From: Church, Chuck (cchurch@xxxxxxxx)
Date: Mon Aug 12 2002 - 10:12:36 GMT-3
Lao ya,
I think the reason this is working is because you're trying to ping
the monitoring (destination) port with one that you 'spanned' (source). The
ICMP requests PC2 is sending aren't being sent unicast method to PC1 like
normal, because inpkts are disabled, but the fact that you're monitoring
PC2's port, that's how the ICMP packets are getting to PC1. Try pinging PC1
from a port that you're not monitoring, and it should fail.
Chuck Church
CCIE #8776, MCNE, MCSE
Sr. Network Engineer
US Tennis Association
70 W. Red Oak Lane
White Plains, NY 10604
914-696-7199
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
lao ya hu
Sent: Monday, August 12, 2002 7:35 AM
To: ccielab@groupstudy.com
Subject: what strange!!
hello all,
in my lab,i have a test as follows:
pc1-------2/1 switch-5k 2/2---pc2
pc1 is 192.1.1.1
pc2 is 192.1.1.2
when i input "set span 2/1 2/2 inpkts enable" into the switch-5k,pc2 can
ping pc1 successfully
when i input "set span 2/1 2/2 inpkts disable"into the switch-5k,pc2 can
ping pc1successfully too.
But according to cisco document,when use inpkts disable,switch-5k should not
receive packet from pc2.
Why pc2 can ping pc1 successfully when using "inpkts disable"?
And when i input "sh cam d',i can not see the MAC address for pc2 whether i
use "inpkts en" or "inpkts dis",why?
******************************
Use the inpkts keyword with the enable option to allow the SPAN destination
port to receive normal incoming traffic in addition to the traffic mirrored
from the SPAN source. Use the disable option to prevent the SPAN destination
port from receiving normal incoming traffic
******************************
would you please tell me reason about above?
lao ya
---------------------------------
Do You Yahoo!?
QE;"Si@VPBOJ5=5W,5gWSV\1(?l@V5=<R!
This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:48:23 GMT-3