350-401 · Question #754
Refer to the exhibit. Which command filters the ERSPAN session packets only to interface GigabitEthernet1?
The correct answer is C. filter access-group 10. To filter ERSPAN session packets to a specific interface or criteria, an access control list must be defined and then applied using the filter access-group command within the monitor session configuration.
Question
Exhibits
Options
- Asource ip 10.10.10.1
- Bsource interface gigabitethernet1 ip 10.10.10.1
- Cfilter access-group 10
- Ddestination ip 10.10.10.1
How the community answered
(35 responses)- A14% (5)
- B3% (1)
- C77% (27)
- D6% (2)
Why each option
To filter ERSPAN session packets to a specific interface or criteria, an access control list must be defined and then applied using the `filter access-group` command within the monitor session configuration.
`source ip` is a command used to specify the source IP for ERSPAN encapsulation, not to filter the monitored traffic based on an interface.
The syntax `source interface gigabitethernet1 ip 10.10.10.1` is not a valid command for filtering an ERSPAN session to a specific interface.
The `filter access-group` command is used within a Cisco monitor session configuration to apply an access control list (ACL) that specifies which packets should be mirrored to the ERSPAN destination, thereby enabling filtering by interface or other criteria defined in the ACL.
`destination ip` is typically used to define the ERSPAN tunnel destination or to specify monitored traffic by destination IP, not to filter by source interface.
Concept tested: ERSPAN session filtering with ACLs
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/config/span.html#wp1080315
Topics
Community Discussion
No community discussion yet for this question.

