Hi friends,
Just wanted to clarify if this SPAN configuration is possible for sending traffic to IDS.
Server Farm 6500 switch1
-------------------------
monitor session 1 source vlan 1 - 3000
monitor session 1 destination interface Gi8/6 (port which is connected to IDS Swich)
Server Farm 6500 switch2
--------------------------
monitor session 1 source vlan 1 - 3000
monitor session 1 destination interface Gi8/6 (port which is connected to IDS Swich)
IDS Switch
------------
monitor session 1 source interface Gi0/1 - 2 (ports which connects to Gig 8/6 in 6500 Server farm swiches)
monitor session 1 destination interface Gi0/49 (port wich connects to IDS)
Note: Please bear with me for a double posting in both Lan switching and routing and Security-->IPS forums for this issue.
Thanks a lot
Gautam