350-601 · Question #293
Refer to the exhibit. An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B. Which configuration must be implemented to monitor and export traffic to Network…
The correct answer is B. SW-1(config)# monitor session 5 type erspan-source. Since traffic must be exported to a remote Network Analyzer (implying it crosses a Layer 3 boundary), ERSPAN (Encapsulated Remote SPAN) is required - standard local SPAN cannot forward mirrored traffic across routed networks. The switch performing the capture is the ERSPAN…
Question
Refer to the exhibit. An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B. Which configuration must be implemented to monitor and export traffic to Network Analyzer?
Exhibit
Options
- ASW-1(config)# monitor session 5
- BSW-1(config)# monitor session 5 type erspan-source
- CSW-1(config)# monitor session 5
- DSW-1(config)# monitor session 5 type erspan
How the community answered
(28 responses)- A7% (2)
- B79% (22)
- C4% (1)
- D11% (3)
Explanation
Since traffic must be exported to a remote Network Analyzer (implying it crosses a Layer 3 boundary), ERSPAN (Encapsulated Remote SPAN) is required - standard local SPAN cannot forward mirrored traffic across routed networks. The switch performing the capture is the ERSPAN source, so the session type must be 'erspan-source'. This encapsulates the mirrored frames in GRE and forwards them to the remote analyzer's IP address. Options A and C ('monitor session 5' with no type) configure a standard local SPAN session, which cannot reach a remote destination. Option D uses the invalid type keyword 'erspan' - the correct Nexus syntax requires either 'erspan-source' (capturing switch) or 'erspan-destination' (receiving switch), not the generic 'erspan'.
Topics
Community Discussion
No community discussion yet for this question.
