hardMultiple ChoiceObjective-mapped
300-410 Practice Question: Is troubleshooting an ERSPAN configuration where…
A network engineer is troubleshooting an ERSPAN configuration where traffic from a source router is being sent to a remote monitoring server. The engineer configures an ERSPAN source session on Router A to capture traffic on GigabitEthernet0/0 and send it to the IP address 10.1.1.100. The monitoring server does not receive any packets. The engineer verifies that IP connectivity exists between Router A and the server. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The ERSPAN session is missing a tunnel interface configuration.
ERSPAN requires a tunnel interface to encapsulate the monitored traffic. Without configuring a tunnel interface, the ERSPAN session cannot encapsulate the packets for transport to the remote destination.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The ERSPAN session is missing a tunnel interface configuration.
Why this is correct
Correct because ERSPAN encapsulates monitored traffic in GRE tunnels; a tunnel interface must be configured and referenced in the monitor session.
- ✗
The monitoring server is not listening on the correct UDP port.
Why it's wrong here
Incorrect because ERSPAN uses GRE encapsulation, not UDP; the server must be able to decapsulate GRE packets.
- ✗
The source interface is not in the same subnet as the destination IP.
Why it's wrong here
Incorrect because IP connectivity is verified; the issue is not about subnet matching.
- ✗
The ERSPAN session is configured with the wrong source IP address.
Why it's wrong here
Incorrect because the source IP is used for the tunnel; while possible, the primary missing element is the tunnel interface itself.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.