How to monitor network traffic through Cisco RSPAN capable switches
Leveraging RSPAN can be helpful in getting monitor traffic from switch to switch or getting monitor traffic into a hypervisor such as VMware or HyperV
Enter configure mode
Set the destination RSPAN VLAN. This should be an unused VLAN. We will use VLAN 400 in the example.
vlan <RSPAN VLAN HERE>
monitor session 1 source interface <source interface>
monitor session 1 source vlan <source VLAN>
monitor session 1 source interface gigabitethernet5/1
monitor session 1 source vlan 1
monitor session 1 source vlan 100
monitor session <session> destination interface <interface>
monitor session 1 destination remote vlan 400
Ensure you save your configuration once you have verified it is configured correctly.
You can reference our VMware or HyperV virtual switch configuration guides to now monitor the VLAN traffic as it is passed to the hypervisor host.