cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
311
Views
0
Helpful
1
Replies

Need to know how to "write" on a catalyst 4006 port using port mirroring

sguerrero
Level 1
Level 1

I am connecting a Real secure IDS in a catalyst 4006 with WS-C4006 Software, Version NmpSW: 6.3(1).

What I need is to enable span or port mirroring in my catalyst but with the ability of wrtiting on the port, because one of the funcionalities of this IDS is to detect private signatures (signatures created specifically for a TCP or UDP port) and write on the port the IDS is connected to in order to block the connections considered as attacks.

I already enabled span with set span commands, but still don´t get results I want because it seems we are not able to write on the port, Could you please let me know if this is possible or what commands shall I use?

Thanks for any help!

1 Reply 1

Prashanth Krishnappa
Cisco Employee
Cisco Employee

I think what you are looking for is the "inpkts" feature of SPAN

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/rel6_3/config/span.htm#1022939

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: