Ruijie Community

Title: How to configure RSPAN to detect the traffic of certain ports / vlans on Ruijie Switch? [Print this page]

Author: GTAC-Sophia    Time: 2023-7-12 10:11
Title: How to configure RSPAN to detect the traffic of certain ports / vlans on Ruijie Switch?
Requirements:
Copy the packets of the mirror port (source port) to the observation port (destination port) so that the complete packets can be obtained for network analysis.
Topology:


Configuration steps:
Hostname> enable
Hostname# configure terminal
Hostname(config)# monitor session 1 source int gigabitEthernet0/1
Hostname(config)# monitor session 1 destination int gigabit Ethernet 0/3
Topology:


Configurationsteps:
Source device:

switchA# configure terminal
switchA(config)# vlan 100
switchA(config-vlan)# remote-span    --->set avlan for RSPAN

switchA(config-vlan)# exit
switchA(config)# monitor session 3remote-source   --->setthis device as source device

switchA(config)# monitor session 3 source interfacegigabitethernet 0/1 both    ---->monitorboth input & output traffic from G0/1

switchA(config)# monitor session 3 destinationremote vlan 100 interface gigabitethernet 0/3   ---->send out the traffic copy from G0/3

Destination device:

switchB# configure
switchB(config)# interface gigabitethernet 0/1
Switch C(config-if)# switchport mode trunk
Switch C(config-if)#exi
switchB(config)# vlan 100
switchB(config-vlan)# remote-span   --->set avlan for RSPAN

switchB(config-vlan)# exit
switchB(config)# monitor session 3remote-destination   --->set thisdevice as destination device

switchB(config)# monitor session 3 destination remote vlan 100 interface gigabitethernet 0/2   ---->received the traffic copy from G0/2

Topology:



Configurationsteps:
Source device(Switch A):

Switch A# configure terminal
Switch A(config)# vlan 100
Switch A(config-vlan)# remote-span    --->set a vlan for RSPAN

Switch A(config-vlan)# exit
Switch A(config)# monitor session 3remote-source   --->set this device as source device

Switch A(config)# monitor session 3 sourceinterface gigabitethernet 0/1 both    ---->monitorboth input & output traffic from G0/1

Switch A(config)# monitor session 3 destinationremote vlan 100 interface gigabitethernet 0/3    ---->send out the traffic copy from G0/3

Middle device(Switch B)

Switch B# configure
Switch B(config)# vlan 100
Switch B(config-vlan)# remote-span   --->set a vlanfor RSPAN

Switch B(config-vlan)# exit
Switch B(config)# interface gigabitethernet 0/1
Switch B(config-if)# switchport mode trunk
Switch B(config-vlan)# exit
Switch B(config)# interface gigabitethernet 0/2
Switch B(config-if)# switchport mode trunk
Destination device(Switch C):

Switch C# configure
Switch C(config)# vlan 100
Switch C(config-vlan)# remote-span   ---set a vlan for RSPAN
Switch C(config-vlan)# exit
Switch C(config)# monitor session 3remote-destination   --->set thisdevice as destination device

Switch C(config)# monitor session 3 destinationremote vlan 100 interface gigabitethernet 0/2 ---->receivedthe traffic copy from G0/2

Switch C(config)# interface gigabitethernet 0/1
Switch C(config-if)# switchport mode trunk
Verification:
Command: show monitor session 3












Welcome to Ruijie Community (https://community.ruijienetworks.com/) Powered by Discuz! X3.2