Users Guide

Restrictions
● When you use a source VLAN, enable flow-based monitoring using the flow-based enable command.
● In a source VLAN, only received (rx) traffic is monitored.
● If the port channel or VLAN has a member port configured as a destination port in a remote port monitoring session, you
cannot configure a source port channel or source VLAN in a source session.
● You cannot use a destination port for remote port monitoring as a source port, including the session the port functions as
the destination port.
● The reserved VLAN used to transport mirrored traffic must be an L2 VLAN. L3 VLANs are not supported.
Configure remote port monitoring
Remote port monitoring requires the following for transporting mirrored traffic configured on the source, intermediate, and
destination devices:
● A source interface
● Monitored ports on different source network devices
● A reserved tagged VLAN
1. Create a remote monitoring session in CONFIGURATION mode.
monitor session session-id type rpm-source
2. Enter the source to monitor traffic in MONITOR-SESSION mode.
source interface interface-type {both | rx | tx}interface-range direction
3. Enter the destination to send the traffic to in MONITOR-SESSION mode.
destination remote-vlan vlan-id
4. Enable the monitoring interface in MONITOR-SESSION mode.
no shut
Create remote monitoring session
OS10(config)# monitor session 10 type rpm-source
OS10(conf-mon-rpm-source-10)#
Configure source and destination port, and traffic direction
OS10(conf-mon-rpm-source-10)# source interface vlan 10 rx
OS10(conf-mon-rpm-source-10)# destination remote-vlan 100
OS10(conf-mon-rpm-source-10)# no shut
View monitoring session
OS10(conf-mon-rpm-source-10)# do show monitor session all
S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason
---------------------------------------------------------------
1 vlan10 vlan 100 rx N/A N/A N/A N/A true Is UP
Example configuration for remote port monitoring
In the following topology, Switch1 receives traffic on ethernet 1/1/1 and forwards the traffic through port-channel1 to switch2.
Switch2 forwards the traffic to Switch3 through port-channel3. An analyzer is connected Switch3.
Traffic ------ethernet1/1/1 [Switch1] --port-channel1-- [Switch2] ----port-channel2 ----[Switch3] ----- Analyzer
Switch1 configuration
OS10(config)# interface vlan 1000
OS10(conf-if-vl-1000)# description "used for remote span"
OS10(conf-if-vl-1000)# remote-span
OS10(conf-if-vl-1000)# exit
OS10(config)# interface port-channel 1
710
Layer 2