Remote SPAN (monitor session)

cindylee27 · ‎04-02-2008

Hi Experts,

I would like to set up monitor session from one destination which on 2950 Switch A.

How can I configure my Source Monitor Session at different 2950 switch but connected to the same Distribution 3750 switch?

Thanks.

Danilo Dy · ‎04-02-2008

Hi,

Try RSPAN

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.1_19_ea1/configuration/guide/swspan.html

http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_19_ea1/configuration/guide/swspan.html

Take note of the switch that do NOT support SPAN/RSPAN http://www.cisco.com/warp/public/78/VOIP.html#swca

If you can post the diagram of the connectivity showing the switch connections and the source and destination ports, that would be better.

Regards,

Dandy

david-flores · ‎04-04-2008

Hi, I tried implementing rspan in my network that has 2 6509 switches, on 6509A, I put the following:

monitor session 1 Source VLan 10

monitor session 1 destination remote vlan 99

I just created remote span vlan99 for this only. I am trunking to 6509B, and I added this command

monitor session 1 source remote vlan 99

monitor session 1 destination interface f1/1

F1/1 is where my IDS sits.

However, the commands that I entered on 6509A caused my network monitor server(solarwinds) to lose ping connectivity to randoms switches in my network management vlan interfaces. The monitor server does happen to sit in vlan 10.

Any ideas why this may happen? FYI, I do use default vlan1 for management of all my switches, we have approx 100.

Thanks.