I have the following setup and i would like to be sure that the reasoning & configuration is correct:
2 aggregation switches A & B are connected via a trunk and are redundant. we have 1 IDS that is going to be connected only to switch A. we would like to monitor the incoming traffic. Thus I am planning to configure RSPAN as the attached configuration.
correct me if it's wrong.