cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
687
Views
0
Helpful
1
Replies

Span monitoring generate duplicate packets

bdecout
Level 1
Level 1

I'm trying to setup a span from two 6513 and have the folowing issue.

I have the two switch connected together with a channel-group trunk.

The span is limited to 128 ports on the 6500 so I can only use vlans as source.

I have the span traffic from each switch going into a span regenerator device than combines both source and send it out thru a single port onto my packets analyzer device.

My problem is that the traffic that enter Switch1 and goes to Switch2 is being spanned twice from each device because the channel-group trunk is part of the spanned traffic.

I couldn't find a way to exclude the trunk from the monitored traffic because I use Vlans as source instead of ports.

Any suggestion on how I can overcome this?

1 Reply 1

smalkeric
Level 6
Level 6

You can configure a trunk port as a source port. All VLANs active on the trunk are monitored.Refer URL

http://www-tac-rtp.cisco.com/Teams/ks/casekwery/casekwery.php?Case=E530502&tz=-330

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card