GroupStudy.com GroupStudy.com - A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
Re: RSPAN question posted 02/17/2007
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]


I agree with Josef

Just create 2 sessions. 1 RSPAN session between SW1 and SW2 and a
second normal SPAN session on SW2.

Darby

Not sure if you noticed but the configuration was done on a 3570 where
the reflector interface is not necessary.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12235se/cr1/cli1.htm#wp3788695

Maybe its time for bed my friend!!

Ian

On 2/17/07, Josef A <josefnet@xxxxxxxxx> wrote:
I like the second configuration option, because it seems like you will need
two different monitor sessions: an rspan session to monitor traffic in SW1,
and a span session to monitor traffic in SW2.

However I will modify the second monitor session on SW2 as follows:

monitor session 2 source vlan 65 - 72
monitor session 2 destination interface Gi1/0/43

my 2 cents

thx


On 2/17/07, san <san.study@xxxxxxxxx> wrote: > > Hello All, > > I have a need to setup RSPAN and looking to see how to sniff. > > > Sw1=======Sw2 > > Vlans per Switch > SW1 => vlan 65,66,67,68,69,70, 999 > SW2 => vlan 65,66,67,68,69,70, 999 > SW1 and SW2 are 3750 > > I have a sniffer drop at SW2 1/0/43 and need to sniff all the vlans at > both > the switches to this port. > > Configuration below can only brings the source vlan 65,66,67,68,69,70 on > SW1 > to SW2 port 1/0/43 . > > Problem is Traffic from SW2 vlans (65,66,..70) are not sniffed to > sniffer > port through configuration 1. > - Switch doesnot allow to add additional source commands like "source > vlan > or source interface". > > I havenot tried the configuration option2 below. Would this work or Any > other method to solve this ? > > > Configuration 1: > ------------------------- > SW1: > ------- > vlan 999 > rspan > > monitor session 1 source vlan 65 - 72 > monitor session 1 destination remote vlan 999 > > SW2: > -------- > vlan 999 > rspan > > monitor session 1 source remote vlan 999 > monitor session 1 destination interface Gi1/0/43 > > > > Configuration 2: > ------------------------- > SW1: > ------- > vlan 999 > rspan > > monitor session 1 source vlan 65 - 72 > monitor session 1 destination remote vlan 999 > > SW2: > -------- > vlan 999 > rspan > > monitor session 1 source remote vlan 999 > monitor session 1 destination interface Gi1/0/43 > > monitor session 2 source vlan 65 - 72 > monitor session 2 destination remote vlan 999 > > > -- > Thanks & Rgds > SAN > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html

_______________________________________________________________________
Subscription information may be found at:
http://www.groupstudy.com/list/CCIELab.html