Switched Port Analyzer is mainly used to provide network data flow for some network analyzer.
It can mirror data from several source ports to one monitoring port in a VLAN or from several VLANs to a proactive port. All data streams flowing over port 5 of the source port are mirrored to port 10 of the monitoring port, and the data analysis device receives all data streams from port 5 through the monitoring port.
It is noteworthy that the source port and the mirror port must be located on the same switch (except for Catalyst 6000 series switches); and SPAN does not affect the data exchange of the source port, it only sends copies of the packets sent or received by the source port to the monitoring port.
During the SPAN task, the user can specify the type of data stream that needs to be monitored through parameter control. One or more terminals, ports and one or more VLANs can also be used as source ports, and the one-way or two-way data streams sent or received from these ports can be transmitted to the monitoring ports.
In Catalyst 4006 switches, up to six one-way SPAN tasks can be configured: two input data stream monitoring and four output data stream monitoring. A two-way SPAN task actually consists of one-way input and one-way output. Moreover, not only the two-tier switching port can be used as the source port, but also the three-tier routing port on Catalyst 4006 can be set as the source port.
SPAN tasks will not affect the normal operation of switches. When a SPAN task is established, the task will be activated or inactive depending on the switch's different state or operation, and the system will log it. The current status of SPAN can be displayed by the "show monitoring ession" command.
If a system restart occurs, the SPAN task will be inactive until the destination port initialization is completed. The destination port (monitoring port) can be any switching or routing port on the switch. When a destination port is activated, any packets sent to that port that are not related to the SPAN task will be discarded.
A destination port can only be in one SPAN task. When a port is configured as the destination port, it can no longer be the source port, and the redundant link port can not be the destination port of SPAN. In particular, if a Trunk port is configured to be the destination port of the switch port analyzer, its Trunk function will automatically stop.
The source port can also be called the monitored port. In a SPAN task, there may be one or more source ports, and they can be set as input direction, output direction or bidirectional according to user's needs. However, in any case, in a SPAN task, the monitored direction of all source ports must be the same.
The VLAN on the Catalyst 4006 switch can also be set as a source port as a whole, which means that all ports in the designated VLAN are the source ports in the current SPAN task.
Trunk ports can be set as source ports separately or together with non-Trunk ports, but it should be noted that data encapsulation formats from Trunk ports for different VLANs will not be recognized at the monitoring ports. In other words, packets received at the monitoring ports will not be able to identify which VLAN they are from.
SHENZHEN OPTFOCUS TECHNOLOGY CO., Ltd. has been focusing on optical communication for more than ten years. Professional problems are handed over to professionals. Welcome to call at +86-19925421817 for consultation.