Remote Span Trouble

Unanswered Question
Dec 26th, 2007

Hello.

I have the following configuration.

switch 1 (3560)

========

monitor session 1 source interface Fa0/5 , Fa0/8 , Fa0/10 , Fa0/12 , Fa0/14 - 15 , Fa0/19

monitor session 1 destination remote vlan 40

monitor session 2 destination interface Fa0/23

monitor session 2 source remote vlan 40

switch 2 (3560)

========

monitor session 1 source interface Fa0/17

monitor session 1 destination remote vlan 40

vlan 40 has been created as vlan of remote span in both switches, and are allowed in the trunking on both sides.

If i put a sniffer in the interface Fa0/23 of the switch 1, i only see the traffic of interface Fa0/17 of the switch 2. I expect to see also the traffic of interfaces Fa0/5 , Fa0/8 , Fa0/10 , Fa0/12 , Fa0/14 - 15 , Fa0/19 of the switch 1.

Thanks in advance

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
s.arunkumar Wed, 12/26/2007 - 20:06

Hi

I think its config mistake.if u would like to see the traffic for int Fa0/5 , Fa0/8 , Fa0/10 , Fa0/12 , Fa0/14 - 15 , Fa0/19 then ur session 1 destination should be towards fa0/23,ie session 1 should be local span.here ur session 1 is mirrored towards the vlan 40 not towards fa0/23.

"monitor session 1 destination interface fa0/23"

Actions

This Discussion