Categories

CUC (6) CUCM (26) Jabber (6) Python (2) Routing (3) Solarwinds Orion NPM (4) switching (1) Video (6) voice (2)

Tuesday, 24 March 2015

setting up remote SPAN

Remote SPAN is frikking great  (provided you know how to use Wireshark).

so lets say we want to capture all traffic TX/RX on Gi1/0/1 on SW1 (SOURCE), but we have no spare ports on our switch. So we need to capture on SW2 (port Fa0/35) (DESTINATION)


on the source device (SW1):

configure a remote SPAN vlan (666 in my example), set remote-span under the VLAN configuration

monitor session 28 source interface Gi1/0/1
monitor session 28 destination remote vlan 666 



sw1#show vlan remote

Remote SPAN VLANs
------------------------------------------------------------------------------
666




on the destination device (SW2):

configure a remote SPAN vlan (666 in my example),  set remote-span under the VLAN configuration

monitor session 28 destination interface Fa0/35
monitor session 28 source remote vlan 666 


sw2#show vlan remote-span 

Remote SPAN VLANs
------------------------------------------------------------------------------

666


This basically means the capture traverses from SW1 to SW2 and gets output-ed to Fa0/35 where our wireshark client is connected to.


Hos Ja!

No comments:

Post a Comment