Port mirroring on multiple switches

Posted by Matt on Server Fault See other posts from Server Fault or by Matt
Published on 2012-12-05T17:39:44Z Indexed on 2012/12/06 23:05 UTC
Read the original article Hit count: 236

Filed under:
|
|
|

So here is the deal, I have a server on switch A where port 3 is monitoring traffic for most of the ports on switch A. However I have other users on switch B that needs to have port 3 on switch A monitor as well. Is this possible? I have been reading about rspan but doesnt seem to work.

Switch A:

monitor session 1 source interface fast0/1 - 2
monitor session 1 source interface fast0/4 - 46
monitor session 1 destination interface fast0/3

(this works great for switch A, I need a solution to get switch B to also have some ports sent to port 3 on switch A for monitoring.)

Onxx,

All the traffic on switch A is fine, there will be about 10-15 ports on switch B that I need to send to fa0/3 on switch A as the destination. I have the switches connected with a ethernet cable with a trunk port on both switches on port 48 on switch B and A and port 47 on A connects to our sonicwall. So I am assuming they are daisy chained?

What if I did the following:

Switch A
monitor session 1 source interface fast0/1 - 2
monitor session 1 source interface fast0/4 - 46
monitor session 1 destination interface fast0/3
Put all of the ports on vlan 10 because I made an rspan vlan 10

On switch B

monitor the ports I need will say 1-10

monitor session 1 source interface fast0/1 - 10
monitor session 1 destination remote vlan 10
as a prerequisite I would have created vlan 10 as a rspan vlan on switch B.

Switch A

Monitor session 1 destination remote vlan 10

Would this work?

By the way I am working with cisco catalyst 3560 switches.

© Server Fault or respective owner

Related posts about cisco

Related posts about monitoring