This document describes how to configure a remote switched port
analyzer (RSPAN) session on a Nexus 7000 Series Switch that monitors the
traffic between Ethernet ports on two different Nexus 7000 Series
Ensure that you meet these requirements before you attempt this
Have basic knowledge of configuration on Nexus 7000 Series
Have basic knowledge of remote switched port analyzer
The information in this document is based on Nexus 7000 Series NX-OS
The information in this document was created from the devices in a
specific lab environment. All of the devices used in this document started with
a cleared (default) configuration. If your network is live, make sure that you
understand the potential impact of any command.
You can use switched port analyzer (SPAN) in order to analyze network
traffic that passes through ports or VLANs of the switch, which send a copy of
the traffic to a destination port where the network analyzer connects to the
In order to extend SPAN, RSPAN enables remote monitoring of multiple
switches across your network. The Nexus 7000 Series Switch is limited in what
it can do with RSPAN. An RSPAN VLAN cannot be used as a SPAN destination.
Therefore, the Nexus 7000 switch can only use RSPAN as a transit VLAN or a
source VLAN and pull data from the RSPAN VLAN. You cannot place anything into
the RSPAN VLAN from the Nexus 7000 switch.
This configuration example uses source ports on two different Nexus
7000 series switches and a destination port on one Nexus 7000 switch where the
network analyzer has connected. Separate Ethernet 1/1 links are set up between
the two devices: one link as a span destination and the other link as access to
the RSPAN VLAN.
From the Nexus 1 switch, the SPAN traffic from the source is carried to
the destination port and copied onto the RSPAN VLAN. The traffic is then
forwarded over the link to the Nexus 2 switch on the Ethernet 1/1 interface.
Next, RSPAN VLAN traffic is sent to the destination port where the device, such
as a SwitchProbe device or other Remote Monitoring (RMON) probe or security
device, can receive and analyze the packets.