I need advise from folks who have actually done this in a production
I have 3 different sites, each site has 6509-E with Sup720 running
IOS version 12.2(8). At each site, the 6509-E is connected to
a Cisco 3845 for routing between site A, B and C.
I have a Sourefire IDS sensor locating at siteA. I want to use
ERSPAN to monitor traffics for one of the port residing in siteC.
According to cisco, I need ERSPAN to do this. Unfortunately,
I can test this in the lab because I have NO equipments.
The configuration seems easy but I have the following questions
in the example on page 53-19 regarding the IP address:
Are they referring to the IP addresses of the switch? There are many IP addresses
of the VLAN on the switch at each site and also the loopback ip address on the
switch as well. What are they referring to?
Can someone shed some lights on this? Thanks.