Valid SPAN Sources - CCIE Security Written Exam | Cisco

Valid SPAN Sources

Prev Question

Question

Which three options are valid SPAN sources? (Choose three.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

ABD.

SPAN (Switched Port Analyzer) is a feature that allows the administrator to monitor traffic on a particular interface or a group of interfaces. SPAN copies the incoming and outgoing traffic of the specified source ports and sends the copies to the destination port for analysis or troubleshooting.

The valid SPAN sources are as follows:

A. VLANs: A VLAN is a logical grouping of network devices in a LAN environment. When a VLAN is specified as a SPAN source, all supported interfaces in the VLAN are SPAN sources. This allows an administrator to monitor the traffic on multiple interfaces simultaneously.

B. Fabric port channels connected to the Cisco Nexus 2000 Series Fabric Extender: The Cisco Nexus 2000 Series Fabric Extender provides unified fabric connectivity between Cisco Nexus switches and Cisco UCS (Unified Computing System) servers. If a switch is connected to a Cisco Nexus 2000 Series Fabric Extender using a fabric port channel, the fabric port channel can be specified as a SPAN source.

C. Layer 2 subinterfaces: A subinterface is a logical interface that allows multiple VLANs to share a single physical interface. If a switch interface is configured with subinterfaces, the subinterfaces can be specified as SPAN sources.

D. Satellite ports and host interface port channels on the Cisco Nexus 2000 Series Fabric Extender: A Cisco Nexus 2000 Series Fabric Extender provides satellite ports that can be connected to servers or other network devices. If a switch is connected to a Cisco Nexus 2000 Series Fabric Extender using a host interface port channel, the host interface port channel can be specified as a SPAN source.

E. Layer 3 subinterfaces: A Layer 3 subinterface is similar to a Layer 2 subinterface, but it is configured to support Layer 3 protocols, such as IP. If a switch interface is configured with Layer 3 subinterfaces, the Layer 3 subinterfaces can be specified as SPAN sources.

F. Remote Span Ethernet Ports: A Remote SPAN (RSPAN) configuration allows a network administrator to monitor traffic from a remote switch or multiple switches. The traffic is transported over a dedicated VLAN to a designated RSPAN destination switch. The Ethernet ports that are configured for RSPAN can be specified as SPAN sources.

In conclusion, the valid SPAN sources are VLANs, fabric port channels connected to the Cisco Nexus 2000 Series Fabric Extender, Layer 2 subinterfaces, satellite ports and host interface port channels on the Cisco Nexus 2000 Series Fabric Extender, Layer 3 subinterfaces, and Remote Span Ethernet Ports.