Port mirroring two ports at a time.

[bauti1428]

Is it possible to mirror two ports at a time on a cat os 6509? We have 8e6 filtering tool and the way it works, we span the port where our isp is connected and block unnecessary web contents. Now we have two firewalls one primary and standby and the port mirror is only monitoring the primary interface and not the standby. If the primary goes down, standby kicks in but our web filetering tool will not be able to block it. I'm also thinking of using a hub but not sure if this is really the way to go and might slow down our outbound traffic.

[t814687 · Accepted solution]

Roberto, you should be able to span multiple source ports in one session without any problem, please refer to the following document:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.1E/native/configuration/guide/span.html#wp1042096

another option is to use VLAN capture feature where you do not have session limits on one chassis. With local SPAN you can have only 2 sessions simultaniously.

thanks

-serg

[bauti1428]

Thank you it worked!

Below is the command I used.

set span 7/43-44 7/45 both

6509> (enable) show span

Destination : Port 7/45

Admin Source : 7/43-44

Oper Source : 7/43-44

Direction : transmit/receive

Incoming Packets: disabled

Learning : enabled

Multicast : enabled

Filter : -

Status : active

Total local span sessions: 1

[t814687]

That's great, thanks for rating.

-serg