cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
379
Views
0
Helpful
2
Replies

Span / Rspan - Multiple Source, Multiple Sessions, same Destination??

SteveSkingle
Level 1
Level 1

Morning all,

 

I am setting up a port mirror for 2x non-stacked Cisco 4000 switches.  We shall call them switch 1 and switch 2. I need to mirror all Vlan activity for a specific Vlan on both switches and send it to a specific port on switch 2.

 

On Switch 2 I created a local span monitor session and sent all mirrored data for that specific Vlan to the destination port on Switch 2, confirmed with Wireshark, job done.

 

On Switch 1 I created an Rspan session to capture the same specific Vlan data and send it to switch 2. 

 

The problem I now have is because there is also a local monitor session outputting to that port on Switch 2, I cannot output the Rspan to the same destination port as only one session can use any one destination port on the same switch.

 

Any ideas. Anyone, Please!

 

2 Replies 2

Hello,

 

I don't think there is a workaround. Only 1 session is allowed per port...

Put simply, is there any way whatsoever to mirror all data for an entire Vlan, over 2 non stacked switches, to a destination port

Review Cisco Networking for a $25 gift card