Re: RSPAN

From: ccie2be (ccie2be@nyc.rr.com)
Date: Wed Feb 16 2005 - 17:26:14 GMT-3


IOW, I have to configure two sessions: a) the rspan session for both
switches and b) a span session.

OK, but can both sessions have the same destination port?

Remember there's only sniffer.

Thank, Tim
----- Original Message -----
From: "Radu Pavaloiu" <Radu.Pavaloiu@connex.ro>
To: "ccie2be" <ccie2be@nyc.rr.com>; "Group Study" <ccielab@groupstudy.com>
Sent: Wednesday, February 16, 2005 2:30 PM
Subject: RE: RSPAN

I think you need to use "monitor ses 2 soour vlan 2 rx" on sw2, because
ses 1 was fully configured with source remote vlan 10.

Regards,

I die. I fracture into thousands of fragments of flushed embarrassment.
My body parts fly, connectionless, over a badly constructed spanning
tree that isn't quite loop free.
I fall screaming into 127.0.0.1.

Radu
#2658

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
ccie2be
Sent: Wednesday, February 16, 2005 8:19 PM
To: Group Study
Subject: RSPAN

Hi guys,

 This is interesting.

 sw1 and sw2 are configured for rspan. On sw1, all incoming traffic
from vlan 2 is being sent to a sniffer on sw2's fa0/23.

 sw2 doesn't have any ports assigned to vlan 2.

 Here's the config:

 SW1#f monit
 monitor session 1 source vlan 2 rx
 monitor session 1 destination remote vlan 10 reflector-port Fa0/7 !
sw2#f monit monitor session 1 destination interface Fa0/23 monitor
session 1 source remote vlan 10 ! end

 sw2#c
 Enter configuration commands, one per line. End with CNTL/Z.
sw2(config)#mon ses 1 sour vlan 2 rx % Cannot add VLANs as source for
session 1 - a RSPAN Destination session sw2(config)#

Notice that the switch doesn't allow me to vlan 2 as another source.

 Suppose sw2 had ports assigned to vlan 2. How would I configure rspan
to monitor all traffic received from vlan 2?

 If sw2 had ports assigned to vlan 2, wold rspan automatically include
the traffic from those sw2 ports in vlan 2 because of the config on
sw1?

 TIA, Tim



This archive was generated by hypermail 2.1.4 : Thu Mar 03 2005 - 08:51:21 GMT-3