SPAN Configuration

[wasiimcisco]

I have configure my 3750 switch for span. In this switch my IPS 4255, Internet router and Pix firewall is connected.

Below mention is the span configuration

monitor session 1 source interface Gi1/0/1 - 3

monitor session 1 destination interface Gi1/0/5

now the problem is the that IPS capturing traffic twice once while going out and once while coming in.

I wana know how to configure monitor session that it only capture traffic that is coming from Internet. Not traffic that

is originating from inside of the network.

In switch port 1 Internet router is connected, port 2 is for firewall and three is for concentrator.

I m confuse about the span port configuration either Rx or Tx. Right it is both Rx and Tx.

[jeremystretch]

Specify 'rx' on the interface(s) on which you wish to mirror inbound traffic:

monitor session 1 source interface g1/0/1 rx

Rx captures traffic entering the interface, Tx captures traffic leaving the interface.