Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

Chapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commandsmonitor sessionsourceSpecify the SPAN or RSPAN source. A source can be a physical port, a portchannel, or a VLAN.both, rx, tx(Optional) Specify the traffic direction to monitor. If you do not specify atraffic direction, the source interface sends both transmitted and receivedtraffic.source vlan vlan-id Specify the SPAN source interface as a VLAN ID. The range is 1 to 4094.all, local, remote Specify all, local, or remote with the no monitor session command to clearall SPAN and RSPAN, all local SPAN, or all RSPAN sessions.filter ipSpecify the filtering of IPv4 packets in an FSPAN session.filter ipv6Specify the filtering of IPv6 packets in an FSPAN session.filter macSpecify the filtering of non-IP packets in an FSPAN session.access-groupSpecify the access list numbers or names to apply to an FSPAN session.access-list-number, nameDefaultsNo monitor sessions are configured.On a source interface, the default is to monitor both received and transmitted traffic.On a trunk interface used as a source port, all VLANs are monitored.If encapsulation replicate is not specified on a local SPAN destination port, packets are sent in nativeform with no encapsulation tag.Ingress forwarding is disabled on destination ports.Command ModesGlobal configurationCommand HistoryRelease12.2(35)SE212.2(40)EX12.2(44)SEModificationThis command was introduced.The destination-port group {a | b | c} keywords were added only for theCatalyst 3560E-12D switch.The ip, ipv6,mac, and access group keywords were added.Usage GuidelinesTraffic that enters or leaves source ports or source VLANs can be monitored by using SPAN or RSPAN.Traffic routed to source ports or source VLANs cannot be monitored.You can set a combined maximum of two local SPAN sessions and RSPAN source sessions. You can havea total of 66 SPAN and RSPAN sessions on a switch or switch stack.You can have a maximum of 64 destination ports on a switch or a switch stack.Each session can include multiple ingress or egress source ports or VLANs, but you cannot combinesource ports and source VLANs in a single session. Each session can include multiple destination ports.When you use VLAN-based SPAN (VSPAN) to analyze network traffic in a VLAN or set of VLANs, allactive ports in the source VLANs become source ports for the SPAN or RSPAN session. Trunk ports areincluded as source ports for VSPAN, and only packets with the monitored VLAN ID are sent to thedestination port.OL-9776-08Catalyst 3750-E and 3560-E Switch Command Reference2-391