span session and VACL on 6500

HWangLoyalty_2 · ‎04-03-2009

In Our environment, there are two interconnected cat 6500 switch and a bunch of 3750 stack switches connected to each 6500 with etherchannel. We already created one monitor session to IDS staff for all VLANs on core1 switch. But there is not any monitor sessions created on core2 switch. We are going to use NetQos to monitor traffic like packet capture. Because of limitation of span session on 6500, we could not set up a new session on core1. But how could I do if the traffic I want to capture was got through core1? It looks like VACL could fix this issue. Could you give me two cents about monitor setup in our environment please?

owillins · ‎04-09-2009

SPAN copies traffic from one or more source ports in any VLAN or from one or more VLANs to a destination port for analysis. Local SPAN supports source ports, source VLANs, and destination ports on the same Catalyst 6500 Series Switch.

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080883ca2.shtml#vspan