Remote Span Trouble

Unanswered Question
Dec 26th, 2007
User Badges:

Hello.

I have the following configuration.


switch 1 (3560)

========

monitor session 1 source interface Fa0/5 , Fa0/8 , Fa0/10 , Fa0/12 , Fa0/14 - 15 , Fa0/19

monitor session 1 destination remote vlan 40

monitor session 2 destination interface Fa0/23

monitor session 2 source remote vlan 40


switch 2 (3560)

========

monitor session 1 source interface Fa0/17

monitor session 1 destination remote vlan 40


vlan 40 has been created as vlan of remote span in both switches, and are allowed in the trunking on both sides.


If i put a sniffer in the interface Fa0/23 of the switch 1, i only see the traffic of interface Fa0/17 of the switch 2. I expect to see also the traffic of interfaces Fa0/5 , Fa0/8 , Fa0/10 , Fa0/12 , Fa0/14 - 15 , Fa0/19 of the switch 1.


Thanks in advance


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
s.arunkumar Wed, 12/26/2007 - 20:06
User Badges:
  • Bronze, 100 points or more

Hi

I think its config mistake.if u would like to see the traffic for int Fa0/5 , Fa0/8 , Fa0/10 , Fa0/12 , Fa0/14 - 15 , Fa0/19 then ur session 1 destination should be towards fa0/23,ie session 1 should be local span.here ur session 1 is mirrored towards the vlan 40 not towards fa0/23.


"monitor session 1 destination interface fa0/23"

Actions

This Discussion