Complex Rule-Based Span; Creating Filters - Cisco Nexus 7000 Series Configuration Manual

Configuring SPAN

Complex Rule-based SPAN

Before You Begin
Complex filter rules can be created with multiple filters and product table resources. A few keywords, Match,
Permit, Deny and Filter-list have been introduced in this release. The "Match" keyword helps to match on
the fields and values set by the user. "Permit" keyword followed by the filter names allow a SPAN copy to
be generated if all filters are hit. "Deny" keyword followed by the filter names allow a SPAN copy to be
generated if all the filters are missed. "Filter-list" is a keyword that specifies all the rules defined by the permit
and deny keywords.
Each filter list can contain multiple 'permit-deny' rules.
Note

Creating Filters

BEFORE YOU BEGIN
Ensure that you are in the correct VDC (or use the switchto vdc command).
Procedure
Step 1
Step 2
Step 3
Command or Action
configure terminal
Example:
switch# configure terminal
switch(config)#
monitor filterfilter-name
Example:
switch(config)# monitor filter test-filter
switch(config-monitor-filter)#
match [eth-type eth-type | src-mac mac-address
mac-mask | dest-mac mac-address mac-mask |
frame-type [arp | eth | fcoe |ipv4 |ipv6]
Example:
switch(config-monitor-filter)# match eth-type
0x0800
switch(config-monitor-filter)# match src-mac
40:55:39:0c:98:c1 ff:ff:ff:ff:ff:00 dest-mac
40:55:39:0c:98:c1 ff:ff:ff:ff:ff:00
Cisco Nexus 7000 Series NX-OS System Management Configuration Guide
Complex Rule-based SPAN
Purpose
Enters global configuration mode.
Enters the monitor filter configuration mode.
The length of the string should not
Note
exceed 32 characters.
Match specific fields in the packet under
monitor filter configuration mode.
Specifying match criteria in the
Note
same line or in multiple lines will
have the same result.
309