Users Guide

604 Monitoring Switch Traffic
Configuring RSPAN
RSPAN is an extension of port mirroring that operates across multiple
switches. Mirrored traffic is tagged with the RSPAN VLAN and is flooded in
the RSPAN VLAN. This allows considerable flexibility in the placement of
probe ports. Use the following commands in Privileged Exec mode to
configure RSPAN. Remember to assign VLANs to physical interfaces (steps
not shown).
Configuring RSPAN (Source Switch)
Command Purpose
configure Enter Global Configuration mode.
vlan vlan-id Configure an RSPAN VLAN.
remote-span Configure the VLAN as a spanning VLAN.
exit Exit to Global Configuration mode.
interface te1/0/1 Enter interface configuration mode.
switchport mode trunk Set the egress span interface to trunk mode.
switchport trunk allowed
vlan vlan-id
Restrict the trunk to the spanning VLAN (optional).
exit Exit to Global Configuration mode.
monitor session session-
number source
{interface interface–id |
vlan vlan-id | remote
vlan rspan-vlan-id} [rx |
tx]
Configure a source (monitored) port for a monitor session.
Source ports should not be members of the RSPAN VLAN.
• session_number —The monitoring session ID, which
ranges from 1 to 4. The Dell EMC Networking N1500
supports a single session.
•
interface–id —The interface to be monitored. The
internal CPU port may not be configured as an RSPAN
source.
•
rx | tx — Monitor ingress (rx) or egress (tx) traffic. If no
parameter is given, both ingress and egress traffic are
monitored. Using the RX option helps eliminate
duplicate packets when monitoring multiple stations
engaged in peer-to-peer communication.