asked on
how to capture vlan traffic accross multiple cisco switch stacks
I have a need to span traffic for a particular vlan to a single port on one of my core switches for packet capture purposes.
Currently this vlan traffic propagates throughout the network via trunk connections from the core switch to several cisco switch stacks. So my question is if I setup a monitor session to capture this specific vlan as a source on the core switch, is it going to be enough to capture all the vlan traffic on the network. Or, do I need to enable some type of RSPAN?
thank you.
Currently this vlan traffic propagates throughout the network via trunk connections from the core switch to several cisco switch stacks. So my question is if I setup a monitor session to capture this specific vlan as a source on the core switch, is it going to be enough to capture all the vlan traffic on the network. Or, do I need to enable some type of RSPAN?
thank you.
Switches / HubsNetworkingNetwork Architecture
Last Comment
Rich Rumble
Are you trying to capture traffic on all ports within the VLAN, or all traffic that crosses the VLAN interface? When you monitor a VLAN interface, you only see the traffic that hits that L3 interface. It's really easy to monitor that L3 interface from the same switch that has the L3 interface. If you also want to capture traffic that stays on the VLAN, you are probably looking at RSPAN, which is something I don't have any experience with.
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.