[c-nsp] RSPAN and IP phones

Nick Cutting ncutting at edgetg.com
Fri Aug 18 16:04:46 EDT 2017

It has been a while since I have done this - but I have battled this exact setup a few times.

I seem to remember that the local switch needs to have a physical span destination, i.e not the rspan vlan - needs to be a port, and only the remote switch needs the rspan destination.
The second monitor session picks up the RSPAN as the source and then the port as the destination, but on the first switch.

Traffic that is captured on the source and dumped into the rspan vlan, cannot be seen on the SAME switch for some reason was the limitation I think. 

 I hope that made some kind of sense.

-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Steven Pfister
Sent: Friday, August 18, 2017 2:56 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] RSPAN and IP phones

I've got a setup at one of our sites where I've got several IP phones and a SPAN session copying traffic to them to a port on the same switch which is a call recorder. This works fine.
We're recently added a second switch to this location which also serves IP phones. I'm trying to change from SPAN to RSPAN. For some reason, I either get no calls recorded, or the calls are nothing but silence.
I've got vlan 880 configured as a remote-span vlan, and I'm just
monitor session 1 source interface Gi1/0/1 - 24 monitor session 1 destination remote vlan 880 monitor session 2 source remote vlan 880 monitor session 2 destination interface Gi1/0/48
on the first switch, and 
monitor session 1 source interface Gi1/0/1 - 6 monitor session 1 destination remote vlan 880
vlan 880 is configured as a remote span vlan on both switches and the vlan is allowed on the trunks going to the switches.

Please try our new DPS mobile app!   Available in the Google Playstore
(android) or Apple iTunes store.  Android:

cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

More information about the cisco-nsp mailing list