Configuring VLAN-based filtering for RSPAN

VLAN-based filtering for RSPAN

Complete the following steps to configure VLAN-based mirror filtering for RSPAN.

  1. Enter global configuration mode.
    device# configure terminal
  2. Configure the required normal VLANs.
    device(config)# vlan 3000 by port
    device(config-vlan-3000)# tagged etherenet 2/1/1 ethernet 1/1/1
    device(config-vlan-3000)# exit
    device(config)# vlan 100
    device(config-vlan-100)# tagged ethernet 2/1/1 ethernet 1/1/1
    device(config-vlan-100)# exit
  3. Configure the RSPAN VLAN.
    device(config)# rspan-vlan 191
    device(config-rspan-vlan-191)# tagged ethernet 1/2/1
    device(config-rspan-vlan-191)# rspan destination ethernet 1/2/1
    device(config-rspan-vlan-191)# rspan source monitor-in ethernet 1/1/1 ethernet 2/1/1
    device(config-rspan-vlan-191)# exit
  4. Configure the VLAN for which mirrored traffic is to be filtered out.
    device(config)# mirror-filter source vlan 100
    device(config)# exit
  5. (Optional) Check the mirroring configuration.
    device# show running-config | include mirror
    mirror-filter source vlan 100

The following example creates VLANs 3000 and 100, both with tagged ports 1/1/1 and 2/1/1. It configures the RSPAN VLAN 191 to monitor inbound traffic on ports 1/1/1 and 2/1/1 and to send mirrored traffic on port 1/2/1. It configures mirrored traffic received from VLAN 100 to be filtered out so that it is not sent to the analyzer port.

device# configure terminal
device(config)# vlan 3000 by port
device(config-vlan-3000)# tagged etherenet 2/1/1 ethernet 1/1/1
device(config-vlan-3000)# exit
device(config)# vlan 100
device(config-vlan-100)# tagged ethernet 2/1/1 ethernet 1/1/1
device(config-vlan-100)# exit
device(config)# rspan-vlan 191
device(config-rspan-vlan-191)# tagged ethernet 1/2/1
device(config-rspan-vlan-191)# rspan destination ethernet 1/2/1
device(config-rspan-vlan-191)# rspan source monitor-in ethernet 1/1/1 ethernet 2/1/1
device(config-rspan-vlan-191)# exit
device(config)# mirror-filter source vlan 100
device(config)# exit
device# show running-config | include mirror
mirror-filter source vlan 100