Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Allowing ingress traffic on SPAN port (2900XL)

On certain Catalyst switches, the SPAN feature seems to allow the device connected to it to be able to generate packets back into the switch (through the "inpkts enable" command). I have a customer who is running a Websense Network Agent server (Internet monitoring/blocking) that needs to not only receive SPANed data, but also to transmit data back onto the LAN segment (described in the following Websense URL):

Does anyone know if the SPAN feature on a 2924XL will support this (I'm dubious due to the lack of the "inpkts enable" command)? Would something like a 3550 support this capability?

Thanks in advance.


New Member

Re: Allowing ingress traffic on SPAN port (2900XL)

We do this by using two network cards. The NIC connected to the SPAN port does the monitoring and a second NIC--connected to a 'regular' port does the blocking. This is also in the Quick Start Guide for Network Agent: "If a switch that supports bi-directional spanning is used, Network Agent can function successfully with a single Network Interface Card (NIC) performing both monitoring and blocking. If the switch

does not support bi-directional spanning, Network Agent must use separate NICs for monitoring and blocking."

CreatePlease login to create content