Configure ERSPAN
ERSPAN session is used to analyze the data flow passing the reachable remote device port of the L3 network.
Configuration Condition
None
Configure ERSPAN Session
The destination end of the ERSPAN source session is used to specify the encapsulated source IP address, destination IP address, VLAN tag, TTL value, and TOS priority of the ERSPAN source session. After being encapsulated with the IP head, the mirror packet can traverse the L3 network.
Table 5-6 Configure the ERSPAN source session
Step
|
Command
|
Description
|
Enter the global configuration mode
|
config terminal
|
-
|
Configure the source end of the ERSPAN source session
|
monitor session session-number source { interface interface-list | interface link-aggregation link-aggregation-id } [ both | tx | rx ]
|
Mandatory
By default, do not configure the source end of the ERSPAN source session.
|
Configure the destination end of the ERSPAN source session
|
monitor session session-number destination type erspan-source source-ip source-ip-addr destination-ip destination-ip-addr [ vrf vrf-name] [ ttl ttl] [ tos tos]
|
Mandatory
By default, do not configure the destination end of the ERSPAN source session.
|
-
When configuring the session destination end and specifying the forwarding port of the mirror packet as the aggregation group, the specified aggregation group should be already created. If the aggregation group is not created, the configuration fails.
- One port cannot exist in multiple sessions at the same time.
- Source IP address can directly search for the corresponding MAC address of the IP address.
- The specified source IP address is configured on the device.
- The next-hop egress port cannot belong to the aggregation group.
- The source IPs of the ERSPAN sessions supporting multiple destination ports can be the same or different, but the destination IP should be different.
- The source of the port mirror session cannot be the same as the source of the flow mirror.