Re: SPAN/RSPAN question

Have you configure vlan 150 as a remote span on both switch.
If i remember correctly, something like
Vlan 150
  remote_span

Best Regards,

Arista
On Jun 29, 2012 12:44 AM, "Johnny Morris" <johnnymorris01_at_gmail.com> wrote:

> Hi All,
>
> 1 - Monitoring Server
> 2 - Cisco 3560 switches
> 2 - ASA's in active/standby mode
>
>
> I have one monitoring server configured to capture SPAN traffic connected
> to the primary switch fa0/19. The monitoring destination port is fa0/10 on
> the primary switch. The primary switch is etherchannel to the secondary
> switch via g0/1-2. There inside interface of the Active ASA is connected to
> fa0/19 Primary switch and Standby on secondary switch fa0/19.
>
> Currently SPAN is working on the primary device, however in failover
> environment I have noticed that RSPAN is not configure to capture the
> fa0/19 on the secondary switch. When I labbed this up and configured an
> RSPAN vlan on both switches and added the RSPAN vlan to the MST instance I
> then configured the following:
>
> SW1:
>
> Existing SPAN configs:
>
> !
> monitor session 1 source interface Fa0/19
> monitor session 1 destination interface Fa0/10
> !
>
> SW2:
>
> !
>
> monitor session 1 source interface Fa0/19
>
> monitor session 1 destination remote vlan 150
> !
>
> Attempt 1:
>
> Tried to add the following RSPAN source on SW1:
>
> monitor session 1 source remote vlan 150
>
> Received error:
>
> (config)#monitor session 1 source remote vlan 150
> % Cannot add RSPAN VLAN as source for SPAN session 1 as it is not a RSPAN
> Destination session
>
> Attempt 2:
>
> tried to add a second monitor session and it also failed:
>
> Great_Bend-SW1(config)#monitor session 2 source remote vlan 150
> Great_Bend-SW1(config)#monitor session 2 dest int fa0/10
> % Interface(s) Fa0/10 already configured as monitor destinations in other
> monitor sessions
>
>
>
> Is there a way anyone can think of to monitor a local source interface and
> remote vlan using the same destination? Is there an issue as to why it
> cannot be done or is this something Cisco should update/allow in an IOS
> code? I don't have an additional NIC on the monitoring server to monitor
> otherwise it would work.
>
>
> Much appreciated !
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Jun 29 2012 - 02:17:45 ART