Nexus 9k Span Configuration

[marce1000]

 - What is your question and or problem ?

 M.

[balaji.bandi]

Good span port config as below :

Configuration Example

# configure terminal
(config)# interface ethernet 1/48    
(config-if)# switchport monitor
(config-if)# exit
(config)# monitor session 1
(config-monitor)# destination interface ethernet 1/48
switch(config-monitor)# source interface ethernet 1/1 both    <-- this is the port you like to capture the traffic (Both - in and out)

[sajidabbas]

Sorry I dont know why the question didn't came out.

Basically I'm trying to configure local SPAN sessions on nexus 9k where there are two monitor sessions with same source ports but one of them send out SPAN traffic to destination port and other one does not.

Below is the config

monitor session 1
description Monitoring
filter access-group SPAN-VMAP
source interface Ethernet1/4 rx
source interface Ethernet1/8 rx
source interface Ethernet1/10 rx
destination interface Ethernet1/11
no shut
monitor session 2
description test
source interface Ethernet1/4 rx

source interface Ethernet1/8 rx

source interface Ethernet1/10 rx
destination interface Ethernet1/23
no shut

session 1
---------------
description : Monitoring
type : local
state : up
acl-name : SPAN-VMAP (Rx only)
source intf :
rx : Eth1/4 Eth1/8 Eth1/10
tx :
both :
source VLANs :
rx :
tx :
both :
filter VLANs : filter not specified
source fwd drops :
destination ports : Eth1/11

session 2
---------------
description : test
type : local
state : up
acl-name : acl-name not specified
source intf :
rx : Eth1/4 Eth1/8 Eth1/10 
tx :
both :
source VLANs :
rx :
tx :
both :
filter VLANs : filter not specified
source fwd drops :
destination ports : Eth1/23

Eth 1/11 shows traffic being sent out but Eth 1/23 show zero traffic sent out.

I read in the guide and we can have same source ports in two monitor sessions. 

Is there anything remaining to be configured or some feature limitation.

Sajid

[balaji.bandi]

Can you post destination port config

show inter eth 1/11 and 1/23

show run inter eth 1/11

show run inter eth 1/23

also like to see your ACL group which you used for first session.

[sajidabbas]

Hi,

Here are the interface config

interface Ethernet1/11
description Monitor
switchport
switchport monitor
logging event port link-status
no shutdown

interface Ethernet1/23
description capture port
switchport
switchport monitor
no logging event port link-status
no shutdown

Below is the show interface for Eth1/11. Unfortunately they have plugged in something else in Eth1/23 so dont have output from that interface.

Ethernet1/11 is up
admin state is up, Dedicated Interface
Hardware: 100/1000/10000/25000 Ethernet, address: d4e8.80dd.a7fa (bia d4e8.80dd.a7fa)
Description: Monitor
MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec
reliability 255/255, txload 41/255, rxload 1/255
Encapsulation ARPA, medium is broadcast
Port mode is access
full-duplex, 10 Gb/s, media type is 10G
Beacon is turned off
Auto-Negotiation is turned on FEC mode is Auto
Input flow-control is off, output flow-control is off
Auto-mdix is turned off
Rate mode is dedicated
Switchport monitor is on
EtherType is 0x8100
EEE (efficient-ethernet) : n/a
Last link flapped 7week(s) 6day(s)
Last clearing of "show interface" counters never
24 interface resets
Load-Interval #1: 30 seconds
30 seconds input rate 0 bits/sec, 0 packets/sec
30 seconds output rate 1617733592 bits/sec, 177333 packets/sec
input rate 0 bps, 0 pps; output rate 1.62 Gbps, 177.33 Kpps
Load-Interval #2: 5 minute (300 seconds)
300 seconds input rate 0 bits/sec, 0 packets/sec
300 seconds output rate 1706876920 bits/sec, 190586 packets/sec
input rate 0 bps, 0 pps; output rate 1.71 Gbps, 190.59 Kpps
RX
0 unicast packets 1060 multicast packets 0 broadcast packets
1060 input packets 67840 bytes
0 jumbo packets 0 storm suppression bytes
0 runts 0 giants 0 CRC 0 no buffer
0 input error 0 short frame 0 overrun 0 underrun 0 ignored
0 watchdog 0 bad etype drop 0 bad proto drop 0 if down drop
0 input with dribble 0 input discard
0 Rx pause
TX
1380971905541 unicast packets 81323042 multicast packets 89019 broadcast packets
1381053317602 output packets 1521254872400979 bytes
0 jumbo packets
0 output error 0 collision 0 deferred 0 late collision
0 lost carrier 0 no carrier 0 babble 0 output discard
0 Tx pause

For destination interface Eth1/23 what happend was there was no output traffic as seen under load.

Let me know if you need more information.

Sajid

[balaji.bandi]

That is ok any device connect not matter, i would like to see 1/23. since you have issue with that, 

Also not provided  as asked for your ACL information.