nerdexam
Cisco

350-601 · Question #337

Refer to the exhibit. An engineer must mirror the traffic on a switch. The engineer locates the server port that requires monitoring on switch1, but the packet sniffer is on switch2. The engineer…

The correct answer is B. monitor erspon origin ip-address 209.165.200.225. To configure an ERSPAN source on switch1 and specify its source IP address for mirrored traffic destined for switch2, the monitor erspan origin ip-address command is required.

Network

Question

Refer to the exhibit. An engineer must mirror the traffic on a switch. The engineer locates the server port that requires monitoring on switch1, but the packet sniffer is on switch2. The engineer must configure the source IP address on switch1. Which command accomplishes this goal?

Exhibit

350-601 question #337 exhibit

Options

  • Amonitor session 10 type erspan-source
  • Bmonitor erspon origin ip-address 209.165.200.225
  • Csource ip 209.165.200.225
  • Dsource interface vbn512

How the community answered

(33 responses)
  • B
    91% (30)
  • C
    6% (2)
  • D
    3% (1)

Why each option

To configure an ERSPAN source on switch1 and specify its source IP address for mirrored traffic destined for switch2, the monitor erspan origin ip-address command is required.

Amonitor session 10 type erspan-source

monitor session 10 type erspan-source is a command to define the type of monitoring session but does not specify the source IP address for the ERSPAN tunnel itself.

Bmonitor erspon origin ip-address 209.165.200.225Correct

The command monitor erspan origin ip-address 209.165.200.225 specifies the source IP address that the ERSPAN encapsulated packets will use when sent from switch1 to switch2, fulfilling the requirement to define the source IP for the mirrored traffic. This command is a crucial part of the ERSPAN source session configuration.

Csource ip 209.165.200.225

source ip is an incomplete or incorrect command for defining the ERSPAN source IP in this context.

Dsource interface vbn512

source interface vbn512 specifies a source interface for a local SPAN, not an IP address for an ERSPAN tunnel, and 'vbn512' is not a standard interface type.

Concept tested: ERSPAN source IP configuration

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/configuration/guide/scg/swspan.html

Topics

#ERSPAN#Traffic Mirroring#Cisco Nexus#Network Monitoring

Community Discussion

No community discussion yet for this question.

Full 350-601 Practice