Users Guide

OS10(conf-if-po-1)# switchport mode trunk
OS10(conf-if-po-1)# switchport trunk allowed vlan 1000
OS10(conf-if-po-1)# exit
OS10(config)# monitor session 10 type rpm-source
OS10(conf-mon-rpm-source-10)# source interface ethernet 1/1/1 rx
OS10(conf-mon-rpm-source-10)# destination remote-vlan 1000
OS10(conf-mon-rpm-source-10)# no shut
Switch2 - intermediate switch configuration
OS10(config)# interface vlan 1000
OS10(conf-if-vl-1000)# description "used for remote span"
OS10(conf-if-vl-1000)# exit
OS10(config)# interface port-channel 1
OS10(conf-if-po-1)# switchport mode trunk
OS10(conf-if-po-1)# switchport trunk allowed vlan 1000
OS10(conf-if-po-1)# exit
OS10(config)# interface port-channel 2
OS10(conf-if-po-2)# switchport mode trunk
OS10(conf-if-po-2)# switchport trunk allowed vlan 1000
OS10(conf-if-po-2)# exit
Switch3 - destination switch configuration
OS10(config)# interface vlan 1000
OS10(conf-if-vl-1000)# description "used for remote span"
OS10(conf-if-vl-1000)# exit
OS10(config)# interface ethernet1/1/2
OS10(conf-if-eth1/1/2)# no switchport
OS10(conf-if-eth1/1/2)# exit
OS10(config)# interface port-channel2
OS10(conf-if-po-2)# switchport mode trunk
OS10(conf-if-po-2)# switchport trunk allowed vlan 1000
OS10(conf-if-po-2)# exit
OS10(config)# monitor session 1
OS10(conf-mon-local-1)# flow-based enable
OS10(conf-mon-local-1)# source interface vlan 1000
OS10(conf-mon-local-1)# destination interface ethernet 1/1/2
OS10(conf-mon-local-1)# no shut
Encapsulated remote port monitoring
You can also have the monitored traffic transmitted over a port-channel network to a remote analyzer. The encapsulated
remote port monitoring (ERPM) session mirrors traffic from the source ports, LAGs, or source VLANs. It forwards the traffic
using routable GRE-encapsulated packets to the destination IP address specified in the session.
Consider the following when configuring an ERPM session:
● OS10 supports only the ERPM source session. The encapsulated packets terminate at the destination IP address, the remote
analyzer.
● The source IP address must be a valid local IP address for the session.
● The destination IP address must be on a remote L3 node that supports standard GRE decapsulation.
● If the destination IP address is not reachable, the session goes down.
● OS10 does not support an ERPM destination session and decapsulation of ERPM packets at the destination switch.
● You can configure a maximum of four ERPM sessions with a maximum of 128 source ports in each session. You can configure
these four ERPM sessions in one of the following methods:
○ Single directional with either four ingress or four egress sessions.
○ Bi-directional with two ingress and two egress sessions.
● You can monitor a source VLAN only through flow-based monitoring. Only ingress is supported in flow-based source VLAN
monitoring.
● You cannot configure an interface with ERPM traffic as a source for an ERPM session.
● You cannot monitor an RPM VLAN as a source.
● You cannot configure the same destination IP address for two sessions.
● You cannot configure an interface that serves as egress for a GRE tunnel as a source interface.
● ERPM supports only GRE-over-IPv4 tunneling.
Layer 2
711