About SPAN Feature Configuration
The Cisco ACI Virtual Edge supports Switched Port Analyzer (SPAN) features, including local SPAN and Encapsulated remote SPAN (ERSPAN).
You cannot use the Cisco ACI Virtual Edge inside or outside interface uplinks as the source or destination of a SPAN sessions. The Cisco ACI Virtual Edge supports 64 SPAN sessions per DVS (local SPAN and ERSPAN). A source can be a member of a maximum of four SPAN sessions.
Guidelines for Configuring SPAN
Follow these guidelines when you configure local SPAN sessions on the Cisco ACI Virtual Edge:
You can have only a single vLeaf per session.
Sessions are defined by a client end point (CEP). EPG as a destination is not supported.
Sessions are deployed on the vLeaf when a destination CEP is defined.
No regular traffic is allowed from or to the destination CEP.
A separate EPG with promiscuous mode enabled must be created for LSPAN destination CEP.
Guidelines for Configuring ERSPAN
Follow these guidelines when you configure ERSPAN sessions on the Cisco ACI Virtual Edge:
Sessions are defined based on an IP address with other optional parameters.
Sessions can be deployed on multiple vLeafs.
Sessions are deployed to a vLeaf when a source CEP or endpoint group (EPG) is defined.
The destination for an ERSPAN session should always be in overlay-1 (infraVRF [virtual routing and forwarding]). If the destination is a VM behind the Cisco ACI Virtual Edge, bring it up in the infra EPG.
The ERSPAN destination should always be remote. ERSPAN from a Cisco ACI Virtual Edge to a destination hosted behind the same Cisco ACI Virtual Edge is not supported.
If the ERSPAN destination is a VM, make sure that vMotion is disabled on it. If the ERSPAN destination VM is moved to another host for any reason, make sure that the static CEP is configured accordingly. See Step 21 through Step 24 in the section Configure SPAN Features Using the GUI.
The IP address for the destination can be obtained using DHCP (Option 61 is needed during DHCP) or static configuration. Make sure that the IP address is in the same subnet as the other VTEPs in overlay-1 (infra VRF).
Not all operating systems for VMs and devices support Option 61 for DHCP. In those cases, use a static IP address on infra VLAN. Choose a static IP address for ERSPAN carefully because it might lead to an IP conflict with the leased DHCP IPs on infra VLAN.
Guidelines for Configuring SPAN or ERSPAN with a UCS B Series Server
If you want to configure SPAN or ERSPAN on Cisco ACI Virtual Edge, and the Cisco ACI Virtual Edge hosts are running on a UCS B Series server, you must configure a port channel (PC) interface policy group with MAC pinning for the interfaces connecting to the fabric interconnects. This is because the virtual source (vsource) and virtual destination (vdestination) groups are specified only on PC policy groups.