Port mirroring on multiple switches
Posted
by
Matt
on Server Fault
See other posts from Server Fault
or by Matt
Published on 2012-12-05T17:39:44Z
Indexed on
2012/12/06
23:05 UTC
Read the original article
Hit count: 231
So here is the deal, I have a server on switch A where port 3 is monitoring traffic for most of the ports on switch A. However I have other users on switch B that needs to have port 3 on switch A monitor as well. Is this possible? I have been reading about rspan but doesnt seem to work.
Switch A:
monitor session 1 source interface fast0/1 - 2
monitor session 1 source interface fast0/4 - 46
monitor session 1 destination interface fast0/3
(this works great for switch A, I need a solution to get switch B to also have some ports sent to port 3 on switch A for monitoring.)
Onxx,
All the traffic on switch A is fine, there will be about 10-15 ports on switch B that I need to send to fa0/3 on switch A as the destination. I have the switches connected with a ethernet cable with a trunk port on both switches on port 48 on switch B and A and port 47 on A connects to our sonicwall. So I am assuming they are daisy chained?
What if I did the following:
Switch A
monitor session 1 source interface fast0/1 - 2
monitor session 1 source interface fast0/4 - 46
monitor session 1 destination interface fast0/3
Put all of the ports on vlan 10 because I made an rspan vlan 10
On switch B
monitor the ports I need will say 1-10
monitor session 1 source interface fast0/1 - 10
monitor session 1 destination remote vlan 10
as a prerequisite I would have created vlan 10 as a rspan vlan on switch B.
Switch A
Monitor session 1 destination remote vlan 10
Would this work?
By the way I am working with cisco catalyst 3560 switches.
© Server Fault or respective owner