Remote SPAN Configuration
Remote Switch Port Analyzer (RSPAN) is another SPAN type that is used to mirror source ports/vlans traffic to destination ports. This type of SPAN (Switch Port Analyzer) is the SPAN in which source and destination ports are in different switches. In other word, you can monitor another switch’s port or VLAN rather than yours with RSPAN. In Local SPAN Configuration, we could only monitor any port in the same switch. In this lesson, we will focus on Remote SPAN Configuration and we will learn How to Configure RSPAN on Cisco switches.
Our Remote SPAN Topology will be like below:
Like before, in this lesson, our aim is mirroring one port’s traffic to another port in different switches.
We will configure Remote SPAN in four steps:
- RSPAN Config Under VLAN
- Source Port and Destination VLAN Config (on source switch)
- Source VLAN and Destination Port Config (on destination switch)
- RSPAN Verification
Now, let’s start our Remote SPAN Configuration Example.
RSPAN Config Under VLAN
Think about that we will use RSPAN feature for VLAN 8. Here, we will configure “remote span” keywords under VLAN 8. We will do the same configuration on both switches.
Source Port and Destination VLAN Config (on source switch)
Source Port and Destination VLAN Configuration is done on the source switch (Switch 1). Here, RSPAN Source Port is the port which is the port that will be mirrored and analyzed. Our source port is Fast Ethernet 0/2 on Switch 1. Like Local SPAN Source Port configuration, on RSPAN Config, we will also use “monitor session 1 source interface fa0/2” Cisco command to configure source.
Here, our destination VLAN is VLAN 8. Because , we will only analyze its traffic. During the configuration of destination VLAN, we should also define another port as a “reflector port”. This is because some limitations. By defining “reflector port” switch will use this ports resources. So, this port must be a port that is not being used by other services. In this RSPAN Configuration, we will use Fastethernet 0/5 as reflector port.