Rspan on ittechnetworkk https://ittechnetworkk.co.uk/tags/rspan/ Recent content in Rspan on ittechnetworkk Hugo en-US Fri, 15 May 2026 03:53:01 +0200 SPAN - RSPAN - ERSPAN Configuration https://ittechnetworkk.co.uk/posts/span-rspan-erspan/ Fri, 15 May 2026 03:53:01 +0200 https://ittechnetworkk.co.uk/posts/span-rspan-erspan/ <p>Hi everyone! In this article, I will briefly explain <strong>SPAN</strong>, <strong>RSPAN</strong>, and <strong>ERSPAN</strong> technologies and demonstrate how to configure each of them through a simple lab setup.</p> <hr> <h2 id="overview">Overview</h2> <p>SPAN, RSPAN, and ERSPAN are Cisco technologies used for capturing and forwarding network traffic for analysis. Here is a quick comparison:</p> <table> <thead> <tr> <th>Feature</th> <th>SPAN</th> <th>RSPAN</th> <th>ERSPAN</th> </tr> </thead> <tbody> <tr> <td><strong>Scope</strong></td> <td>Single switch</td> <td>Multiple switches (Layer 2)</td> <td>Any IP-routed network (Layer 3)</td> </tr> <tr> <td><strong>Transport</strong></td> <td>Local port mirroring</td> <td>Dedicated VLAN over trunks</td> <td>GRE encapsulation over IP</td> </tr> <tr> <td><strong>Use Case</strong></td> <td>Local troubleshooting</td> <td>Campus-wide monitoring</td> <td>Cross-site / WAN / cloud monitoring</td> </tr> </tbody> </table> <ul> <li><strong>SPAN (Switched Port Analyzer)</strong> — A local mirroring technique that captures traffic from one or more ports on a switch and sends a copy to a locally connected traffic analyzer tool.</li> <li><strong>RSPAN (Remote Switched Port Analyzer)</strong> — Extends SPAN by allowing traffic from a remote switch to be mirrored and forwarded across the network to a monitoring device through Layer 2 switching infrastructure.</li> <li><strong>ERSPAN (Encapsulated Remote Switched Port Analyzer)</strong> — Takes it a step further by capturing traffic from a remote device and sending it across a Layer 3 network using GRE encapsulation to a network analyzer, which can also be located remotely.</li> </ul> <hr> <h2 id="1-span--local-port-mirroring">1. SPAN — Local Port Mirroring</h2> <p><strong>Scope:</strong> Single switch.</p>