

Note: The commands in the configuration are not supported on the Catalyst 2950 with Cisco IOS Software Release 12.0(5.2)WC(1) or any software that is earlier than Cisco IOS Software Release 12.1(6)EA2.
#Cisco 2950 switch document series
Note: Unlike the 2900XL and 3500XL Series Switches, the Catalyst 2940, 2950, 2955, 2960, 2970, 3550, 3560, 3560-E, 3750, and 3750-E Series Switches support SPAN on source port traffic in the Rx direction only (Rx SPAN or ingress SPAN), in the Tx direction only (Tx SPAN or egress SPAN), or both. In the previous example a port was configured as a destination port for both local SPAN and the RSPAN to monitor traffic for the same VLAN that resides in two switches. On the remote switch, use this configuration:c3750_remote(config)# monitor session 1 source vlan 5 !- Specifies VLAN 5 as the VLAN to be monitored.c3750_remote(config)# monitor session 1 destination remote vlan In this example, we monitor traffic from VLAN 5 that is spread across two switches:c3750(config)# monitor session 1 source vlan c3750(config)# monitor session 1 source vlan 5c3750(config)# monitor session 1 destination fastethernet 0/3 !- This configures interface FastEthernet 0/3 as a destination port.

In order to monitor traffic for a particular vlan that resides in two switches directly connected, configure these commands on the switch that has the destination port. You can also configure a port as a destination for local SPAN and RSPAN for the same VLAN traffic. You can configure the SPAN, as in this example: C2950# configure terminalC2950(config)#C2950(config)# monitor session 1 source interface fastethernet 0/2 !- This configures interface Fast Ethernet 0/2 as source port.C2950(config)# monitor session 1 destination interface fastethernet 0/3 !- This configures interface Fast Ethernet 0/3 as destination port.C2950(config)# C2950# show monitor session 1Session 1-Source Ports: RX Only: None TX Only: None Both: Fa0/2Destination Ports: Fa0/3C2950# However, the Catalyst 2950 cannot monitor the VLANs. The SPAN feature configuration commands are similar on the Catalyst 2950 and Catalyst 3550. Therefore, you cannot have two SPAN sessions that use the same destination port. Only one destination port is allowed per SPAN session, and the same port cannot be a destination port for multiple SPAN sessions. The Catalyst 3750 Switches support session configuration with the use of source and destination ports that reside on any of the switch stack members. The Catalyst 2970, 3560, and 3750 Switches do not require the configuration of a reflector port when you configure an RSPAN session. The Catalyst 3550, 3560, and 3750 Switches can support up to two SPAN sessions at a time and can monitor source ports as well as VLANs. The Catalyst 29 Switches can forward traffic on a destination SPAN port in Cisco IOS Software Release 12.1(13)EA1 and later. The Catalyst 2950 Switches can have only one SPAN session active at a time and can monitor only source ports. This document answers the most common questions about SPAN, such as: SPAN on the Catalyst 2940, 2950, 2955, 2960, 2970, 3550, 3560, 3560-E, 37-E Series Switches Rather, this document is an introduction to the recent features of SPAN that have been implemented. This document is not intended to be an alternate configuration guide for the SPAN feature. However, the latest releases of the Catalyst OS (CatOS) introduced great enhancements and many new possibilities that are now available to the user. Previously, SPAN was a relatively basic feature on the Cisco Catalyst Series switches.

The network analyzer can be a Cisco SwitchProbe device or other Remote Monitoring (RMON) probe. The Switched Port Analyzer (SPAN) feature, which is sometimes called port mirroring or port monitoring, selects network traffic for analysis by a network analyzer.
