SPAN Configuration

Unanswered Question
May 5th, 2008
User Badges:

I have configure my 3750 switch for span. In this switch my IPS 4255, Internet router and Pix firewall is connected.

Below mention is the span configuration

monitor session 1 source interface Gi1/0/1 - 3

monitor session 1 destination interface Gi1/0/5

now the problem is the that IPS capturing traffic twice once while going out and once while coming in.

I wana know how to configure monitor session that it only capture traffic that is coming from Internet. Not traffic that

is originating from inside of the network.

In switch port 1 Internet router is connected, port 2 is for firewall and three is for concentrator.

I m confuse about the span port configuration either Rx or Tx. Right it is both Rx and Tx.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jeremystretch Mon, 05/05/2008 - 02:32
User Badges:

Specify 'rx' on the interface(s) on which you wish to mirror inbound traffic:

monitor session 1 source interface g1/0/1 rx

Rx captures traffic entering the interface, Tx captures traffic leaving the interface.


This Discussion