SPAN config clarification

Unanswered Question
Oct 16th, 2007

Hi friends,

Just wanted to clarify if this SPAN configuration is possible for sending traffic to IDS.

Server Farm 6500 switch1

-------------------------

monitor session 1 source vlan 1 - 3000

monitor session 1 destination interface Gi8/6 (port which is connected to IDS Swich)

Server Farm 6500 switch2

--------------------------

monitor session 1 source vlan 1 - 3000

monitor session 1 destination interface Gi8/6 (port which is connected to IDS Swich)

IDS Switch

------------

monitor session 1 source interface Gi0/1 - 2 (ports which connects to Gig 8/6 in 6500 Server farm swiches)

monitor session 1 destination interface Gi0/49 (port wich connects to IDS)

Note: Please bear with me for a double posting in both Lan switching and routing and Security-->IPS forums for this issue.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
gautamzone Tue, 10/16/2007 - 11:36

Just wanted to add that the SPAN destination ports are access ports and not trunk ports.

Thanks a lot

Gautam

gautamzone Tue, 10/16/2007 - 15:24

Thanks for the speedy reply. I did come to know that RSPAN VLAN could be a solution.

But is there something you think being wrong in the current configuration?

Actions

This Discussion