Port Monitoring

[glenn.mendoza]

I am planning on configuring Port Monitoring on a 2950 and want to know if there are any problems in leaving port monitoring on for an extended period of time.

I have read http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note09186a008015c612.shtml#topic1 and do not see any info about leaving this running for an extended period of time.

I plan on monitoring 8 to 10 ports at a time for an extended period. I will more than likely add 1 port at a time to be monitored to the destination interface just to be sure.

Any info would be greatly appreciated.

-G

[tbaranski]

It's not an issue. Most of the time, SPAN ports are connected to a monitoring device such as an IDS for indefinite periods of time.

[glenn.mendoza]

Thanks for the info. Much appreciated, but when I went to actually enter the commands for the port, the command was not recognized.

The IOS is 12.1(6)EA2 on the switch. After reading the URL http://www.cisco.com/en/US/products/hw/switches/ps605/products_command_reference_chapter09186a0080112d2f.html#xtocid65

The first time this command was introduced was in IOS 11.2(8)SA. What gives? Am I missing something here?

[tbaranski]

That link is for 2900 series switches rather than 2950 series switches. See http://www.cisco.com/en/US/products/hw/switches/ps628/products_configuration_guide_chapter09186a008007ebf9.html#1051610, from http://www.cisco.com/en/US/products/hw/switches/ps628/prod_configuration_guides_list.html

[glenn.mendoza]

Oh :) Port Monitor is not supported on the 2950 model. Thanks for the info.

So I guess all I would have to do is enter the following commands

monitor session 1 source interface fas0/1

monitor session 1 source interface fas0/2

monitor session 1 source interface fas0/3

monitor session 1 source interface fas0/4

monitor session 1 destination interface fas0/5

Then all the traffic from ports 1-4 will be copied to 5, correct?

Thanks for your help!

[rwcrowe]

That is correct.