monitor icmp traffic on C6509

[shelley_wang]

Hi,

Both regular IP traffic and ICMP traffic are passing through the source port. C6509 provides the option of filtering vlan traffic during monitoring. But I don't have vlan traffic.

qa-c6509-c(config)#monitor session 1 filter ?

  vlan  SPAN filter VLAN

So I applied an access-list which only allows icmp traffic to be sent out of the monitoring port. But it does not work. Any suggestions?

thx,

Shelley

[rsimoni]

Is your source port a trunk?

I am asking as SPAN vlan filtering works only on trunk ports and not on access ports.

In other word in order to filter by vlan the source traffic must have an actual vlan tag.

for more see

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#terms

Riccardo

[shelley_wang]

Hi Riccardo,

The problem is I only configured layer 3 ports in my topology.

thx,

Shelley

[rsimoni · Accepted solution]

well if the source is a L3 port you don't have vlan tags in ingress ... so the vlan filter cannot work as per the doc I gave you.

Riccardo

[rsimoni]

Shelley,

please rate/close thread if there are no more questions.

R