An emergency-management office must mirror a suspect access port to a packet broker. The broker sits across a Layer-3 boundary from the source switch. Which capture method applies?
Select an answer to reveal the explanation.
Short Explanation
Local SPAN is same-switch only; RSPAN rides a special VLAN across L2; ERSPAN wraps the mirror in GRE so it can cross routers. When your packet broker lives on the other side of L3, ERSPAN is the ticket.
Full Explanation
SPAN mirrors locally on one switch. RSPAN carries mirrored frames over a dedicated VLAN across a Layer-2 domain. ERSPAN encapsulates mirrored traffic (GRE) so analyzers can sit across Layer-3 hops. Choosing local SPAN alone fails a remote L3 broker placement; treating RSPAN as routed IP without its L2 remote-VLAN model is incorrect; debug ip packet is not a substitute for SPAN-family capture.