exam questions

Exam 350-601 All Questions

View all questions & answers for the 350-601 exam

Exam 350-601 topic 1 question 3 discussion

Actual exam question from Cisco's 350-601
Question #: 3
Topic #: 1
[All 350-601 Questions]

Refer to the exhibit.

Which statement about the ERSPAN configuration in this environment is true?

  • A. The session number of the source of ERSPAN spanned traffic must have a session ID of 47 for the traffic analyzer to receive the traffic.
  • B. Host B is the source of ERSPAN spanned traffic and host A is the traffic analyzer.
  • C. The session number of the source of ERSPAN spanned traffic must have a session ID of 48 for the traffic analyzer to receive the traffic.
  • D. Host A is the source of ERSPAN spanned traffic and host B is the traffic analyzer.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
The Erspan-id needs to match between the switches. The ג€monitor sessionג€ ID is only locally significant and does not need to match on each device.
Reference:
https://www.letsconfig.com/how-to-configure-erspan-on-cisco-nexus-switches/

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
konoda
1 day, 10 hours ago
Selected Answer: D
D is correct The following factors are applicable while using ERSPAN as a local SPAN: Both sessions have the same ERSPAN ID. Both sessions have the same IP address. This IP address is the router’s own IP address; that is, the loopback IP address or the IP address configured on any port. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe-16/lanswitch-xe-16-book/lnsw-conf-erspan.html refer site: https://docs.google.com/document/d/1nCz7jJ9Mu-J_LwfwUmeoPjzrNRZgeyfaeAACSzrBa9k
upvoted 1 times
...
GuyThatTakesDumps
3 months, 2 weeks ago
Selected Answer: D
D is correct
upvoted 2 times
...
Toa
11 months ago
D is correct The following factors are applicable while using ERSPAN as a local SPAN: Both sessions have the same ERSPAN ID. Both sessions have the same IP address. This IP address is the router’s own IP address; that is, the loopback IP address or the IP address configured on any port. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe-16/lanswitch-xe-16-book/lnsw-conf-erspan.html
upvoted 3 times
...
roky
11 months, 1 week ago
Assuming that session-id is the same and then set as the view's command, packets captured by host A are sent to Eth 2/33, passing through L2 connection. In other words, host A will be a "source" and host B will be a port analyzer (in cisco doc's term it named "Destination"). However, we can see the following instructions in Switch A. "monitor session 48 type erspan-source" And Switch B has the following instructions. "monitor session 47 type erspan-destination" That is, because the session-id value is not correct, Host B cannot obtain the captured packet from Host A. Switch A may be possible by changing session-id to 47. For this reason, I think the answer is A, not D.
upvoted 2 times
roky
11 months, 1 week ago
refer site 1. configure ERSPAN https://www.letsconfig.com/how-to-configure-erspan-on-cisco-nexus-switches/ 2. in ERSPAN, if session-id is different between them? https://forums.extrahop.com/t/erspan-session-id/2939 3. cisco ERSPAN docs https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus7000/sw/system-management/guide/b_Cisco_Nexus_7000_Series_NX-OS_System_Management_Configuration_Guide-RI/configuring_erspan.html?referring_site=RE&pos=1&page=https://www.cisco.com/c/ko_kr/support/docs/switches/nexus-7000-series-switches/113480-erspan-nexus-7k-00.html
upvoted 1 times
...
RTL_dude
9 months, 3 weeks ago
Erspan-id needs to match between the switches, “monitor session” is only locally significant.
upvoted 4 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago