Re: SPAN/RSPAN question

Yes : )

On Thu, Jun 28, 2012 at 2:04 PM, marc edwards <renorider_at_gmail.com> wrote:

> Simple question but have to ask... Have you gone under vlan 150 and
> specified it as a remote-span vlan?
>
> Marc
>
>
> On Thu, Jun 28, 2012 at 9:27 AM, marc abel <marcabel_at_gmail.com> wrote:
>
>> I don't believe it can work, not sure what the technical limitations are
>> against it but I tried many things unsuccessfully to get this to work.
>>
>> On Thu, Jun 28, 2012 at 11:19 AM, Johnny Morris <johnnymorris01_at_gmail.com
>> >wrote:
>>
>> > Hi All,
>> >
>> > 1 - Monitoring Server
>> > 2 - Cisco 3560 switches
>> > 2 - ASA's in active/standby mode
>> >
>> >
>> > I have one monitoring server configured to capture SPAN traffic
>> connected
>> > to the primary switch fa0/19. The monitoring destination port is fa0/10
>> on
>> > the primary switch. The primary switch is etherchannel to the secondary
>> > switch via g0/1-2. There inside interface of the Active ASA is
>> connected to
>> > fa0/19 Primary switch and Standby on secondary switch fa0/19.
>> >
>> > Currently SPAN is working on the primary device, however in failover
>> > environment I have noticed that RSPAN is not configure to capture the
>> > fa0/19 on the secondary switch. When I labbed this up and configured an
>> > RSPAN vlan on both switches and added the RSPAN vlan to the MST
>> instance I
>> > then configured the following:
>> >
>> > SW1:
>> >
>> > Existing SPAN configs:
>> >
>> > !
>> > monitor session 1 source interface Fa0/19
>> > monitor session 1 destination interface Fa0/10
>> > !
>> >
>> > SW2:
>> >
>> > !
>> >
>> > monitor session 1 source interface Fa0/19
>> >
>> > monitor session 1 destination remote vlan 150
>> > !
>> >
>> > Attempt 1:
>> >
>> > Tried to add the following RSPAN source on SW1:
>> >
>> > monitor session 1 source remote vlan 150
>> >
>> > Received error:
>> >
>> > (config)#monitor session 1 source remote vlan 150
>> > % Cannot add RSPAN VLAN as source for SPAN session 1 as it is not a
>> RSPAN
>> > Destination session
>> >
>> > Attempt 2:
>> >
>> > tried to add a second monitor session and it also failed:
>> >
>> > Great_Bend-SW1(config)#monitor session 2 source remote vlan 150
>> > Great_Bend-SW1(config)#monitor session 2 dest int fa0/10
>> > % Interface(s) Fa0/10 already configured as monitor destinations in
>> other
>> > monitor sessions
>> >
>> >
>> >
>> > Is there a way anyone can think of to monitor a local source interface
>> and
>> > remote vlan using the same destination? Is there an issue as to why it
>> > cannot be done or is this something Cisco should update/allow in an IOS
>> > code? I don't have an additional NIC on the monitoring server to monitor
>> > otherwise it would work.
>> >
>> >
>> > Much appreciated !
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> > _______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>>
>>
>> --
>> Marc Abel
>> CCIE #35470
>> (Routing and Switching)
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu Jun 28 2012 - 14:09:12 ART