端口镜像 Catalyst 6500 Series Cisco IOS Command

Catalyst 6500 Series Cisco IOS Command Reference, 12.1 E

monitor session

To start a new SPAN or RSPAN session, add or delete interfaces or VLANs to or from an existing SPAN or RSPAN session, filter SPAN or RSPAN traffic to specific VLANs, or delete a SPAN or RSPAN session, use the monitor session command. Use the no form of this command to remove one or more source or destination interfaces from the SPAN or RSPAN session, remove a source VLAN from the SPAN or RSPAN session, or delete a SPAN or RSPAN session.

monitor session session source {{interface type} | {{vlan vlan-id} [rx | tx | both]} | {remote vlan rspan-vlan-id}}

monitor session session destination {{interface type} | {vlan vlan-id} | {remote vlan vlan-id} | {analysis-module slot-number} | {data-port port-number}}

monitor session session-number filter vlan vlan-range

no monitor session {{range session-range} | local | remote | all | session}

no monitor session session source {{interface type} | {{vlan vlan-id} [rx | tx | both]} | {remote vlan rspan-vlan-id}}

no monitor session session destination {{interface type} | {vlan vlan-id} | {remote vlan vlan-id} | {analysis-module slot-number} | {data-port port-number}}

Syntax Description

session	Number of the SPAN session; valid values are from 1 to 66.
source	SPAN source.
interface type	Interface type; see the "Usage Guidelines" section for formatting information.
vlan vlan-id	VLAN ID; valid values are from 1 to 4094.
rx	(Optional) Monitor-received traffic only.
tx	(Optional) Monitor-transmitted traffic only.
both	(Optional) Monitor-received and monitor-transmitted traffic.
remote vlan rspan-vlan-id	Specifies RSPAN VLAN as destination VLANs.
analysis-module slot-number	Network analysis module number; see the "Usage Guidelines" section for additional information.
data-port port-number	Data-port number; see the "Usage Guidelines" section for additional information.
destination	SPAN destination interface.
vlan vlan-id	VLAN ID; valid values are from 1 to 4094. See the "Usage Guidelines" section for formatting information.
filter vlan vlan-range	Limits SPAN source traffic to specific VLANs.
range session-range	Range of sessions.
local	Local session.
remote	Remote session.
all	All sessions.

 

Defaults

both

Command Modes

Global configuration

Command History

Release	Modification
12.0(7)XE	Support for this command was introduced on the Catalyst 6500 series switches.
12.1(1)E	Support for this command on the Catalyst 6500 series switches was extended to the 12.1 E release.
12.1(3a)E3	The number of valid values for port-channel-number was changed; see the "Usage Guidelines" section for valid values.
12.1(5c)EX	These SPAN support restrictions were added: • If your Catalyst 6500 series switch has a Switch Fabric Module installed, SPAN is supported among supervisor engines and nonfabric-enabled modules. • If your Catalyst 6500 series switch does not have a Switch Fabric Module installed, SPAN is supported on all modules including fabric-enabled modules. • SPAN on DFC-equipped modules is not supported.
12.1(11b)E	This command was changed to include the pos, atm, and ge-wan keywords.
12.1(11b)E	This command was changed to support SPAN on DFC-equipped modules.
12.1(11b)EX	The command was changed to support extended-range VLANs.
12.1(13)E	This command was changed to support RSPAN.

 

Usage Guidelines

Use these formatting guidelines when configuring monitor sessions:

• interface and single-interface formats are type slot/port; valid values for type are ethernet, fastethernet, gigabitethernet, or tengigabitethernet.

• An interface-list is a list of interfaces that are separated by commas. Insert a space before and after each comma as shown in this example:

single-interface , single-interface , single-interface ...

• An interface-range is a range of interfaces separated by dashes. Insert a space before and after each dash. To enter multiple ranges, separate each range with a comma as shown in this example:

type slot/first-port - last-port, first-port - last-port

• A mixed-interface-list is a mixed list of interfaces. Insert a space before and after each dash and comma as shown in this example:

single-interface, interface-range , ... in any order.

• A single-vlan is an ID number of a single VLAN; valid values are from 1 to 4094.

• A vlan-list is a list of VLAN IDs that are separated by commas. An example is shown as follows:

single-vlan , single-vlan , single-vlan ...

• A vlan-range is a range of VLAN IDs that are separated by dashes. An example is shown as follows:

first-vlan-ID - last-vlan-ID

• A mixed-vlan-list is a mixed list of VLAN IDs. Insert a space before and after each dash. To enter multiple ranges, separate each VLAN ID with a comma as shown in this example:

single-vlan , vlan-range , ... in any order

The analysis-module slot-number and the data-port port-number options are supported on Network Analysis modules only.

The number of valid values for port-channel number depends on the software release. For releases prior to Release 12.1(3a)E3, valid values are from 1 to 256; for Releases 12.1(3a)E3, 12.1(3a)E4, and 12.1(4)E1, valid values are from 1 to 64. Release 12.1(5c)EX and later support a maximum of 64 values ranging from 1 to 256. Release 12.1(13)E and later support a maximum of 64 values ranging from 1 to 282; values 257 to 282 are supported on the CSM and FWSM only.

If your system is configured with a Supervisor Engine 1, valid values for vlan-id are from 1 to 1005. If your system is configured with a Supervisor Engine 2, valid values for vlan-id are from 1 to 4094. Extended-range VLANs are not supported on systems configured with a Supervisor Engine 1.

You cannot share destination interfaces among SPAN sessions. For example, a single destination interface can belong to one SPAN session only and cannot be configured as a destination interface in another SPAN session.

You can configure up to 64 SPAN destination interfaces but you can have one egress SPAN source interface and up to 64 ingress source interfaces only.

A particular SPAN session can either monitor VLANs or monitor individual interfaces—you cannot have a SPAN session that monitors both specific interfaces and specific VLANs. If you first configure a SPAN session with a source interface, and then try to add a source VLAN to the same SPAN session, you will get an error. You will also get an error if you configure a SPAN session with a source VLAN and then try to add a source interface to that session. You must first clear any sources for a SPAN session before switching to another type of source.

If you enter the filter keyword on a monitored trunk interface, only traffic on the set of specified VLANs is monitored.

Port channel interfaces display in the list of interface options if you have them configured. VLAN interfaces are not supported. However, you can span a particular VLAN by entering the monitor session session source vlan vlan-id command.

Examples

This example shows how to configure multiple sources for a session:

Router(config)# monitor session 2 source interface fastethernet 5/15 , 7/3 rx

Router(config)# monitor session 2 source interface gigabitethernet 1/2 tx 

Router(config)# monitor session 2 source interface port-channel 102 

Router(config)# monitor session 2 source filter vlan 2 - 3

Router(config)# monitor session 2 destination remote vlan 901

This example shows how to configure an RSPAN destination in the final switch (RSPAN Destination session):

Router(config)# monitor session 8 source remote vlan 901

Router(config)# monitor session 8 destination interface fastethernet 1/2 , 2/3

This example shows how to clear the configuration for sessions 1 and 2:

Router(config)# no monitor session 1 - 2

Router(config)#

This example shows how to clear the configuration for all sessions:

Router(config)# no monitor session all

Router(config)#

This example shows how to clear the configuration for all remote sessions:

Router(config)# no monitor session remote

Router(config)#

Related Commands

remote-span
show monitor session

remote-span

To configure a VLAN as an RSPAN VLAN, use the remote-span command. Use the no form of this command to remove the RSPAN designation.

remote-span

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

config-VLAN

Command History

Release	Modification
12.1(13)E	Support for this command was introduced on the Catalyst 6500 series switches.

 

Usage Guidelines

This command is not supported in the VLAN database mode.

You can enter the show vlan remote-span command to display the RSPAN VLANs in the Catalyst 6500 series switch.

Examples

This example shows how to configure a VLAN as an RSPAN VLAN:

Router(config-vlan)# remote-span

Router(config-vlan)

This example shows how to remove the RSPAN designation:

Router(config-vlan)# no remote-span

Router(config-vlan)

Related Commands

show vlan remote-span

 

 

show monitor session

To display information about the SPAN and RSPAN sessions, use the show monitor session command.

show monitor session [{range session-range} | local | remote | all | session | detail]

Syntax Description

range session-range	(Optional) Displays a range of sessions; valid values are from 1 to 66. See the "Usage Guidelines" section for additional information.
local	(Optional) Displays only local SPAN sessions.
remote	(Optional) Displays both RSPAN source and destination sessions.
all	(Optional) Displays all sessions.
session	(Optional) Number of the session; valid values are from 1 to 66.
detail	(Optional) Displays detailed information.

 

Defaults

This command has no default settings.

Command Modes

EXEC

Command History

Release	Modification
12.0(7)XE	Support for this command was introduced on the Catalyst 6500 series switches.
12.1(1)E	Support for this command on the Catalyst 6500 series switches was extended to the 12.1 E release.
12.1(5c)EX	These SPAN support restrictions were added: • If your switch has a Switch Fabric Module installed, SPAN is supported among supervisor engines and nonfabric-enabled modules. • If your switch does not have a Switch Fabric Module installed, SPAN is supported on all modules including fabric-enabled modules. • SPAN on DFC-equipped modules is not supported.
12.1(8a)E	Support for this command on the Catalyst 6500 series switches was extended to the 12.1 E release.
12.1(13)E	This command was changed to support the range session-range, local, detail, remote, and all options and to change the maximum number of valid sessions from 1 to 66.

 

Usage Guidelines

When entering a range of session, use a dash (-) to specify a range and separate multiple entries with a comma (,). Do not enter spaces before or after the comma or dash.

You can enter multiple ranges by separating the ranges with a comma.

If you enter the show monitor session command without specifying a session, the information for all sessions is displayed.

Examples

This example shows how to display the saved version of the monitor configuration for a specific session:

Router# show monitor session 2

Session 2

------------

Type : Remote Source Session

Source Ports:

    RX Only:       Fa1/1-3

Dest RSPAN VLAN:   901

Router#

This example shows how to display the detailed information from a saved version of the monitor configuration for a specific session:

Router# show monitor session 2 detail

Session 2

------------

Type : Remote Source Session

Source Ports:

    RX Only:       Fa1/1-3

    TX Only:       None

    Both:          None

Source VLANs:

    RX Only:       None

    TX Only:       None

    Both:          None

Source RSPAN VLAN: None

Destination Ports: None

Filter VLANs:      None

Dest RSPAN VLAN:   901

Router#

Related Commands

monitor session
remote-span

show vlan remote-span

To display a list of RSPAN VLANs, use the show vlan remote-span command.

show vlan remote-span

Syntax Description

This command has no arguments or keywords.

Defaults

This command has no default settings.

Command Modes

EXEC

Command History

Release	Modification
12.1(13)E	This command was introduced on the Catalyst 6500 series switches.

 

Examples

This example shows how to display a list of remote SPAN VLANs:

Router# show vlan remote-span

Remote SPAN VLANs

------------------------------------------------------------------------------

2,20

Related Commands

remote-span
vlan (config-VLAN submode)