If you can then the ASA is treating that vlan as a network in common between the two vrfs. A quick check would be to create a vlan with a common address range on both sides of the ASA, and see if a device in that vlan on one side of the ASA can ping a device in the same vlan on the other side of the ASA. If a vlan spans the vrf you should be good, but if the intent of the vrfs and asa are to provide separate networks, you may be out of luck. I'm not sure there's enough information in your post, but I don't think you can rspan between vrfs in that setup. The ASR 1000 supports ERSPAN source (monitoring) only on Fast Ethernet, Gigabit Ethernet, and port-channel interfaces.Ĭonfiguring Local SPAN: Local SPAN configures using “monitor session” command specifying source and destination on the same switch. On the switch that contains the destination port for the session, traffic from the RSPAN session VLAN is simply mirrored out the destination port.Įncapsulated remote SPAN (ERSPAN): encapsulated Remote SPAN (ERSPAN), as the name says, brings generic routing encapsulation (GRE) for all captured traffic and allows it to be extended across Layer 3 domains.ĮRSPAN is a Cisco proprietary feature and is available only to Catalyst 6500, 7600, Nexus, and ASR 1000 platforms to date. This VLAN is then trunked to other switches, allowing the RSPAN session traffic to be transported across multiple switches.
RSPAN works by mirroring the traffic from the source ports of an RSPAN session onto a VLAN that is dedicated for the RSPAN session.
RSPAN allows you to monitor traffic from source ports distributed over multiple switches, which means that you can centralize your network capture devices. Remote SPAN (RSPAN): An extension of SPAN called remote SPAN or RSPAN. Local SPAN: Mirrors traffic from one or more interface on the switch to one or more interfaces on the same switch. There are three types of SPANs supported on Cisco products, which are illustrated in below diagram. SPAN is used for troubleshooting connectivity issues and calculating network utilization and performance, among many others.
It duplicated network traffic to one or more monitor interfaces as it transverse the switch. Switch port Analyzer (SPAN) is an efficient, high performance traffic monitoring system.
0 kommentar(er)
