nerdexam
Cisco

350-401 · Question #754

Refer to the exhibit. Which command filters the ERSPAN session packets only to interface GigabitEthernet1?

The correct answer is C. filter access-group 10. To filter ERSPAN session packets to a specific interface or criteria, an access control list must be defined and then applied using the filter access-group command within the monitor session configuration.

Submitted by salim_om· Mar 6, 2026Network Assurance

Question

Refer to the exhibit. Which command filters the ERSPAN session packets only to interface GigabitEthernet1?

Exhibits

350-401 question #754 exhibit 1
350-401 question #754 exhibit 2

Options

  • Asource ip 10.10.10.1
  • Bsource interface gigabitethernet1 ip 10.10.10.1
  • Cfilter access-group 10
  • Ddestination ip 10.10.10.1

How the community answered

(35 responses)
  • A
    14% (5)
  • B
    3% (1)
  • C
    77% (27)
  • D
    6% (2)

Why each option

To filter ERSPAN session packets to a specific interface or criteria, an access control list must be defined and then applied using the `filter access-group` command within the monitor session configuration.

Asource ip 10.10.10.1

`source ip` is a command used to specify the source IP for ERSPAN encapsulation, not to filter the monitored traffic based on an interface.

Bsource interface gigabitethernet1 ip 10.10.10.1

The syntax `source interface gigabitethernet1 ip 10.10.10.1` is not a valid command for filtering an ERSPAN session to a specific interface.

Cfilter access-group 10Correct

The `filter access-group` command is used within a Cisco monitor session configuration to apply an access control list (ACL) that specifies which packets should be mirrored to the ERSPAN destination, thereby enabling filtering by interface or other criteria defined in the ACL.

Ddestination ip 10.10.10.1

`destination ip` is typically used to define the ERSPAN tunnel destination or to specify monitored traffic by destination IP, not to filter by source interface.

Concept tested: ERSPAN session filtering with ACLs

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/config/span.html#wp1080315

Topics

#ERSPAN#traffic mirroring#access-group filter#monitoring

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice