Appendix A – SPAN Port Configuration

HP/Aruba Switches

See: https://community.arubanetworks.com/community-home/digestviewer/viewthread?MID=25100

1. Create the session and assign the local mirroring port (where your IDS Intrusion Detections System is connected):

   mirror session-# port exit-port-# [name name-str]

   "session-#" is a value from 1 to 4.

   Example:

   mirror 1 port 11

2. Assign the monitored ports, vlans or mac addresses to any of the created local port mirroring sessions:

   • interface {port | trunk | mesh} monitor all {in | out | both} mirror {session-# | name-str} [{session-# | name-str}] [{session-# | name-str}] | [{session-# | name-str}] [no-tag-added]

     Example:

     interface 28 monitor all both mirror 1

     OR

   • vlan vid-# monitor all {in | out | both} mirror {session-# | name-str} [{session-# | name-str}] [{session-# | name-str}] [{session-# | name-str}]

     Example:

     vlan 32 monitor all both mirror 1

Cisco Switches

See: https://www.cisco.com/c/en/us/td/docs/switches/metro/me3600x_3800x/software/release/15-3_2_S/configuration/guide/3800x3600xscg/swSPAN.pdf

1. Enter the switch configuration mode:

   configure terminal

2. Create the monitoring session"

   monitor session {session_number} type local

   Example:

   monitor session 1 type local

3. Designate the source port with 'both' for ingress and egress"

   source interface interface_type {list(,) or give range(-) of interfaces} both

   Example:

   source interface gigabitethernet 2/1 both

4. Designate the destination port"

   destination interface interface_type {list(,) or give range(-) of interfaces} both

   Example:

   destination interface gigabitethernet 2/4

5. Enable the SPAN session"

   no shutdown

Complete Example:

Switch# configure terminal

Switch(config)# monitor session 1 type local

Switch(config-mon-local)# source interface gigabitethernet 2/1

Switch(config-mon-local)# destination interface gigabitethernet 2/4

Switch(config-mon-local)# no shutdown

Juniper Switches

See: https://www.juniper.net/documentation/us/en/software/junos/network-mgmt/topics/topic-map/port-mirroring-and-analyzers-configuring.html