Difference between revisions of "Cisco SPAN"
From HackerNet
Helikopter (talk | contribs) (Created page with "Det finns olika varianter. * SPAN * RSPAN * ERSPAN =IOS= monitor session 1 source interface fa0/2 rx monitor session 1 destination interface fa0/3 =NX-OS= Destination int...") |
Helikopter (talk | contribs) (→NX-OS) |
||
| Line 9: | Line 9: | ||
=NX-OS= | =NX-OS= | ||
| + | ===SPAN=== | ||
Destination | Destination | ||
interface Ethernet1/1 | interface Ethernet1/1 | ||
| Line 25: | Line 26: | ||
'''Show''' | '''Show''' | ||
show monitor | show monitor | ||
| + | |||
| + | ===ERSPAN=== | ||
| + | monitor session 1 type erspan-source | ||
| + | description ERSPAN direct to Sniffer PC | ||
| + | erspan-id 32 # required, # between 1-1023 | ||
| + | vrf default # required | ||
| + | destination ip 10.1.2.3 # IP address of Sniffer PC | ||
| + | source interface port-channel1 both # Port(s) to be sniffed | ||
| + | filter vlan 3900 # limit VLAN(s) (optional) | ||
| + | no shut # enable | ||
| + | monitor erspan origin ip-address 10.1.2.1 global | ||
[[Category:Cisco]] | [[Category:Cisco]] | ||
Revision as of 12:14, 5 November 2015
Det finns olika varianter.
- SPAN
- RSPAN
- ERSPAN
Contents
IOS
monitor session 1 source interface fa0/2 rx monitor session 1 destination interface fa0/3
NX-OS
SPAN
Destination
interface Ethernet1/1 description MONITOR-SESSION-1 switchport switchport monitor no shutdown
Monitor session
monitor session 1 description SPAN-to-SERVER source vlan 10-20 both rate-limit auto destination interface Ethernet1/1 no shut
Show
show monitor
ERSPAN
monitor session 1 type erspan-source description ERSPAN direct to Sniffer PC erspan-id 32 # required, # between 1-1023 vrf default # required destination ip 10.1.2.3 # IP address of Sniffer PC source interface port-channel1 both # Port(s) to be sniffed filter vlan 3900 # limit VLAN(s) (optional) no shut # enable monitor erspan origin ip-address 10.1.2.1 global
