2-275
Catalyst 3560 Switch Command Reference
78-16405-05
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands
monitor session
monitor session
Use the monitor session global configuration command to start a new Switched Port Analyzer (SPAN)
session or Remote SPAN (RSPAN) source or destination session, to enable ingress traffic on the
destination port for a network security device (such as a Cisco IDS Sensor Appliance), to add or delete
interfaces or VLANs to or from an existing SPAN or RSPAN session, and to limit (filter) SPAN source
traffic to specific VLANs. Use the no form of this command to remove the SPAN or RSPAN session or
to remove source or destination interfaces or filters from the SPAN or RSPAN session. For destination
interfaces, the encapsulation options are ignored with the no form of the command.
monitor session session_number destination {interface interface-id [, | -] [encapsulation
replicate] [ingress {dot1q vlan vlan-id | isl | untagged vlan vlan-id | vlan vlan-id}]} | {remote
vlan vlan-id}
monitor session session_number filter vlan vlan-id [, | -]
monitor session session_number source {interface interface-id [, | -] [both | rx | tx]} | {vlan
vlan-id [, | -] [both | rx | tx]}| {remote vlan vlan-id}
no monitor session {session_number | all | local | remote}
no monitor session session_number destination {interface
interface-id [, | -] [encapsulation
replicate] [ingress {dot1q vlan vlan-id | isl | untagged vlan vlan-id | vlan vlan-id}]} | {remote
vlan vlan-id}
no monitor session session_number filter vlan vlan-id [, | -]
no monitor session session_number source {interface interface-id [, | -] [both | rx | tx]} | {vlan
vlan-id [, | -] [both | rx | tx]} | {remote vlan vlan-id}
Syntax Description session_number Specify the session number identified with the SPAN or RSPAN session.
The range is 1 to 66.
destination Specify the SPAN or RSPAN destination. A destination must be a physical
port.
interface interface-id Specify the destination or source interface for a SPAN or RSPAN session.
Valid interfaces are physical ports (including type and port number). For
source interface, port channel is also a valid interface type, and the valid
range is 1 to 48.
encapsulation replicate (Optional) Specify that the destination interface replicates the source
interface encapsulation method. If not selected, the default is to send
packets in native form (untagged).
These keywords are valid only for local SPAN. For RSPAN, the RSPAN
VLAN ID overwrites the original VLAN ID; therefore, packets are always
sent untagged.
ingress (Optional) Enable ingress traffic forwarding.
dot1q vlan vlan-id Accept incoming packets with IEEE 802.1Q encapsulation with the
specified VLAN as the default VLAN.
isl Specify ingress forwarding using ISL encapsulation.