SPAN session, need to comminicate with device on Destination port

Unanswered Question
Nov 19th, 2008
User Badges:

I have several remote sites using 1861 routers with an 8 port PoE integrated switch module.


We need to monitor traffic on one port and send the monitored traffic to a second port.


So my monitor session is set up:

monitor session 1 source interface Fa0/1/0

monitor session 1 destination interface Fa0/1/1


The problem is when I configure the monitor session, I loose communication with the device in the destination port.


Is there any way for me to communicate normally with the device on the destination port and still monitor the device on the source port?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (4 ratings)
Loading.
Sebastian Helmer Wed, 11/19/2008 - 12:03
User Badges:
  • Silver, 250 points or more

Sorry I see no chance, you can only use the destination port for a monitor.


abstract of a design guide:

"You must dedicate the destination port for SPAN use"


Sebastian

John Blakley Wed, 11/19/2008 - 12:09
User Badges:
  • Purple, 4500 points or more

This is correct. Unfortunately, you can't use the destination port as a normal workstation any longer; it will only be able to "listen" to traffic.


--John

wilson_1234_2 Wed, 11/19/2008 - 14:02
User Badges:

We have the same setup using a Catalyst 2950 switch and it works:


monitor session 1 source interface Fa0/5

monitor session 1 destination interface Fa0/6 ingress vlan 1


But on the 1861, I do not have the "ingress" option when configuring the destination.

ropethic Wed, 11/19/2008 - 12:29
User Badges:
  • Silver, 250 points or more

This is due to having one interface on the monitoring device. If you are managing the the device remotely, you will need to have two interfaces, one for promiscuous capture, other for IP connectivity.

When a port is configured as a span destination the port is in up/down status

I need to check if there is a command that allows incoming access.


wilson_1234_2 Wed, 11/19/2008 - 14:03
User Badges:

We have the same setup using a Catalyst 2950 switch and it works:


monitor session 1 source interface Fa0/5

monitor session 1 destination interface Fa0/6 ingress vlan 1


But on the 1861, I do not have the "ingress" option when configuring the destination.

ropethic Wed, 11/19/2008 - 14:08
User Badges:
  • Silver, 250 points or more

Correct

Ingress, not supported

Actions

This Discussion