SPAN session on CE500

newcom_mis · ‎11-09-2007

I have problem when i tried to configure SPAN on my CE500, i followed this steps on this link http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#Cat500

but when i try to configure the port with diagnostic role, the port lost the connection and i can't ping the ip of the sniffer server, but when i changed the role i can ping it, but i can't capture the traffic, the port destination is 21 an the source is 22 because the 22 my ASA is connected directrly to the 22 port. the default traffic is vlan1

pls need help

royalblues · ‎11-09-2007

This is the normal behavior of the destination port in SPAN session that the usual traffic will be blocked on the dest port while you get the data from the source port. If you put a sniffer on this port (like Ethereal) you can see all the traffic which is sent or received by the source port.

When span is active, incoming traffic is disabled. The port does not transmit any traffic except that required for the SPAN session.

It does not participate in spanning tree while the SPAN session is active.

When it is a destination port, it does not participate in any of the Layer 2 protocols (STP, VTP, CDP, DTP, PagP).

No address learning occurs on the destination port.

one option is to have two NIC cards in your system so that one can be configured as the destination SPAN port and the other can be used for establishing connectivity to it.

HTH

Narayan