WAN traffic monitoring (internally)

[cschueler]

Is there any type of configuration for a 7206 to SPAN or monitor traffic? I am running mutiple 7206 with inbound DS3 and outbound VXR (SVC/PVC)connections to other sites (i.e traffic never leaves the router). How could I implement a spanning feature to monitor the traffic on those links? My thoughts were to maybe create VLAN's for the interconnects and try to span those links, but not sure if that is even feasible. My motive behind this is for IDS implementation for monitoring internal traffic.

Thank you,

Chris

[lwantland]

I would suggest enabling either IP Accounting or Netflow on the DS3 interface of the router. Both give valuable information. Netflow gives much more data, but has to have a netflow collector to send the data to.

Regards,

Lance Wantland

[0sgruttadauria]

You might want to check with Cisco to see if the IOS IDS feature set can work with sub-interfaces. If so, you just need to upgrade IOS