Catalyst 6500 Series Cisco IOS Command Reference, 12.1 Emonitor session To start a new SPAN or RSPAN session, add or delete interfaces or VLANs to or from an existing SPAN or RSPAN session, filter SPAN or RSPAN traffic to specific VLANs, or delete a SPAN or RSPAN session, use the monitor session command. Use the no form of this command to remove one or more source or destination interfaces from the SPAN or RSPAN session, remove a source VLAN from the SPAN or RSPAN session, or delete a SPAN or RSPAN session.
monitor session session source {{interface type} | {{vlan vlan-id} [rx | tx | both]} | {remote vlan rspan-vlan-id}}
monitor session session destination {{interface type} | {vlan vlan-id} | {remote vlan vlan-id} | {analysis-module slot-number} | {data-port port-number}}
monitor session session-number filter vlan vlan-range
no monitor session {{range session-range} | local | remote | all | session}
no monitor session session source {{interface type} | {{vlan vlan-id} [rx | tx | both]} | {remote vlan rspan-vlan-id}}
no monitor session session destination {{interface type} | {vlan vlan-id} | {remote vlan vlan-id} | {analysis-module slot-number} | {data-port port-number}}
Syntax Descriptionsession
Number of the SPAN session; valid values are from 1 to 66.
source
SPAN source.
interface type
Interface type; see the "Usage Guidelines" section for formatting information.
vlan vlan-id
VLAN ID; valid values are from 1 to 4094.
rx
(Optional) Monitor-received traffic only.
tx
(Optional) Monitor-transmitted traffic only.
both
(Optional) Monitor-received and monitor-transmitted traffic.
remote vlan rspan-vlan-id
Specifies RSPAN VLAN as destination VLANs.
analysis-module slot-number
Network analysis module number; see the "Usage Guidelines" section for additional information.
data-port port-number
Data-port number; see the "Usage Guidelines" section for additional information.
destination
SPAN destination interface.
vlan vlan-id
VLAN ID; valid values are from 1 to 4094. See the "Usage Guidelines" section for formatting information.
filter vlan vlan-range
Limits SPAN source traffic to specific VLANs.
range session-range
Range of sessions.
local
Local session.
remote
Remote session.
all
All sessions.
Defaults both
Command Modes Global configuration
Command HistoryRelease
Modification
12.0(7)XE
Support for this command was introduced on the Catalyst 6500 series switches.
12.1(1)E
Support for this command on the Catalyst 6500 series switches was extended to the 12.1 E release.
12.1(3a)E3
The number of valid values for port-channel-number was changed; see the "Usage Guidelines" section for valid values.
12.1(5c)EX
These SPAN support restrictions were added:
•
If your Catalyst 6500 series switch has a Switch Fabric Module installed, SPAN is supported among supervisor engines and nonfabric-enabled modules.
• If your Catalyst 6500 series switch does not have a Switch Fabric Module installed, SPAN is supported on all modules including fabric-enabled modules.
• SPAN on DFC-equipped modules is not supported.
12.1(11b)E
This command was changed to include the pos, atm, and ge-wan keywords.
12.1(11b)E
This command was changed to support SPAN on DFC-equipped modules.
12.1(11b)EX
The command was changed to support extended-range VLANs.
12.1(13)E
This command was changed to support RSPAN.
Usage Guidelines Use these formatting guidelines when configuring monitor sessions:
• interface and single-interface formats are type slot/port; valid values for type are ethernet, fastethernet, gigabitethernet, or tengigabitethernet.
• An interface-list is a list of interfaces that are separated by commas. Insert a space before and after each comma as shown in this example:
single-interface , single-interface , single-interface ...
• An interface-range is a range of interfaces separated by dashes. Insert a space before and after each dash. To enter multiple ranges, separate each range with a comma as shown in this example:
type slot/first-port - last-port, first-port - last-port
• A mixed-interface-list is a mixed list of interfaces. Insert a space before and after each dash and comma as shown in this example:
single-interface, interface-range , ... in any order.
• A single-vlan is an ID number of a single VLAN; valid values are from 1 to 4094.
• A vlan-list is a list of VLAN IDs that are separated by commas. An example is shown as follows:
single-vlan , single-vlan , single-vlan ...
• A vlan-range is a range of VLAN IDs that are separated by dashes. An example is shown as follows:
first-vlan-ID - last-vlan-ID
• A mixed-vlan-list is a mixed list of VLAN IDs. Insert a space before and after each dash. To enter multiple ranges, separate each VLAN ID with a comma as shown in this example:
single-vlan , vlan-range , ... in any order
The analysis-module slot-number and the data-port port-number options are supported on Network Analysis modules only.
The number of valid values for port-channel number depends on the software release. For releases prior to Release 12.1(3a)E3, valid values are from 1 to 256; for Releases 12.1(3a)E3, 12.1(3a)E4, and 12.1(4)E1, valid values are from 1 to 64. Release 12.1(5c)EX and later support a maximum of 64 values ranging from 1 to 256. Release 12.1(13)E and later support a maximum of 64 values ranging from 1 to 282; values 257 to 282 are supported on the CSM and FWSM only.
If your system is configured with a Supervisor Engine 1, valid values for vlan-id are from 1 to 1005. If your system is configured with a Supervisor Engine 2, valid values for vlan-id are from 1 to 4094. Extended-range VLANs are not supported on systems configured with a Supervisor Engine 1.
You cannot share destination interfaces among SPAN sessions. For example, a single destination interface can belong to one SPAN session only and cannot be configured as a destination interface in another SPAN session.
You can configure up to 64 SPAN destination interfaces but you can have one egress SPAN source interface and up to 64 ingress source interfaces only.
A particular SPAN session can either monitor VLANs or monitor individual interfaces—you cannot have a SPAN session that monitors both specific interfaces and specific VLANs. If you first configure a SPAN session with a source interface, and then try to add a source VLAN to the same SPAN session, you will get an error. You will also get an error if you configure a SPAN session with a source VLAN and then try to add a source interface to that session. You must first clear any sources for a SPAN session before switching to another type of source.
If you enter the filter keyword on a monitored trunk interface, only traffic on the set of specified VLANs is monitored.
Port channel interfaces display in the list of interface options if you have them configured. VLAN interfaces are not supported. However, you can span a particular VLAN by entering the monitor session session source vlan vlan-id command.
Examples This example shows how to configure multiple sources for a session:
Router(config)# monitor session 2 source interface fastethernet 5/15 , 7/3 rx
Router(config)# monitor session 2 source interface gigabitethernet 1/2 tx
Router(config)# monitor session 2 source interface port-channel 102
Router(config)# monitor session 2 source filter vlan 2 - 3
Router(config)# monitor session 2 destination remote vlan 901
This example shows how to configure an RSPAN destination in the final switch (RSPAN Destination session):
Router(config)# monitor session 8 source remote vlan 901
Router(config)# monitor session 8 destination interface fastethernet 1/2 , 2/3
This example shows how to clear the configuration for sessions 1 and 2:
Router(config)# no monitor session 1 - 2
Router(config)#
This example shows how to clear the configuration for all sessions:
Router(config)# no monitor session all
Router(config)#
This example shows how to clear the configuration for all remote sessions:
Router(config)# no monitor session remote
Router(config)#
Related Commands remote-span
remote-span To configure a VLAN as an RSPAN VLAN, use the remote-span command. Use the no form of this command to remove the RSPAN designation.
remote-span
Syntax Description This command has no arguments or keywords.
Defaults This command has no default settings.
Command Modes config-VLAN
Command HistoryRelease
Modification
12.1(13)E
Support for this command was introduced on the Catalyst 6500 series switches.
Usage Guidelines This command is not supported in the VLAN database mode.
You can enter the show vlan remote-span command to display the RSPAN VLANs in the Catalyst 6500 series switch.
Examples This example shows how to configure a VLAN as an RSPAN VLAN:
Router(config-vlan)# remote-span
Router(config-vlan)
This example shows how to remove the RSPAN designation:
Router(config-vlan)# no remote-span
Router(config-vlan)
Related Commands show vlan remote-span
show monitor session To display information about the SPAN and RSPAN sessions, use the show monitor session command.
show monitor session [{range session-range} | local | remote | all | session | detail]
Syntax Descriptionrange session-range
(Optional) Displays a range of sessions; valid values are from 1 to 66. See the "Usage Guidelines" section for additional information.
local
(Optional) Displays only local SPAN sessions.
remote
(Optional) Displays both RSPAN source and destination sessions.
all
(Optional) Displays all sessions.
session
(Optional) Number of the session; valid values are from 1 to 66.
detail
(Optional) Displays detailed information.
Defaults This command has no default settings.
Command Modes EXEC
Command HistoryRelease
Modification
12.0(7)XE
Support for this command was introduced on the Catalyst 6500 series switches.
12.1(1)E
Support for this command on the Catalyst 6500 series switches was extended to the 12.1 E release.
12.1(5c)EX
These SPAN support restrictions were added:
• If your switch has a Switch Fabric Module installed, SPAN is supported among supervisor engines and nonfabric-enabled modules.
• If your switch does not have a Switch Fabric Module installed, SPAN is supported on all modules including fabric-enabled modules.
• SPAN on DFC-equipped modules is not supported.
12.1(8a)E
Support for this command on the Catalyst 6500 series switches was extended to the 12.1 E release.
12.1(13)E
This command was changed to support the range session-range, local, detail, remote, and all options and to change the maximum number of valid sessions from 1 to 66.
Usage Guidelines When entering a range of session, use a dash (-) to specify a range and separate multiple entries with a comma (,). Do not enter spaces before or after the comma or dash.
You can enter multiple ranges by separating the ranges with a comma.
If you enter the show monitor session command without specifying a session, the information for all sessions is displayed.
Examples This example shows how to display the saved version of the monitor configuration for a specific session:
Router# show monitor session 2
Session 2
------------
Type : Remote Source Session
Source Ports:
RX Only: Fa1/1-3
Dest RSPAN VLAN: 901
Router#
This example shows how to display the detailed information from a saved version of the monitor configuration for a specific session:
Router# show monitor session 2 detail
Session 2
------------
Type : Remote Source Session
Source Ports:
RX Only: Fa1/1-3
TX Only: None
Both: None
Source VLANs:
RX Only: None
TX Only: None
Both: None
Source RSPAN VLAN: None
Destination Ports: None
Filter VLANs: None
Dest RSPAN VLAN: 901
Router#
Related Commands monitor session
show vlan remote-span To display a list of RSPAN VLANs, use the show vlan remote-span command.
show vlan remote-span
Syntax Description This command has no arguments or keywords.
Defaults This command has no default settings.
Command Modes EXEC
Command HistoryRelease
Modification
12.1(13)E
This command was introduced on the Catalyst 6500 series switches.
Examples This example shows how to display a list of remote SPAN VLANs:
Router# show vlan remote-span
Remote SPAN VLANs
------------------------------------------------------------------------------
2,20
Related Commands remote-span
vlan (config-VLAN submode)
