SPAN question

Unanswered Question

I currently am using an IPS application where the inside interface of my ASA is directly connect to the IPS device to allow the monitoring of all traffic entering the ASA.

I now have another application that will also need to see all traffic entering the ASA.

I have a 4507R it is possible to have two monitoring sessions that have the same source interface but different destination interfaces? If not, what is the best way to have two applications monitor a since source.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jagdeep Gambhir Wed, 08/22/2007 - 04:38
User Badges:
  • Red, 2250 points or more

Is possible with RSPAN only.

Only one destination port is allowed per SPAN session, and the same port cannot be a destination port for multiple SPAN sessions.

Each RSPAN destination session has one or more destination interfaces for each RSPAN VLAN that they support.

RSPAN destination sessions are limited to two, or one if a local SPAN or a source RSPAN session is configured on the same switch.




This Discussion