Cisco 2960 X Owners Manual

							DETAILED STEPS
PurposeCommand or Action
Enterstheglobalconfigurationmode.configureterminal
Example:
Switch#configureterminal
Step 1
RemovesanyexistingSPANconfigurationforthesession.nomonitorsession{session_number|all|
local|remote}
Step 2
•Forsession_number,therangeis1to66.
Example:
Switch(config)#nomonitorsessionall
•all—RemovesallSPANsessions.
•local—Removesalllocalsessions.
•remote—RemovesallremoteSPANsessions.
SpecifiestheSPANsessionandthesourceport(monitoredport).monitorsessionsession_numbersource
{interfaceinterface-id|vlanvlan-id}[,|-]
[both|rx|tx]
Step 3
Example:
Switch(config)#monitorsession2sourcegigabitethernet1/0/1rx
SpecifiestheSPANsession,thedestinationport,thepacketencapsulation,
andtheingressVLANandencapsulation.
monitorsessionsession_numberdestination
{interfaceinterface-id[,|-][encapsulation
Step 4
replicate][ingress{dot1qvlanvlan-id|isl
|untaggedvlanvlan-id|vlanvlan-id}]}•Forsession_number,specifythesessionnumberenteredinStep3.
Example:
Switch(config)#monitorsession2
•Forinterface-id,specifythedestinationport.Thedestinationinterface
mustbeaphysicalport;itcannotbeanEtherChannel,anditcannot
beaVLAN.
•(Optional)[,|-]Specifyaseriesorrangeofinterfaces.Enteraspace
beforeandafterthecommaorhyphen.
destinationinterfacegigabitethernet1/0/2encapsulationreplicateingressdot1qvlan6
•(Optional)encapsulationreplicatespecifiesthatthedestination
interfacereplicatesthesourceinterfaceencapsulationmethod.Ifnot
selected,thedefaultistosendpacketsinnativeform(untagged).
•ingressenablesforwardingofincomingtrafficonthedestinationport
andtospecifytheencapsulationtype:
◦dot1qvlanvlan-id—AcceptsincomingpacketswithIEEE
802.1QencapsulationwiththespecifiedVLANasthedefault
VLAN.
◦isl—ForwardsingresspacketswithISLencapsulation.
◦untaggedvlanvlan-idorvlanvlan-id—Acceptsincoming
packetswithuntaggedencapsulationtypewiththespecified
VLANasthedefaultVLAN.
Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX    
   OL-29044-0181
Configuring SPAN and RSPAN
Creating a Local SPAN Session and Configuring Incoming Traffic 
						

							PurposeCommand or Action
•dot1qvlanvlan-id—AcceptincomingpacketswithIEEE802.1Q
encapsulationwiththespecifiedVLANasthedefaultVLAN.
•isl—ForwardingresspacketswithISLencapsulation.
•untaggedvlanvlan-idorvlanvlan-id—Acceptincomingpacketswith
untaggedencapsulationtypewiththespecifiedVLANasthedefault
VLAN.
ReturnstoprivilegedEXECmode.end
Example:
Switch(config)#end
Step 5
Related Topics
LocalSPAN,onpage68
SPANSessions,onpage71
SPANConfigurationGuidelines,onpage77
Example:ConfiguringLocalSPAN,onpage93
Specifying VLANs to Filter
BeginninginprivilegedEXECmode,followthesestepstolimitSPANsourcetraffictospecificVLANs.
SUMMARY STEPS
1.configureterminal
2.nomonitorsession{session_number|all|local|remote}
3.monitorsessionsession_numbersourceinterfaceinterface-id
4.monitorsessionsession_numberfiltervlanvlan-id[,|-]
5.monitorsessionsession_numberdestination{interfaceinterface-id[,|-][encapsulationreplicate]}
6.end
   Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX
82OL-29044-01  
Configuring SPAN and RSPAN
Specifying VLANs to Filter 
						

							DETAILED STEPS
PurposeCommand or Action
Enterstheglobalconfigurationmode.configureterminal
Example:
Switch#configureterminal
Step 1
RemovesanyexistingSPANconfigurationforthesession.nomonitorsession{session_number|all|
local|remote}
Step 2
•Forsession_number,therangeis1to66.
Example:
Switch(config)#nomonitorsessionall
•all—RemovesallSPANsessions.
•local—Removesalllocalsessions.
•remote—RemovesallremoteSPANsessions.
Specifiesthecharacteristicsofthesourceport(monitoredport)andSPAN
session.
monitorsessionsession_numbersource
interfaceinterface-id
Step 3
Example:
Switch(config)#monitorsession2
•Forsession_number,therangeis1to66.
•Forinterface-id,specifythesourceporttomonitor.Theinterface
specifiedmustalreadybeconfiguredasatrunkport.sourceinterfacegigabitethernet1/0/2rx
LimitstheSPANsourcetraffictospecificVLANs.monitorsessionsession_numberfiltervlan
vlan-id[,|-]
Step 4
•Forsession_number,enterthesessionnumberspecifiedinStep3.
Example:
Switch(config)#monitorsession2filtervlan1-5,9
•Forvlan-id,therangeis1to4094.
•(Optional)Useacomma(,)tospecifyaseriesofVLANs,orusea
hyphen(-)tospecifyarangeofVLANs.Enteraspacebeforeand
afterthecomma;enteraspacebeforeandafterthehyphen.
SpecifiestheSPANsessionandthedestinationport(monitoringport).monitorsessionsession_numberdestination
{interfaceinterface-id[,|-][encapsulation
replicate]}
Step 5
•Forsession_number,specifythesessionnumberenteredinStep3.
Example:
Switch(config)#monitorsession2
•Forinterface-id,specifythedestinationport.Thedestination
interfacemustbeaphysicalport;itcannotbeanEtherChannel,and
itcannotbeaVLAN.
destinationinterfacegigabitethernet1/0/1•(Optional)[,|-]Specifiesaseriesorrangeofinterfaces.Entera
spacebeforeandafterthecomma;enteraspacebeforeandafter
thehyphen.
•(Optional)encapsulationreplicatespecifiesthatthedestination
interfacereplicatesthesourceinterfaceencapsulationmethod.If
notselected,thedefaultistosendpacketsinnativeform(untagged).
Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX    
   OL-29044-0183
Configuring SPAN and RSPAN
Specifying VLANs to Filter 
						

							PurposeCommand or Action
ReturnstoprivilegedEXECmode.end
Example:
Switch(config)#end
Step 6
Configuring a VLAN as an RSPAN VLAN
FirstcreateanewVLANtobetheRSPANVLANfortheRSPANsession.
BeginninginprivilegedEXECmode,followthesestepstocreateanewVLAN,thenconfigureittobethe
RSPANVLANfortheRSPANsession.
SUMMARY STEPS
1.configureterminal
2.vlanvlan-id
3.remote-span
4.end
DETAILED STEPS
PurposeCommand or Action
Enterstheglobalconfigurationmode.configureterminal
Example:
Switch#configureterminal
Step 1
EntersaVLANIDtocreateaVLAN,orenterstheVLANIDofan
existingVLAN,andenterVLANconfigurationmode.Therangeis
2to1001and1006to4094.
vlanvlan-id
Example:
Switch(config)#vlan100
Step 2
TheRSPANVLANcannotbeVLAN1(thedefaultVLAN)orVLAN
IDs1002through1005(reservedforTokenRingandFDDIVLANs).
ConfigurestheVLANasanRSPANVLAN.remote-span
Example:
Switch(config-vlan)#remote-span
Step 3
   Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX
84OL-29044-01  
Configuring SPAN and RSPAN
Configuring a VLAN as an RSPAN VLAN 
						

							PurposeCommand or Action
ReturnstoprivilegedEXECmode.end
Example:
Switch(config-vlan)#end
Step 4
What to Do Next
YoumustcreatetheRSPANVLANinallswitchesthatwillparticipateinRSPAN.IftheRSPANVLAN-ID
isinthenormalrange(lowerthan1005)andVTPisenabledinthenetwork,youcancreatetheRSPANVLAN
inoneswitch,andVTPpropagatesittotheotherswitchesintheVTPdomain.Forextended-rangeVLANs
(greaterthan1005),youmustconfigureRSPANVLANonbothsourceanddestinationswitchesandany
intermediateswitches.
UseVTPpruningtogetanefficientflowofRSPANtraffic,ormanuallydeletetheRSPANVLANfromall
trunksthatdonotneedtocarrytheRSPANtraffic.
ToremovetheremoteSPANcharacteristicfromaVLANandconvertitbacktoanormalVLAN,usetheno
remote-spanVLANconfigurationcommand.
ToremoveasourceportorVLANfromtheSPANsession,usethenomonitorsessionsession_number
source{interfaceinterface-id|vlanvlan-id}globalconfigurationcommand.ToremovetheRSPANVLAN
fromthesession,usethenomonitorsessionsession_numberdestinationremotevlanvlan-id.
Creating an RSPAN Source Session
BeginninginprivilegedEXECmode,followthesestepstocreateandstartanRSPANsourcesessionandto
specifythemonitoredsourceandthedestinationRSPANVLAN.
SUMMARY STEPS
1.configureterminal
2.nomonitorsession{session_number|all|local|remote}
3.monitorsessionsession_numbersource{interfaceinterface-id|vlanvlan-id}[,|-][both|rx|tx]
4.monitorsessionsession_numberdestinationremotevlanvlan-id
5.end
Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX    
   OL-29044-0185
Configuring SPAN and RSPAN
Creating an RSPAN Source Session 
						

							DETAILED STEPS
PurposeCommand or Action
Enterstheglobalconfigurationmode.configureterminal
Example:
Switch#configureterminal
Step 1
RemovesanyexistingSPANconfigurationforthesession.nomonitorsession{session_number|all
|local|remote}
Step 2
•Forsession_number,therangeis1to66.
Example:
Switch(config)#nomonitorsession1
•all—RemovesallSPANsessions.
•local—Removesalllocalsessions.
•remote—RemovesallremoteSPANsessions.
SpecifiestheRSPANsessionandthesourceport(monitoredport).monitorsessionsession_numbersource
{interfaceinterface-id|vlanvlan-id}[,|
-][both|rx|tx]
Step 3
•Forsession_number,therangeis1to66.
Example:
Switch(config)#monitorsession1
•EnterasourceportorsourceVLANfortheRSPANsession:
◦Forinterface-id,specifiesthesourceporttomonitor.Valid
interfacesincludephysicalinterfacesandport-channellogicalsourceinterfacegigabitethernet1/0/1txinterfaces(port-channelport-channel-number).Validport-channel
numbersare1to48.
◦Forvlan-id,specifiesthesourceVLANtomonitor.Therangeis
1to4094(excludingtheRSPANVLAN).
Asinglesessioncanincludemultiplesources(portsorVLANs),
definedinaseriesofcommands,butyoucannotcombinesource
portsandsourceVLANsinonesession.
•(Optional)[,|-]Specifiesaseriesorrangeofinterfaces.Enteraspace
beforeandafterthecomma;enteraspacebeforeandafterthehyphen.
•(Optional)both|rx|txSpecifiesthedirectionoftraffictomonitor.If
youdonotspecifyatrafficdirection,thesourceinterfacesendsboth
sentandreceivedtraffic.
◦both—Monitorsbothreceivedandsenttraffic.
◦rx—Monitorsreceivedtraffic.
◦tx—Monitorssenttraffic.
SpecifiestheRSPANsession,thedestinationRSPANVLAN,andthe
destination-portgroup.
monitorsessionsession_number
destinationremotevlanvlan-id
Step 4
   Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX
86OL-29044-01  
Configuring SPAN and RSPAN
Creating an RSPAN Source Session 
						

							PurposeCommand or Action
Example:
Switch(config)#monitorsession1destinationremotevlan100
•Forsession_number,enterthenumberdefinedinStep3.
•Forvlan-id,specifythesourceRSPANVLANtomonitor.
ReturnstoprivilegedEXECmode.end
Example:
Switch(config)#end
Step 5
Related Topics
RemoteSPAN,onpage69
RSPANVLAN,onpage75
RSPANConfigurationGuidelines,onpage78
Specifying VLANs to Filter
BeginninginprivilegedEXECmode,followthesestepstoconfiguretheRSPANsourcesessiontolimit
RSPANsourcetraffictospecificVLANs.
SUMMARY STEPS
1.configureterminal
2.nomonitorsession{session_number|all|local|remote}
3.monitorsessionsession_numbersourceinterfaceinterface-id
4.monitorsessionsession_numberfiltervlanvlan-id[,|-]
5.monitorsessionsession_numberdestinationremotevlanvlan-id
6.end
DETAILED STEPS
PurposeCommand or Action
Enterstheglobalconfigurationmode.configureterminal
Example:
Switch#configureterminal
Step 1
RemovesanyexistingSPANconfigurationforthesession.nomonitorsession{session_number|all|local
|remote}
Step 2
Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX    
   OL-29044-0187
Configuring SPAN and RSPAN
Specifying VLANs to Filter 
						

							PurposeCommand or Action
•Forsession_number,therangeis1to66.
Example:
Switch(config)#nomonitorsession2
•all—RemovesallSPANsessions.
•local—Removesalllocalsessions.
•remote—RemovesallremoteSPANsessions.
Specifiesthecharacteristicsofthesourceport(monitoredport)and
SPANsession.
monitorsessionsession_numbersource
interfaceinterface-id
Step 3
Example:
Switch(config)#monitorsession2sourceinterfacegigabitethernet1/0/2rx
•Forsession_number,therangeis1to66.
•Forinterface-id,specifythesourceporttomonitor.Theinterface
specifiedmustalreadybeconfiguredasatrunkport.
LimitstheSPANsourcetraffictospecificVLANs.monitorsessionsession_numberfiltervlan
vlan-id[,|-]
Step 4
•Forsession_number,enterthesessionnumberspecifiedinstep
3.Example:
Switch(config)#monitorsession2filtervlan1-5,9
•Forvlan-id,therangeis1to4094.
•(Optional),|-Useacomma(,)tospecifyaseriesofVLANsor
useahyphen(-)tospecifyarangeofVLANs.Enteraspace
beforeandafterthecomma;enteraspacebeforeandafterthe
hyphen.
SpecifiestheRSPANsessionandthedestinationremoteVLAN
(RSPANVLAN).
monitorsessionsession_numberdestination
remotevlanvlan-id
Step 5
Example:
Switch(config)#monitorsession2destinationremotevlan902
•Forsession_number,enterthesessionnumberspecifiedinStep
3.
•Forvlan-id,specifytheRSPANVLANtocarrythemonitored
traffictothedestinationport.
ReturnstoprivilegedEXECmode.end
Example:
Switch(config)#end
Step 6
Creating an RSPAN Destination Session
YouconfigureanRSPANdestinationsessiononadifferentswitchorswitchstack;thatis,nottheswitchor
switchstackonwhichthesourcesessionwasconfigured.
   Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX
88OL-29044-01  
Configuring SPAN and RSPAN
Creating an RSPAN Destination Session 
						

							BeginninginprivilegedEXECmode,followthesestepstodefinetheRSPANVLANonthatswitch,tocreate
anRSPANdestinationsession,andtospecifythesourceRSPANVLANandthedestinationport.
SUMMARY STEPS
1.configureterminal
2.vlanvlan-id
3.remote-span
4.exit
5.nomonitorsession{session_number|all|local|remote}
6.monitorsessionsession_numbersourceremotevlanvlan-id
7.monitorsessionsession_numberdestinationinterfaceinterface-id
8.end
DETAILED STEPS
PurposeCommand or Action
Enterstheglobalconfigurationmode.configureterminal
Example:
Switch#configureterminal
Step 1
SpecifiestheVLANIDoftheRSPANVLANcreatedfromthesource
switch,andentersVLANconfigurationmode.
vlanvlan-id
Example:
Switch(config)#vlan901
Step 2
IfbothswitchesareparticipatinginVTPandtheRSPANVLANIDis
from2to1005,Steps2through4arenotrequiredbecausetheRSPAN
VLANIDispropagatedthroughtheVTPnetwork.
IdentifiestheVLANastheRSPANVLAN.remote-span
Example:
Switch(config-vlan)#remote-span
Step 3
Returnstoglobalconfigurationmode.exit
Example:
Switch(config-vlan)#exit
Step 4
RemovesanyexistingSPANconfigurationforthesession.nomonitorsession{session_number|all|
local|remote}
Step 5
•Forsession_number,therangeis1to66.
Example:
Switch(config)#nomonitorsession1
•all—RemovesallSPANsessions.
•local—Removesalllocalsessions.
•remote—RemovesallremoteSPANsessions.
Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX    
   OL-29044-0189
Configuring SPAN and RSPAN
Creating an RSPAN Destination Session 
						

							PurposeCommand or Action
SpecifiestheRSPANsessionandthesourceRSPANVLAN.monitorsessionsession_numbersource
remotevlanvlan-id
Step 6
•Forsession_number,therangeis1to66.
Example:
Switch(config)#monitorsession1sourceremotevlan901
•Forvlan-id,specifythesourceRSPANVLANtomonitor.
SpecifiestheRSPANsessionandthedestinationinterface.monitorsessionsession_numberdestination
interfaceinterface-id
Step 7
•Forsession_number,enterthenumberdefinedinStep6.
Example:
Switch(config)#monitorsession1
•InanRSPANdestinationsession,youmustusethesamesession
numberforthesourceRSPANVLANandthedestinationport.
destinationinterfacegigabitethernet2/0/1•Forinterface-id,specifythedestinationinterface.Thedestination
interfacemustbeaphysicalinterface.
•Thoughvisibleinthecommand-linehelpstring,encapsulation
replicateisnotsupportedforRSPAN.TheoriginalVLANIDis
overwrittenbytheRSPANVLANID,andallpacketsappearon
thedestinationportasuntagged.
ReturnstoprivilegedEXECmode.end
Example:
Switch(config)#end
Step 8
Related Topics
RemoteSPAN,onpage69
RSPANVLAN,onpage75
RSPANConfigurationGuidelines,onpage78
Creating an RSPAN Destination Session and Configuring Incoming Traffic
BeginninginprivilegedEXECmode,followthesestepstocreateanRSPANdestinationsession,tospecify
thesourceRSPANVLANandthedestinationport,andtoenableincomingtrafficonthedestinationportfor
anetworksecuritydevice(suchasaCiscoIDSSensorAppliance).
   Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX
90OL-29044-01  
Configuring SPAN and RSPAN
Creating an RSPAN Destination Session and Configuring Incoming Traffic