SwitchReference/CiscoSystems

Cisco Switch Reference

Cisco calls their port analyzer/monitor feature SPAN (Switched Port ANalyzer). The document Configuring the Catalyst Switched Port Analyzer (SPAN) Feature describes which models support SPAN, its configuration, and performance impact. Also included is a FAQ. If you are planning on buying one of these switches, make sure that the product that you are buying supports 100Mbits, because some of the products listed below (e.g. Cisco Catalyst 1900) supports only 10BaseT on their switch ports.

For additional information, check Port Monitoring on Cisco's web site.

A company named NetFort offers SPAN Port Configurator, a free SPAN port configuration tool for Windows SPAN, that gives you an easy way to configure SPAN ports on Cisco switches quickly and remotely using a point-and-click interface.

Model: 1900 and 2820 series
Monitor: Yes - no VLANs, no trunks. Catalyst 1900 and Catalyst 2820 Series command reference guide
Performance: Unknown

Model: 2900XL and 3500XL series
Monitor: Ports, VLANs. No trunks. SPAN on the Catalyst 2900XL/3500XL Switches
Performance: All packets are forwarded to the monitoring port. Slowdown may occur. Catalyst 2900XL/3500XL Series

Catalyst 2900 XL and Catalyst 3500 XL Software Configuration Guide, 12.0(5)WC4 and 12.0(5)WC5, "Configuring SPAN"

Model: 2948G-L3, 4908G-L3
Monitor: Nothing. SPAN isn't supported. These are routers in disguise. SPAN on the Catalyst 2948G-L3 and 4908G-L3 (which says "SPAN isn't supported")
Performance: Unknown

Model: 2940, 2950, 2955, 2970, 3550, 3560 and 3750
Monitor: Ports, VLANs, remote ports (2950+). SPAN on the Catalyst 2940, 2950, 2955, 2970, 3550, 3560 and 3750 Series Switches
Performance: Unknown

Configuring SPAN and RSPAN on Catalyst 2950
Configuring SPAN and RSPAN on Catalyst 3550

Model: 3900, 3920 (TokenRing)
Monitor: Ports. Monitoring Port Traffic (3900), Monitoring Port Traffic (3920)
Performance: Unknown

Model: 4x00, 5x00, 6x00
Monitor: Ports, VLANs, trunks, remote ports. SPAN on the Catalyst 4500/4000, 5500/5000, and 6500/6000 Series Switches Running CatOS, SPAN on the Catalyst 4500/4000 and Catalyst 6500/6000 Series Switches Running Cisco IOS System Software
Performance: Monitored packets are dropped during congestion. Catalyst 4500/4000 Series, Catalyst 5500/5000 and 6500/6000 Series

Configuring SPAN on Catalyst 4000 Running Integrated Cisco IOS, Configuring SPAN and RSPAN on Catalyst 4000 Running Hybrid Mode
Configuring SPAN on Catalyst 5000
Configuring SPAN and RSPAN on Catalyst 6000 Running Hybrid Mode

Model: 8500
Monitor: Very limited SPAN capabilities. SPAN on the Catalyst 8500
Performance: Unknown

Model: Routers running Cisco IOS v12.3(4)T or later, 12.2(25)S or later (additional restrictions apply)
Monitor: The IP Traffic Export feature allows users to configure their router to export IP packets that are received on multiple, simultaneous WAN or LAN interfaces. The unaltered IP packets are exported on a single LAN or VLAN interface, thereby, easing deployment of protocol analyzers and monitoring devices.
Performance: When IP traffic export is enabled, a delay is incurred on the outbound interface when packets are captured and transmitted across the interface. Performance delays increase with the increased number of interfaces that are monitored and the increased number of destination hosts.


Imported from https://wiki.wireshark.org/SwitchReference/CiscoSystems on 2020-08-11 23:26:05 UTC