RE: RSPAN & IDS

From: Thunai Selvam \(thunai\) (thunai@cisco.com)
Date: Sun Aug 06 2006 - 02:50:54 ART


Hi
   I hope the session id does not matter for the SPAN Config.. Let me
try that as well.

Regds
Thunai

________________________________

From: Yakov Shtoots [mailto:yakovz@gmail.com]
Sent: Saturday, August 05, 2006 11:11 PM
To: Thunai Selvam (thunai)
Subject: Re: RSPAN & IDS

on cat 1
change session 1 to be sourced with , remote vlan 500 and destionation
should be the port connected to sensin port on the ids
and change session 2 to be sourced with vlan 114 and destinatin is
remote vlan 500

On 8/5/06, Thunai Selvam (thunai) <thunai@cisco.com> wrote:

        Hi all
          I have following scenario

        R4- (vlan 114)----(cat1)---Trunk-(dot1q all vlans
        )---(cat2)-----(vlan114)-----R1
        &
        R2 --- (vlan 100)---(cat1)--Trunk (dot1q all
vlan)---(cat2)----(vlan
        114)---R1

        (Both r4 and r2 are connected to Cat1 with vlan 114 and Vlan100
        respectively )

        Senor Sensing interface on Cat1 Fa 0/18

        Cat1
        config t
        vlan 500
        remote-span

        monitor sess 1 source vlan 114 , 100 rx
        monitor sess 1 dest remote vlan 500 reflector fa 0/13
        monitor ses 2 source remote vlan 500
        monitor ses 2 dest inter fa 0/18

        Cat 2

        monitor ses 1 source vlan 114 rx
        monitor ses 1 dest remo vlan 500 reflect fa 0/13

        I am able to see the traffic from r1 ( vlan114 ) , however i am
not able
        to see the traffic to R4 and R2 Routers on the IEV. is there
any thing
        wrong in this config

        Let me know your inputs.

        Regds
        Thunai

--
Yakov Shtoots,
CCNP, CCSP/INFOSEC.

Mobile: + 972-54-2110107

E-mail: yakovz@yakovz.net



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:56 ART