TIMESTAMPS:
0:00 Introduction
2:22 Explaining the topology
3:07 Configuring an ERSPAN Source Session
5:55 Configuring an ERSPAN Destination Session
7:38 Talking about the verification commands
7:46 Conclusion

How to Configure ERSPAN

ERSPAN Overview
The Cisco ERSPAN (Encapsulated Remote Switched Port Analyzer) feature allows you to monitor traffic on ports or VLANs, and send the monitored traffic to destination ports.
ERSPAN sends traffic to a network analyzer, such as a Switch Probe device or a Remote Monitoring (RMON) probe.
ERSPAN supports source ports, source VLANs, and destination ports on different devices, which helps remote monitoring of multiple devices across a network.

ERSPAN supports encapsulated packets of up to 9180 bytes. ERSPAN consists of an ERSPAN source session,
routable ERSPAN GRE-encapsulated traffic, and an ERSPAN destination session.

Example: Configuring an ERSPAN Source Session
R1# conf t
R1(config)# monitor session 1 type erspan-source(Defines an ERSPAN source session using the session ID and the session type, and enters ERSPAN monitor source session configuration mode.)
R1(config-mon-erspan-src)# source interface fa0/0(Configures the source interface and the traffic direction to be monitored)
R1(config-mon-erspan-src)# filter vlan 100(Optional)
R1(config-mon-erspan-src)# destination(Enters ERSPAN source session destination configuration mode.)
R1(config-mon-erspan-src-dst)# erspan-id 100(Same erspan-id 100 must be configured in the ERSPAN destination session configuration)
R1(config-mon-erspan-src-dst)# ip address 192.168.2.200(Destination IP of the ERSPAN traffic.)
R1(config-mon-erspan-src-dst)# origin ip address 192.168.12.1(Source IP of the ERSPAN traffic.)
R1(config-mon-erspan-src-dst)# exit
R1(config-mon-erspan-src)# no shutdown(By default, ERSPAN is disabled. You must enable it.)
R1(config-mon-erspan-src)# end
R1# wr

Example: Configuring an ERSPAN Destination Session
R2# conf t
R2(config)# monitor session 1 type erspan-destination(Defines an ERSPAN destination session using the session ID and the session type, and enters ERSPAN monitor destination session configuration mode.)
R2(config-mon-erspan-dst)# no shutdown(By default, ERSPAN is disabled. You must enable it.)
R2(config-mon-erspan-dst)# destination interface fa0/0
R2(config-mon-erspan-dst)# source(Enters ERSPAN destination session source configuration mode.)
R2(config-mon-erspan-dst-src)# erspan-id 100(Same erspan-id 100 must be configured in the ERSPAN source session configuration.)
R2(config-mon-erspan-dst-src)# ip address 192.168.2.200 (Destination IP of the ERSPAN traffic.)
R2(config-mon-erspan-dst-src)# end
R2# wr


Verifying ERSPAN
show monitor session 1
show platform software monitor session 1
show monitor session erspan-source detail
show capability feature monitor erspan-source
show capability feature monitor erspan-destination

[ Ссылка ]
[ Ссылка ]

#cisco #ccna #ccnp #ccie

свернуть