Encapsulated Remote Switched Port Analyzer (ERSPAN) is a traffic mirroring method that enables the mirrored traffic to be encapsulated in Generic Routing Encapsulation (GRE). USM Anywhere supports ERSPAN on its Hyper-V Sensor and VMware Sensor, but it is only available for Cisco Nexus switches, newer Cisco Catalyst 6500s, Cisco Aggregation Services Router (ASR) routers, and other similar Cisco devices.
To enable ERSPAN in your Hyper-V or VMware Sensor
-
Open your virtualization management console and connect to the USM Anywhere Sensor virtual machine (VM).
Alternatively, you can open an SSH session to the sensor VM. When using an SSH session, the default username is sysadmin.
- From the system menu, select Network Configuration and press Enter.
- Click Configure ERSPAN Interface.
- Enter the IP address for this interface.
- Click OK.
- Enter a netmask range for this configuration.
- Click OK.
-
After you receive confirmation that the ERSPAN interface has been enabled, refer to the Configuring ERSPAN section of the vendor website to continue the configuration.