Chapter 26
Configuring SPAN and RSPAN
•
•
•
•
Configuring SPAN and RSPAN
•
•
•
Default SPAN and RSPAN Configuration
Table 26-1
Table 26-1
Feature
SPAN state (SPAN and RSPAN)
Source port traffic to monitor
Encapsulation type (destination port)
Ingress forwarding (destination port)
VLAN filtering
RSPAN VLANs
OL-9639-07
is configured as a SPAN destination, it is removed from the group. After the port is removed from
the SPAN session, it rejoins the EtherChannel group. Ports removed from an EtherChannel group
remain members of the group, but they are in the inactive or suspended state.
If a physical port that belongs to an EtherChannel group is a destination port and the EtherChannel
group is a source, the port is removed from the EtherChannel group and from the list of monitored
ports.
Multicast traffic can be monitored. For sending and receiving port monitoring, only a single
unedited packet is sent to the SPAN destination port. It does not reflect the number of times that the
multicast packet is sent.
A private-VLAN port cannot be a SPAN destination port.
A secure port cannot be a SPAN destination port.
For SPAN sessions, do not enable port security on ports with monitored egress when ingress
forwarding is enabled on the destination port. For RSPAN source sessions, do not enable port
security on any ports with monitored egress.
An IEEE 802.1x port can be a SPAN source port. You can enable IEEE 802.1x on a port that is a
SPAN destination port; however, IEEE 802.1x is disabled until the port is removed as a SPAN
destination.
For SPAN sessions, do not enable IEEE 802.1x on ports with monitored sending when receive
forwarding is enabled on the destination port. For RSPAN source sessions, do not enable
IEEE 802.1x on any ports that are sending monitored.
Default SPAN and RSPAN Configuration, page 26-9
Configuring Local SPAN, page 26-10
Configuring RSPAN, page 26-15
shows the default SPAN and RSPAN configuration.
Default SPAN and RSPAN Configuration
Default Setting
Disabled.
Both received and sent traffic (both).
Native form (untagged packets).
Disabled
On a trunk interface used as a source port, all VLANs are
monitored.
None configured. Default VLAN type is UNI-ENI
isolated.
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
Configuring SPAN and RSPAN
26-9