Reference Guide

Restrictions
• When you use a source VLAN, enable ow-based monitoring (flow-based enable).
• In a source VLAN, only received (rx) trac is monitored.
• You cannot congure a source port-channel or source VLAN in a source session if the port-channel or VLAN has a member port
congured as a destination port in a remote port mirroring session.
• You cannot use a destination port for remote port mirroring as a source port, including the session the port functions as the destination
port.
• The reserved VLAN used to transport mirrored trac must be a L2 VLAN — L3 VLANs are not supported.
Congure remote port mirroring
Remote port mirroring requires a source session (monitored ports on dierent source network devices), a reserved tagged VLAN for
transporting mirrored trac (congured on the source, intermediate, and destination devices), and a destination session (destination ports
connected to analyzers on destination devices).
1 Create a remote monitoring session in CONFIGURATION mode.
monitor session session-id type rspan-source
2 Enter the source to monitor trac in MONITOR-SESSION mode.
source interface interface-range direction
3 Enter the destination to send the trac to in MONITOR-SESSION mode.
destination remote-interface interface-id
4 Enable the monitoring interface in MONITOR-SESSION mode.
shut
Create remote monitoring session
OS10(config)# monitor session 10 type rspan-source
OS10(conf-mon-rspan-source-10)#
Congure source and destination port, and trac direction
OS10(conf-mon-rspan-source-10)# source interface vlan 10 rx
OS10(conf-mon-rspan-source-10)# destination remote-vlan 100
OS10(conf-mon-rspan-source-10)# shutdown
View monitoring session
OS10(conf-mon-rspan-source-10)# do show monitor session all
S.Id Source Destination Dir SrcIP DstIP DSCP TTL State Reason
---------------------------------------------------------------
1 vlan10 vlan 100 rx N/A N/A N/A N/A true Is UP
Encapsulated remote port monitoring
The monitored trac can also be transmitted over an L3 network to a remote analyzer. The encapsulated remote port monitoring (ERPM)
session mirrors trac from the source ports/lags or source VLANs and forwards the trac using routable GRE-encapsulated packets to
the destination IP address specied in the session.
Consider the following points while conguring an ERPM session:
• OS10 supports only the ERPM source session. The encapsulated packets terminate at the destination IP address, the remote analyzer.
• The source IP address must be a valid local IP address for the session to be up.
• The destination IP address must be on a remote L3 node that supports standard GRE decapsulation.
• If the destination IP address is not reachable, the session goes down.
Layer 2
243