cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
422
Views
0
Helpful
1
Replies

How can I use Local SPAN with RSPAN ??

creamware
Level 1
Level 1

How can I use Local SPAN with RSPAN ??

I want to mirror traffics from ISP-A and ISP-B to Anomaly-detector module.

so I had configured like this...

C6500-A

vlan 1000

name RSPAN

remote-span

!

monitor session 10 source interface Gi5/1 - 2 rx

monitor session 10 destination remote vlan 1000

monitor session 20 destination anomaly-detector-module 3 data-port 1

monitor session 20 source remote vlan 1000

!

interface GigabitEthernet1/13

switchport

switchport trunk encapsulation dot1q

switchport trunk allowed vlan 1000

switchport mode trunk

no ip address

!

C6500-B

vlan 1000

name RSPAN

remote-span

!

monitor session 10 source interface Gi5/1 - 2 rx

monitor session 10 destination remote vlan 1000

!

interface GigabitEthernet1/13

switchport

switchport trunk encapsulation dot1q

switchport trunk allowed vlan 1000

switchport mode trunk

no ip address

end

but it was not working..

it wasn't any change of input packet hit count when

I'd enter a command 'show anomaly-detector module 3 data-port 1 traffic'

was upper configuration wrong..?

Can I use VACL configuration ?

1 Reply 1

yuanyu
Level 1
Level 1

try to change "monitor session 10 destination remote vlan 1000 " to "monitor session 10 destination anomaly-detector-module 3 data-port 1 " on C6500-A

Review Cisco Networking products for a $25 gift card