Switched Port ANalyzer (SPAN)- Monitors all traffic, including multicast and BPDUs.- 2 local SPAN source sessions.- 128 sources per session.- 64 destinations per session.Switch(config)# monitor session 1 type localSwitch(config-mon-local)# description SPAN sessionSwitch(config-mon-local)# source interface gi1/1-4 bothSwitch(config-mon-local)# destination interface gi2/1Switch(config-mon-local)# no shutSwitch(config)# monitor session 1 source interface gi1/1-4 bothSwitch(config)# monitor session 1 destination interface gi2/1Remote SPAN (RSPAN)- Uses a Layer 2 VLAN to carry SPAN traffic between switches.- Does not monitor BPDUs.- 2 RSPAN source sessions.- 64 RSPAN destination sessions.- 128 sources per session and 1 RSPAN VLAN.- 64 destinations per session.- Any network device that supports RSPAN VLANs can be an RSPAN intermediate device.- MAC address learning is disabled in the RSPAN VLAN.Switch1(config)# monitor session 1 type rspan-sourceSwitch1(config-mon-rspan-src)# description RSPAN session - sourceSwitch1(config-mon-rspan-src)# source interface gi1/1-4 bothSwitch1(config-mon-rspan-src)# destination remote vlan 666Switch1(config-mon-rspan-src)# no shutSwitch2(config)# monitor session 1 type rspan-destinationSwitch2(config-mon-rspan-dst)# description RSPAN session - destinationSwitch2(config-mon-rspan-dst)# source remote vlan 666Switch2(config-mon-rspan-dst)# destination interface gi2/1Switch2(config-mon-rspan-dst)# no shutSwitch1(config)# monitor session 1 source interface gi1/1-4 bothSwitch1(config)# monitor session 1 destination remote vlan 666Switch2(config)# monitor session 1 source remote vlan 666Switch2(config)# monitor session 1 destination interface gi2/1Encapsulated RSPAN (ERSPAN)- Uses a GRE tunnel to carry traffic between switches.- Adds 50 byte header.- DF bit is set to prevent fragmentation.- ERSPAN ID differentiates from various different ERSPAN source sessions.- Monitors all traffic, including multicast and BPDUs.- 2 ERSPAN source sessions.- 24 ERSPAN destination sessions.- 128 sources per session and 1 IP address.- 64 destinations per session.Switch1(config)# monitor session 1 type erspan-sourceSwitch1(config-mon-erspan-src)# description ERSPAN session - sourceSwitch1(config-mon-erspan-src)# source interface gi1/1-4 bothSwitch1(config-mon-erspan-src)# destinationSwitch1(config-mon-erspan-src-dst)# ip address 10.2.2.2Switch1(config-mon-erspan-src-dst)# erspan-id 111Switch1(config-mon-erspan-src-dst)# origin ip address 10.1.1.1Switch1(config-mon-erspan-src-dst)# ip ttl 5Switch1(config-mon-erspan-src)# no shutSwitch2(config)# monitor session 1 type erspan-destinationSwitch2(config-mon-erspan-dst)# description ERSPAN session - destinationSwitch2(config-mon-erspan-dst)# sourceSwitch2(config-mon-erspan-dst-src)# ip address 10.2.2.2Switch2(config-mon-erspan-dst-src)# erspan-id 111Switch2(config-mon-erspan-dst)# destination interface gi2/1Switch2(config-mon-erspan-dst)# no shutSource trunk VLAN filteringSwitch(config)# monitor session 1 filter vlan 1-5,10Destination trunk VLAN filteringSwitch(config)# interface gi2/1Switch(config-if)# switchportSwitch(config-if)# switchport encapsulation dot1qSwitch(config-if)# switchport mode trunkSwitch(config-if)# switchport trunk allowed vlan 10Destination port permit listsSwitch(config)# monitor permit-listSwitch(config)# monitor permit-list destination interface gi2/2-4Switch# show monitor permit-list