i have a number of interface to monitor with my ids, problem is i only have one port in my ids and i would like to monitor ports in the traffic coming from the private wan and traffic from the internet on both switches. any idea how this scenario? will vspan/rspan/span will work on this? attached is the simple network diagram.
Basicly You would need span+rspan. You can use SPAN to monitor traffic on the same switch (from Private WAN+one link from Internet) and RSPAN to forward traffic from the other switch (from second link to Internet).
Configuration depends on switches classed You have. I will give an example of span+rspan that I am using on Cat6500.
I have put port numbers in Your drawing, so it would be more clear:
monitor session 2 source int gi 1/1
monitor session 2 source int gi 1/3
monitor session 2 source remote vlan 100
monitor session 2 destination int gi 1/4
monitor session 2 source int gi 1/2
monitor session 2 destination remote vlan 100
Make sure that Vlan100 is allowed on trunk between those switches.
If You have any questions regarding my post, please let me know.
I am trying to monitor a switchport that is in a 3750, which is remote to our location. The remote is connected via fiber to a 6509. My question is this, Is int gig1/4 the trunk port to the 6509? By the same token is int gig 1/2 on Switch B the trunk to Switch A? Knowing this would be most helpful. Thank you.
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.