Last Updated on August 3, 2021 by Admin 2
Drag the type of port mirroring on the left to its description on the right. Use all types. Each type can be used only once
Switched Port Analyzer (SPAN) source and destination ports must be on the same device. SPAN is limited to monitoring traffic on only the local device and cannot direct traffic to destination ports on a separate device for analysis. The source port can be a physical or virtual Ethernet port, a port channel, or a virtual local area network (VLAN) if VLAN-based SPAN (VSPAN) is being used. The destination port can be a physical or virtual Ethernet port or a port channel. However, the source port and the destination port cannot be the same port.
Remote SPAN (RSPAN) source and destination ports must be on the same local area network (LAN). RSPAN enables you to monitor traffic on a network by capturing and sending traffic from a source port on one device to a destination port on a different device on a nonrouted network.
Encapsulated RSPAN (ERSPAN) source and destination ports can exist in different LANs. ERSPAN enables an administrator to capture and analyze traffic across a routed network. Therefore, ERSPAN can monitor traffic across multiple routers on a network that spans multiple locations.
A VSPAN source port can be a VLAN. All ports in a source VLAN become SPAN source ports. SPAN, RSPAN, and ERSPAN are all capable of using VLANs as sources by implementing VSPAN.