Exception Erspan - Cisco Nexus 7000 Series Configuration Manual

Configuring ERSPAN
Every ERSPAN session (traditional and extended) has an associated filter. Every ERSPAN session has one
filter resource. A simple filter has only one rule, and you can add multiple fields or conditions to this rule.
The packets are spanned only if all conditions are met.
Ethernet
Frame Type
VLAN
TR
BPDU
Port Channel
Lane
Flow Hash
L2 MAC DA
L2 MAC SA
EtherType
CoS/VL

Exception ERSPAN

Exception ERSPAN enables you to span exception packets. Packets that have failed an intrusion detection
system (IDS), Layer 3 IP verification, and FabricPath are treated as exception packets.
The exception ERSPAN session is supported in either one of the two traditional ERSPAN sessions or in one
of the extended ERSPAN sessions. Rate limiters, MTU truncation, and sampling are supported in the exception
ERSPAN session. Only the exception packets sent to the drop destination interface are supported as an
ERSPAN source. Exception packets that are pushed to the supervisor, the ACLQoS, or Layer 2 are not spanned.
Each VDC supports one exception ERSPAN session.
Exception ERSPAN is supported in the egress direction only. In the case of an extended ERSPAN Rx session,
the exception source configuration will be rejected.
IPv4 IPv6
Frame Type Frame Type
VLAN VLAN
TR TR
BPDU BPDU
Port Channel Port Channel
Lane Lane
Flow Hash Flow Hash
L2 MAC DA L2 MAC DA
L2 MAC SA L2 MAC SA
EtherType EtherType
CoS/VL CoS/VL
ToS ToS
L4 Protocol L4 Protocol
IPv4 SA IPv6 SA
IPv4 DA IPv6 DA
Cisco Nexus 7000 Series NX-OS System Management Configuration Guide
Exception ERSPAN
ARP/RARP FCoE
Frame Type Frame Type
VLAN VLAN
TR TR
BPDU BPDU
Port Channel Port Channel
Lane Lane
Flow Hash Flow Hash
L2 MAC DA L2 MAC DA
L2 MAC SA L2 MAC SA
EtherType EtherType
CoS/VL CoS/VL
ARP FCD_ID
Request FCS_ID
Sender IP SOF
Target IP R_CTL
TYPE
Cmd_Code
Sec_Hdr Exists
331