SPAN IN SWITCH

[iqbalkhan]

Hi

I have 4215 IDS sensor and 3550 switch.

I want connect sensing interface to switch. I have pc where event viwer install.

now in switch has f0/1 and f0/2 port

f0/1 is source port and f0/2 is destination port.

so my question is in which port i connect IDS sensing interface for mirroing data to my pc ??/

thanks

biplob

[a.kiprawih]

Connect it to Fa0/2 - SPAN destination.

The Fa0/1 is the port you want to monitor the traversing traffic (tx/rx). All traffic snapshot will be sent to Fa0/2 as destination port where the IDS monitoring port (in promiscuous@passive mode) is connected to and receiving the packet snapshot for analysis.

HTH

AK