Re: Confusion with VLAN traffic - IETL-RS v4 SPAN

From: Ronnie Angello (ronnie.angello@gmail.com)
Date: Tue Jan 23 2007 - 22:03:57 ART


You can only monitor rx traffic on VLANs.

http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12225see/scg/swspan.htm#wp1403438

In fact, I'm unable to configure the monitor session source VLAN without
specifying rx.

CAT1(config)#monitor session 1 source vlan 10 ?
  , Specify another range of VLANs
  - Specify a range of VLANs
  rx Monitor received traffic only

CAT1(config)#monitor session 1 source vlan 10
% Incomplete command.

CAT1(config)#monitor session 1 source vlan 10 rx
CAT1(config)#
Ronnie

On 1/23/07, Fabrice Paz <fabrice.paz@googlemail.com> wrote:
>
> Hi GS,
>
> I have a problem understanding VLAN traffic, here the question
>
> R6
> |
> |
> |Fa0/6
> R1--------------SW1--------------R2
>
> R1 and R2 are both in VLAN12 (12.0.0.1/8 & 12.0.0.2/8)
>
> Configure SPAN on SW1 to redirect all traffic from VLAN 12 to R6
>
>
> My answer to that is;
> monitor session 1 source vlan 12
> monitor session 1 destination interface Fa0/6
>
> The correct answer is;
> monitor session 1 source vlan 12 rx
> monitor session 1 destination interface Fa0/6
>
> 1) Should I understand the question as "Configure SPAN on SW1 to redirect
> all traffic leaving VLAN 12 to R6"?
> 2) There is no SVI on the topology, if my poitn 1) is right is that
> making
> sense to put an rx or tx for this kind of question?
>
>
> To try to understand I have done the folowing test (I have removed
> keepalive
> from all interface involved)
>
> from R1 "ping 12.0.0.2 repeat 20" while SW1 is "monitor session 1 source
> vlan 12 rx" a "show int Fa0/6" on SW1 show 40 packet output
> from R1 "ping 12.0.0.2 repeat 20" while SW1 is "monitor session 1 source
> vlan 12 tx" a "show int Fa0/6" on SW1 show 40 packet output
> from R1 "ping 12.0.0.2 repeat 20" while SW1 is "monitor session 1 source
> vlan 12" a "show int Fa0/6" on SW1 show 80 packet output
>
> Results are exactly the same when pinging 255.255.255.255 from R1 in the
> three scenarios. It's clear that rx an tx are affecting something
>
> 3) Any idea of what rx and tx mean in the case VLAN
> 4) Considering that "monitor session 1 source vlan 12" include both rx and
> tx would that fail the task at the exam if they are expecting rx to be
> set?
>
> Thanks,
>
> Fab
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Thu Feb 08 2007 - 23:46:57 ART