Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Regarding the use of taps for monitoring

Hi,

We have some 4250-XL sensors with gigabit fiber cards. I want to use them with a fiber tap and am having issues with the sensing interfaces showing "link down." I have read a number of forum posts here regarding the fact that this is perhaps not a supported configuration. Does anyone here have direct experience using taps, and if so what types? We're on 5.x code. Also, even if Cisco does not officially support the configuration, I am really interested in whether it can be done and how! Thanks -

1 REPLY
Silver

Re: Regarding the use of taps for monitoring

Taps have 2 outputs. If the Tap is placed on the connection between machines A and B, one of the

outputs will be for traffic from A to B, and the other will be for traffic from B to A.

To monitor the Tap, the sensor will need to see both outputs.

You can do this by connecting the taps to a switch, and then spanning the 2 ports to the monitoring port of the IDS sensor.

228
Views
0
Helpful
1
Replies
CreatePlease to create content