SPAN Configuration

Unanswered Question
May 5th, 2008

I have configure my 3750 switch for span. In this switch my IPS 4255, Internet router and Pix firewall is connected.

Below mention is the span configuration

monitor session 1 source interface Gi1/0/1 - 3

monitor session 1 destination interface Gi1/0/5

now the problem is the that IPS capturing traffic twice once while going out and once while coming in.

I wana know how to configure monitor session that it only capture traffic that is coming from Internet. Not traffic that

is originating from inside of the network.

In switch port 1 Internet router is connected, port 2 is for firewall and three is for concentrator.

I m confuse about the span port configuration either Rx or Tx. Right it is both Rx and Tx.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jeremystretch Mon, 05/05/2008 - 02:32

Specify 'rx' on the interface(s) on which you wish to mirror inbound traffic:

monitor session 1 source interface g1/0/1 rx

Rx captures traffic entering the interface, Tx captures traffic leaving the interface.

Actions

This Discussion