- 论坛徽章:
- 3
|
原帖由 happymood 于 2008-6-16 13:22 发表 ![]()
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(13)EA1, RELEASE SOFTWARE
(fc1)
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Tue 04-Mar-03 02:14 by yenanh
Image text-base: ...
SPAN on the Catalyst 2940, 2950, 2955, 2960, 2970, 3550, 3560, 3560-E, 3750 and 3750-E Series Switches These are guidelines for the configuration of the SPAN feature on the Catalyst 2940, 2950, 2955, 2960, 2970, 3550, 3560, 3560-E, 3750, and 3750-E Series Switches:
- The Catalyst 2950 Switches can have only one SPAN session active at a time and can monitor only source ports. These switches cannot monitor VLANs.
- The Catalyst 2950 and 3550 Switches can forward traffic on a destination SPAN port in Cisco IOS Software Release 12.1(13)EA1 and later.
- The Catalyst 3550, 3560, and 3750 Switches can support up to two SPAN sessions at a time and can monitor source ports as well as VLANs.
- The Catalyst 2970, 3560, and 3750 Switches do not require the configuration of a reflector port when you configure an RSPAN session.
- The Catalyst 3750 Switches support session configuration with the use of source and destination ports that reside on any of the switch stack members.
- Only one destination port is allowed per SPAN session, and the same port cannot be a destination port for multiple SPAN sessions. Therefore, you cannot have two SPAN sessions that use the same destination port.
The SPAN feature configuration commands are similar on the Catalyst 2950 and Catalyst 3550. However, the Catalyst 2950 cannot monitor the VLANs. You can configure the SPAN, as in this example:
C2950#configure terminalC2950(config)#C2950(config)#monitor session 1 source interface fastethernet 0/2!--- This configures interface Fast Ethernet 0/2 as source port.C2950(config)#monitor session 1 destination interface fastethernet 0/3!--- This configures interface Fast Ethernet 0/3 as destination port.C2950(config)# C2950#show monitor session 1Session 1---------Source Ports: RX Only: None TX Only: None Both: Fa0/2Destination Ports: Fa0/3C2950# You can also configure a port as a destination for local SPAN and RSPAN for the same VLAN traffic. In order to monitor traffic for a particular vlan that resides in two switches directly connected, configure these commands on the switch that has the destination port. In this example, we monitor traffic from VLAN 5 that is spread across two switches:
c3750(config)#monitor session 1 source vlan < Remote RSPAN VLAN ID >c3750(config)#monitor session 1 source vlan 5c3750(config)#monitor session 1 destination fastethernet 0/3!--- This configures interface FastEthernet 0/3 as a destination port. On the remote switch, use this configuration:
c3750_remote(config)#monitor session 1 source vlan 5!--- Specifies VLAN 5 as the VLAN to be monitored.c3750_remote(config)#monitor session 1 destination remote vlan <Remote vlan id> In the previous example a port was configured as a destination port for both local SPAN and the RSPAN to monitor traffic for the same VLAN that resides in two switches.
Note: Unlike the 2900XL and 3500XL Series Switches, the Catalyst 2940, 2950, 2955, 2960, 2970, 3550, 3560, 3560-E, 3750, and 3750-E Series Switches support SPAN on source port traffic in the Rx direction only (Rx SPAN or ingress SPAN), in the Tx direction only (Tx SPAN or egress SPAN), or both.
Note: The commands in the configuration are not supported on the Catalyst 2950 with Cisco IOS Software Release 12.0(5.2)WC(1) or any software that is earlier than Cisco IOS Software Release 12.1(6)EA2. Refer to the Enabling Switch Port Analyzer section of Managing Switches in order to configure SPAN on a Catalyst 2950 with software that is earlier than Cisco IOS Software Release 12.1(6)EA2.
Note: Catalyst 2950 Switches that use Cisco IOS Software Release 12.1.(9)EA1d and earlier releases in the Cisco IOS Software Release 12.1 train support SPAN. However, all packets that are seen on the SPAN destination port (connected to the sniffing device or PC) have an IEEE 802.1Q tag, even though the SPAN source port (monitored port) might not be an 802.1Q trunk port. If the sniffing device or PC network interface card (NIC) does not understand 802.1Q-tagged packets, the device can drop the packets or have difficulty as it tries to decode the packets. The ability to see the 802.1Q-tagged frames is important only when the SPAN source port is a trunk port. With Cisco IOS Software Release 12.1(11)EA1 and later, you can enable and disable tagging of the packets at the SPAN destination port. Issue the monitor session session_number destination interface interface_id encapsulation dot1q command in order to enable encapsulation of the packets at the destination port. If you do not specify the encapsulation keyword, the packets are sent untagged, which is the default in Cisco IOS Software Release 12.1(11)EA1 and later.
Feature
Catalyst 2950/3550
Ingress (inpkts) enable/disable option
Cisco IOS Software Release 12.1(12c)EA1
RSPAN
Cisco IOS Software Release 12.1(12c)EA1
Feature
Catalyst 29401, 2950, 2955, 2960, 2970, 3550, 3560, 3750
Rx or both SPAN sessions
2
Tx SPAN sessions
2
Rx, Tx, or both RSPAN source sessions
2
RSPAN destination
2
Total sessions
2
1 The Catalyst 2940 Switches only support local SPAN. RSPAN is not supported in this platform.
Refer to these configuration guides for more information on the configuration of SPAN and RSPAN:
|
|
免费注册
楼主: happymood
发表于 2008-06-16 11:51
