3

Context :- For network monitoring/packet mirrioring techniques like SPAN and RSPAN.

Why is it mandatory to have a dedicated vlan for RSPAN ? why can't we mirror the packets received in a port and send it directly to a specific destination, why to forward it as vlan only ?

2
  • When you say send it directly to a destination, do you mean send it to a specific IP or send it to a specific interface? Nov 6 '14 at 12:00
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Aug 10 '17 at 1:22
1

When performing RSPAN another tag (the RSPAN VLAN tag) is added to the packet. Please note that this is not an actual encapsulation. You just add a second tag to the packet. The RSPAN Vlan has learning disabled, therefore the packets are flooded inside RSPAN VLAN. At the destination, the RSPAN tag is removed and you have the packet sent by the source unmodified. This is what you want when you mirror a packet. If you would not use a VLAN then your packet would be discarded.

3

Because RSPAN is "Remote Span" right? SPAN is just local on the same switch. With RSAPN You need to configure a vlan because you are 'mirroring' a remote port on a remote switch. In order to pass this traffic to the destination port, on a remote switch, you need to configure a vlan for this purpose.

1
  • 2
    The RSPAN vlan ("outer tag") is to encapsulate the packets that might already be tagged ("inner tag"). Otherwise, tagged traffic would be acted upon like any other traffic at the next-hop switch.
    – Ricky
    Nov 6 '14 at 21:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.