Filter
Top Products
51-13
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 51 Configuring SPAN and RSPAN
Access List Filtering
To configure ingress packets and encapsulation, perform this task:
This example shows how to configure a destination port with 802.1q encapsulation and ingress packets
using native VLAN 7:
Switch(config)# monitor session 1 destination interface fastethernet 5/48
encapsulation dot1q ingress vlan 7
With this configuration, traffic from SPAN sources associated with session 1 would be copied out of
interface Fast Ethernet 5/48, with 802.1q encapsulation. Incoming traffic would be accepted and
switched, with untagged packets being classified into VLAN 7.
Access List Filtering
When configuring a SPAN session, you can apply access list filtering. Access list filtering applies to all
packets passing through a SPAN destination port that might be sniffed in the egress or ingress direction.
Access list filters are allowed on local SPAN sessions only. If the SPAN destination is an RSPAN VLAN,
the access list filter is rejected.
Note Access list filtering is available in Cisco IOS Release 12.2(20)EW and later releases.
ACL Configuration Guidelines
You can configure ACLs on a SPAN session. Use these guidelines for ACL/SPAN sessions:
• If an ACL is associated with a SPAN session, the rules associated with that ACL are applied against
all packets exiting the SPAN destination interface. Rules pertaining to other VACLs or RACLs
previously associated with the SPAN destination interface are not applied.
• Only one ACL can be associated with a SPAN session.
Command Purpose
Switch(config)# [no] monitor session
session_number destination interface interface
[encapsulation {isl | dot1q}] [ingress [vlan
vlan_IDs] [learning]]
Specifies the configuration of the ingress
packet and the encapsulation type of the
destination port.
Note The isl keyword is not supported on
Catalyst 4900M, Catalyst 4948E,
Supervisor Engine 6-E, and
Supervisor Engine 6L-E.
For session_number, specifies the session
number identified with this SPAN session (1
through 6).
For interface, specifies the destination
interface.
For vlan_IDs, specifies the destination VLAN.
Use the no keyword to restore the defaults.