SPAN

abidgorsi · ‎10-30-2008

Is it possible to configure SPAN destination port in a way that system on that port can be accessed from outside as well? By the i am using 3560 with IP services image.

Thanks in advance.

Amit Singh · ‎10-30-2008

You can use the ingress keyword along with the destination port configuration to allow the traffic on to the connected system.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_44_se/configuration/guide/swspan.html#wp1260596

HTH, Please rate if it does.

-amit singh

mbroberson1 · ‎10-30-2008

What we do is attach 2 nics to the host device, this way the host can say be running Wireshark and we access the host through the other nic on the LAN.

HTH,

Brandon

pkaretnikov · ‎10-30-2008

I'd have to agree with Brandon. You generally don't want to capture both the SPAN traffic and your normal traffic. It is MUCH better to keep them separated.

Paul