cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
416
Views
0
Helpful
3
Replies

SPAN config clarification

gautamzone
Level 1
Level 1

Hi friends,

Just wanted to clarify if this SPAN configuration is possible for sending traffic to IDS.

Server Farm 6500 switch1

-------------------------

monitor session 1 source vlan 1 - 3000

monitor session 1 destination interface Gi8/6 (port which is connected to IDS Swich)

Server Farm 6500 switch2

--------------------------

monitor session 1 source vlan 1 - 3000

monitor session 1 destination interface Gi8/6 (port which is connected to IDS Swich)

IDS Switch

------------

monitor session 1 source interface Gi0/1 - 2 (ports which connects to Gig 8/6 in 6500 Server farm swiches)

monitor session 1 destination interface Gi0/49 (port wich connects to IDS)

Note: Please bear with me for a double posting in both Lan switching and routing and Security-->IPS forums for this issue.

3 Replies 3

gautamzone
Level 1
Level 1

Just wanted to add that the SPAN destination ports are access ports and not trunk ports.

Thanks a lot

Gautam

have you considered RSPAN (=remote)?

Thanks for the speedy reply. I did come to know that RSPAN VLAN could be a solution.

But is there something you think being wrong in the current configuration?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: