一、SPAN:本地监控
定义监控源
monitor session 1 source interface fastEthernet 0/0 both
定义监控目标
monitor session 1 destination interface fastEthernet 0/1
查看
show monitor
注:SPAN在同一个交换机上根据session id进行判断
二、RSPAN:远程监控
定义监控vlan
vlan 99
remote-span
SW1上定义监控源和目标
monitor session 1 source interface fastEthernet 0/0 both
monitor session 1 destination remote vlan 99
SW2上定义监控源和目标
monitor session 2 source remote vlan 99
monitor session 2 destination fastEthernet 0/0
查看
show monitor
注:RSPAN在不同交换机上根据vlan id进行判断