nerdexam
Cisco

350-601 · Question #293

Refer to the exhibit. An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B. Which configuration must be implemented to monitor and export traffic to Network…

The correct answer is B. SW-1(config)# monitor session 5 type erspan-source. Since traffic must be exported to a remote Network Analyzer (implying it crosses a Layer 3 boundary), ERSPAN (Encapsulated Remote SPAN) is required - standard local SPAN cannot forward mirrored traffic across routed networks. The switch performing the capture is the ERSPAN…

Network

Question

Refer to the exhibit. An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B. Which configuration must be implemented to monitor and export traffic to Network Analyzer?

Exhibit

350-601 question #293 exhibit

Options

  • ASW-1(config)# monitor session 5
  • BSW-1(config)# monitor session 5 type erspan-source
  • CSW-1(config)# monitor session 5
  • DSW-1(config)# monitor session 5 type erspan

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    79% (22)
  • C
    4% (1)
  • D
    11% (3)

Explanation

Since traffic must be exported to a remote Network Analyzer (implying it crosses a Layer 3 boundary), ERSPAN (Encapsulated Remote SPAN) is required - standard local SPAN cannot forward mirrored traffic across routed networks. The switch performing the capture is the ERSPAN source, so the session type must be 'erspan-source'. This encapsulates the mirrored frames in GRE and forwards them to the remote analyzer's IP address. Options A and C ('monitor session 5' with no type) configure a standard local SPAN session, which cannot reach a remote destination. Option D uses the invalid type keyword 'erspan' - the correct Nexus syntax requires either 'erspan-source' (capturing switch) or 'erspan-destination' (receiving switch), not the generic 'erspan'.

Topics

#Network Monitoring#ERSPAN#Cisco Switches#Traffic Analysis

Community Discussion

No community discussion yet for this question.

Full 350-601 Practice