Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

About RSPAN question

I want to capture packets between two servers belonged to different VLAN. Two servers are connected to different access switch Cat3750, and those access switches are connected directly Cat6500. I think I have to run RSPAN between three switches.

Please check the following configuration:

Switch 3750A:

vlan 22

remote-span

!

!

monitor session 1 source interface gigabitethernet1/0/2(connect to ServerA)

monitor session 1 destination remote vlan 22

Switch 3750B:

vlan 22

remote-span

!

!

monitor session 1 source interface gigabitethernet2/0/2(connect to ServerB)

monitor session 1 destination remote vlan 22

Switch Cat6500

vlan 22

remote-span

monitor session 1 source remote vlan 22

monitor session 1 destination interface Gi3/15 (connect to monitoring server)

My questions is:

a. How to guarantee we only receive the traffics between two servers on the monitoring server?

b. Do I have to remove VLAN 22 from the trunk interface connected to Cat6500?

Please advice! Thanks a lot

3 REPLIES
New Member

Re: About RSPAN question

To answer your first question. You will not be able to guarantee you only receive traffic between the two servers. With the configuration you're displaying, you are mirroring all traffic going to and from the specified interfaces to your remote vlan. You will need a tool like wireshark to filter the source and destination IPs to only view traffic between the two servers exclusivel.

I don't fully understand your second question.

New Member

Re: About RSPAN question

To answer your first question. You will not be able to guarantee you only receive traffic between the two servers. With the configuration you're displaying, you are mirroring all traffic going to and from the specified interfaces to your remote vlan. You will need a tool like wireshark to filter the source and destination IPs to only view traffic between the two servers exclusively.

I don't fully understand your second question.

New Member

Re: About RSPAN question

Thanks for your suggestion.

I already used VACL to complete packet capture.

123
Views
0
Helpful
3
Replies
CreatePlease to create content