Home > SPAN Questions

SPAN Questions

November 18th, 2019 in SWITCH 300-115 Go to comments

Question 1


We can add the “monitor session 1 filter vlan 10” command to limit monitored trafic from VLAN 10 only.

Question 2


The network engineer is connecting to the Distribution switch but he wants to monitor an access switch -> remote SPAN must be used. An example of configuring remote SPAN which uses vlan 40 is shown below:

Access-Switch(config)# monitor session 1 source interface FastEthernet 0/1
Access-Switch(config)# monitor session 1 destination remote vlan 40
Distribution-Switch(config)#monitor session 2 source remote vlan 40
Distribution-Switch(config)# monitor session 2 destination interface FastEthernet 0/5

Question 3


This command limits the monitored trafic on VLAN 1 to 8, 39, 52 only

Question 4


From the output we see the status of gi0/12 is “monitoring”. It means this port is currently the destination of a SPAN session.

Question 5


This is how to configure Remote SPAN (RSPAN) feature on two switches. Traffic on FastEthernet0/1 of Switch 1 will be sent to Fa0/10 of Switch2 via VLAN 40.

+ Configure on both switches
Switch1,2(config)#vlan 40
+ Configure on Switch1
Switch1(config)# monitor session 1 source interface FastEthernet 0/1
Switch1(config)# monitor session 1 destination remote vlan 40
+ Configure on Switch2
Switch2(config)#monitor session 5 source remote vlan 40
Switch2(config)# monitor session 5 destination interface FastEthernet 0/10

So without the command “remote-span” on both switches, RSPAN cannot works properly.

Question 6


The first command points out the source interface and the direction to be monitored, which is Gi0/4 and inbound traffic (rx) in this case. The second command tells our device to monitor only VLAN 3 running on Gi0/4 (notice that Gi0/4 is a trunk link). The last command requests monitored traffic to be sent to the destination port Gi0/5.

Question 7


A source port can be monitored by some SPAN sessions but a destination port can be used for one session only. A destination port or a reflector port does not participate in STP while its SPAN session is active.

For more limitations of configuring SPAN please visit this link: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/system_management/configuration/guide/sm_nx_os_cg/sm_14span.html#wp1239658

Question 8


From the outputs we learn that the SPAN session 1 is incomplete because only source port is configured:

monitor session 1 source remote vlan 50

-> It needs to specify the destination port

while SPAN session 2 is configured correctly with source and destination ports:

monitor session 2 source interface fa0/14 (both)
monitor session 2 destination interface fa0/15

Question 9

Question 10

Question 11

Comment pages
1 2 768
  1. latinman37
    March 13th, 2019

    I took the switch 300-115 exam last saturday but unfortunately I did not pass. please send the latest dumps to latinman37 at gmail dot com

  2. oK
    April 13th, 2019

    Thought you can mix source interface and VLANs, as tested in packet tracer. But you cannot. For those having the same concerns:


    Traffic monitoring in a SPAN session has these restrictions:

    Sources can be ports or VLANs, but you cannot mix source ports and source VLANs in the same session.
    The switch supports up to two local SPAN or RSPAN source sessions.
    – You can run both a local SPAN and an RSPAN source session in the same switch or switch stack. The switch or switch stack supports a total of 66 source and RSPAN destination sessions.

    – You can configure two separate SPAN or RSPAN source sessions with separate or overlapping sets of SPAN source ports and VLANs. Both switched and routed ports can be configured as SPAN sources and destinations.

  3. Anonymous
    June 16th, 2019

    Q 10

    Based on https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/swspan.html
    Local SPAN supports a SPAN session entirely within one switch; all source ports or source VLANs and destination ports are in the same switch or switch stack

    RSPAN supports source ports, source VLANs, and destination ports on different switches (or different switch stacks), enabling remote monitoring of multiple switches across your network.

    The difference is local monitoring vs. remote monitoring, hence A. is a better answer

  4. Easy
    November 11th, 2019

    Which two commands configure SPAN to monitor outgoing traffic across multiple interfaces? (Choose two)

    A. monitor session 1 destination interface gigabitethernet1/0/2 rx
    B. monitor session 1 source vlan 10 – 20 tx
    C. monitor session 1 destination interface gigabitethernet1/0/2
    D. monitor session 1 source interface gigabitethernet1/0/1 tx E. monitor session 1 source interface gigabitethernet1/0/1 rx

    Answer: B C

    Do you guys think this is the right answer?

  5. John2020
    December 31st, 2019

    Can someone please explain question 2 ?

  6. polarbear
    February 18th, 2020

    We are filtering those VLANs aren’t we? Shoud it be NOT replicated?
    E. Traffic from VLANs 1 to 8, 39, and 52 is NOT replicated to the SPAN destination port?

Comment pages
1 2 768
  1. No trackbacks yet.