From: Mike Williams (ccie2be@swbell.net)
Date: Sat Jan 31 2004 - 01:41:09 GMT-3
What you see is correct. When you set a span port destination, it
should show up/down (monitoring)...... On a few switches you could type
a command that would allow the monitoring device to also send traffic
into the switchport (therefore being "on the network" as normal while
monitoring). But all of our 3550s, Cat4000/4500, and Cat6500s show
up/down (monitoring) on all of our span ports.
I was just playing with that today trying to get our monitor session to
output dot1q tagged frames by setting the session destination to be a
trunk (unconditionally)...... Cisco says that outputting tagged (or ISL
encapsulated) frames is possible on the Cat6000/6500 starting with
12.1(13)E and later, but we have 12.1(13)E9 on our 6500s (native) and
whenever I setup the output port as a trunk, as soon as I make it a span
session destination, trunking is disabled (as shown by "show int trunk
mod <#>" (according to all Cisco docs I read, this disabling of the
trunking on a session destination is normal for IOS prior to 12.1(13)E).
Also can't find any evidence that you can do this dot1q tagged spanning
on the Cat4000/4500s (running IOS, not CatOS).........
Mike W.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Danny.Andaluz@triaton-na.com
Sent: Friday, January 30, 2004 5:55 PM
To: ccielab@groupstudy.com
Subject: monitor session question
Hey, Group.
I'm trying to setup a span port on my 3550. Here is my config:
monitor session 1 source interface Fa0/2
monitor session 1 destination interface Fa0/22
For some reason, the switch port shows up/down (monitoring). At first
it said up/up (monitoring) but then went down. Does this have anything
to do with the software I'm using to analyze traffic? I think I have
the monitor session configured according to the Doc CD.
CAT1#SH INT F0/22
FastEthernet0/22 is up, line protocol is down (monitoring)
Hardware is Fast Ethernet, address is 000a.8a14.d777 (bia
000a.8a14.d777)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s
This archive was generated by hypermail 2.1.4 : Mon Feb 02 2004 - 09:07:52 GMT-3