Cisco WS-C2960S-24PD-L Software Guide - Page 210

Configuring SPAN Chapter 7 Configuring the Switch Ports To disable port security aging for all secure addresses on a port, use the no port security aging time interface configuration command. This example shows how to set the port security aging time to 2 hours on port 1. Switch(config)#interface fa0/1 Switch(config-if)#port security aging time 120 Configuring SPAN You can use Switch Port Analyzer (SPAN) to monitor traffic on a given port by forwarding incoming and outgoing traffic on the port to another port in the same VLAN. A SPAN port cannot monitor ports in a different VLAN, and a SPAN port must be a static-access port. You can define any number of ports as SPAN ports, and any combination of ports can be monitored. For the restrictions that apply to SPAN ports, see the "Avoiding Configuration Conflicts" section on page 9-7. Enabling SPAN Beginning in privileged EXEC mode, follow these steps to enable SPAN: Step 1 Step 2 Command configure terminal interface interface Step 3 Step 4 Step 5 port monitor interface end show running-config Purpose Enter global configuration mode. Enter interface configuration mode, and enter the port that acts as the monitor port. Enable port monitoring on the port. Return to privileged EXEC mode. Verify your entries. Disabling SPAN Beginning in privileged EXEC mode, follow these steps to disable SPAN: Step 1 Step 2 Command configure terminal interface interface Step 3 Step 4 Step 5 no port monitor interface end show running-config Purpose Enter global configuration mode. Enter interface configuration mode, and enter the port number of the monitor port. Disable port monitoring on the port. Return to privileged EXEC mode. Verify your entries. 7-12 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 78-6511-08