SPAN Questions 4

Question 1

Explanation

A physical port that belongs to an EtherChannel group can be configured as a SPAN source port and still be a part of the EtherChannel. In this case, data from the physical port is monitored as it participates in the EtherChannel. However, if a physical port that belongs to an EtherChannel group is configured as a SPAN destination, it is removed from the group.

Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/swspan.html

Question 2

Question 3

Question 4

Question 5

Explanation

The words “received” and “sent” are not clear so this question is a bit tricky. But notice that the above configuration should be on the destination device so the packet must first be “received” then “sent to”.

A simple configuration of RSPAN is shown below:
+ On source device:

+ On destination device:

Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_40_se/configuration/guide/scg/swspan.pdf

Question 6

Explanation

A VLAN SPAN (VSPAN) configuration is a monitor session whose source is a VLAN rather than specific interfaces. When a VLAN is the source of a monitor session, all physical interfaces that are members of the VLAN become source ports in a VSPAN.

Example of  setting up basic VSPAN on a Cisco switch:
Switch(config)#monitor session 1 source vlan 10 rx
Switch(config)#monitor session 1 source vlan 20 rx
Switch(config)#monitor session 1 destination interface fastEthernet 0/5

Like a normal SPAN session, it can monitor both ingress and egress traffic on the source VLAN

Question 7

Explanation

This is how to configure Remote SPAN (RSPAN) feature on two switches. Traffic on FastEthernet0/1 of Switch 1 will be sent to Fa0/10 of Switch2 via VLAN 40.

+ Configure on both switches
Switch1,2(config)#vlan 40
Switch1,2(config-vlan)#remote-span
+ Configure on Switch1
Switch1(config)# monitor session 1 source interface FastEthernet 0/1 both
Switch1(config)# monitor session 1 destination remote vlan 40
+ Configure on Switch2
Switch2(config)#monitor session 5 source remote vlan 40
Switch2(config)# monitor session 5 destination interface FastEthernet 0/10

Question 8

Explanation

A physical port that belongs to an EtherChannel group can be configured as a SPAN source port and still be a part of the EtherChannel. In this case, data from the physical port is monitored as it participates in the EtherChannel. However, if a physical port that belongs to an EtherChannel group is configured as a SPAN destination, it is removed from the group.

Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/swspan.html