Contents
What is Rspan VLAN?
RSPAN allows you to monitor traffic from source ports distributed over multiple switches, which means that you can centralize your network capture devices. RSPAN works by mirroring the traffic from the source ports of an RSPAN session onto a VLAN that is dedicated for the RSPAN session.
How is a reflector port used in an Rspan configuration?
RSPAN Reflector Port The reflector port forwards only the traffic from the RSPAN source session with which it is affiliated. Any device that is connected to a port that is set as a reflector port loses connectivity until the RSPAN source session is disabled.
What is the purpose of performing a local SPAN?
Local SPAN copies traffic from one or more source ports in any VLAN or from one or more VLANs to a destination for analysis (see Figure 57-1). For example, as shown in Figure 57-1, all traffic on Ethernet port 5 (the source port) is copied to Ethernet port 10.
Which two methods are used to mitigate VLAN attacks choose two?
Set the native VLAN to an unused VLAN.* Enable BPDU guard. Explanation: Mitigating a VLAN attack can be done by disabling Dynamic Trunking Protocol (DTP), manually setting ports to trunking mode, and by setting the native VLAN of trunk links to VLANs not in use.
What is SPAN mode?
The SPAN mode is a unique mode for a TAP that takes the SPAN or mirrored output from a network switch or router into the A port and can replicate all the traffic it receives and send it out ports B, and/or C and/or D of the TAP.
What kind of traffic does the RSPAN VLAN carry?
The RSPAN VLAN carries SPAN traffic between RSPAN source and destination sessions. It has these special characteristics: All traffic in the RSPAN VLAN is always flooded. No MAC address learning occurs on the RSPAN VLAN. RSPAN VLAN traffic only flows on trunk ports.
How does RSPAN work on a Cisco switch?
RSPAN works by mirroring the traffic from the source ports of an RSPAN session onto a VLAN that is dedicated for the RSPAN session. This VLAN is then trunked to other switches, allowing the RSPAN session traffic to be transported across multiple switches.
How is VLAN-based span used to analyze network traffic?
You can use VLAN-based SPAN (VSPAN) to analyze the network traffic in one or more VLANs. You can configure VSPAN in a bidirectional mode (ingress and egress). All the ports in the source VLANs become operational source ports for the VSPAN session.
Is the MAC address learning disabled in RSPAN VLAN?
MAC address learning is disabled in the RSPAN VLAN. Configure SPAN source both TX/RX. Encapsulated remote SPAN (ERSPAN) brings generic routing encapsulation (GRE) for all captured traffic and allows it to be extended across Layer 3 domains.