From: Kenneth Wygand (KWygand@customonline.com)
Date: Sat May 01 2004 - 23:38:48 GMT-3
David,
Can you post your configs for us?
Specifically, when you say, "I have created a SPAN on each of these switches for that FE
> outputing both inbound/outbound which connects up to the fourth switch", what are you "spanning"? Are you spanning a VLAN or particular ports on your access-layer switches?
Does your setup work if you SPAN from a single access-layer switch to your monitoring station?
Ken
-----Original Message-----
From: nobody@groupstudy.com on behalf of Bob Sinclair
Sent: Sat 5/1/2004 8:16 PM
To: David Clarkson; ccielab@groupstudy.com
Cc:
Subject: Re: Nested Spanning
David,
If I understand your setup correctly, then I think it should work. I am
able to span port f0/11 (in vlan 1) on my 3550 to destintation port f0/23.
F0/23 is connected by a trunk to a Catalyst 6000 IOS port F3/1. On the
6000 I spanned vlan 1 to destination int F3/2, which is connected to a
sniffer. It works for me - I can capture the traffic received on port F0/11
of Cat3550 from a sniffer attached to another switch by cascading the spans.
Not elegant, but it does work for me. Be aware span destination ports have
spanning tree disabled, so beware of loops!
Technically, one should use RSPAN when source and destination ports are on
different switches. I tried that and it also works for me in this scenario.
HTH,
Bob Sinclair
CCIE #10427, CISSP, MCSE
www.netmasterclass.net
----- Original Message -----
From: "David Clarkson" <dclarkso@bigpond.net.au>
To: <ccielab@groupstudy.com>
Sent: Saturday, May 01, 2004 5:15 PM
Subject: Nested Spanning
> Hey all,
>
>
>
> I am trying to setup a system to record traffic from my lab exercises. I
> have four 2950s, 3 which are setup as access layers with a FE connected to
a
> system. I have created a SPAN on each of these switches for that FE
> outputing both inbound/outbound which connects up to the fourth switch
(the
> SPAN traffic will be <10Mbps so loss due to duplex is no issue). The
fourth
> switch has no purpose other than to aggregate SPANs coming from the access
> layers, and to output those SPANS to a to a sniffer. I am using standard
> SPAN at this point, but am not having any luck. Anybody have any
> suggestions? Is RSPAN the solution?
>
>
>
> Regards,
>
> Dave
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
_______________________________________________________________________
Please help support GroupStudy by purchasing your study materials from:
http://shop.groupstudy.com
Subscription information may be found at:
http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:02 GMT-3