How to capture traffic using VACL

Tweet

VLAN ACL can be used to capture live traffic (same as SPAN)

1. Create Access Map

2. Apply Capture

Cisco_VACL_Capture# conf t
Cisco_VACL_Capture(config)# access-list 150 permit ip any any
Cisco_VACL_Capture(config)#
Cisco_VACL_Capture(config)# vlan access-map VACL_CAP 50
Cisco_VACL_Capture(config-access-map)# match ip address 150
Cisco_VACL_Capture(config-access-map)# action forward capture
Cisco_VACL_Capture(config-access-map)# exit
Cisco_VACL_Capture(config)#
Cisco_VACL_Capture(config)# vlan filter TEST vlan-list 100; 100 is VLAN.

Cisco_VACL_Capture(config)# interface fa0/1; destination port
Cisco_VACL_Capture(config)# switchport capture