default VLAN.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Chapter 24
Configuring SPAN and RSPAN
78-11380-12