BiDirectional SPAN on Cisco Catalyst 3750 question

Posted on 2006-06-06
Medium Priority
Last Modified: 2010-05-18
I want to make sure that I am doing this right. I want to setup my Cisco Catalyst 3750 to span my default VLAN1. I have a server with two NIC's and believe this is the way I should set it up, let me know if I am wrong:

1) On one NIC attach to a port that is on a separate VLAN from the port I want to monitor. This NIC will only be used to listen to traffic from the switch. It will be attached to port Gi1/0/1

2) On my other NIC I will leave it attached to the network. It will be attached to port Fa2/0/1

3) I will enter the following command into my Cisco switch in config mode:
monitor session 1 source vlan 1 both
monitor session 1 destination interface fa2/0/1

I am going to use Ethereal to view network traffic. The link to the resource I am using is http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_guide_chapter09186a00801cdee2.html

Thanks in advance.
Question by:Natldiag
1 Comment
LVL 10

Accepted Solution

Sorenson earned 500 total points
ID: 16854670
That looks good.  A couple of quick comments.  On the second interface, within the server, disable microsoft client and  disable TCP/IP (the sniffing interface) as you do not want it to get an address, especially if you are doing this on a server.  Your destination is a fast ethernet port, from the commands it looks like you are monitoring a stack of 3750 switches, I would seriously consider moving this to a gig interface.  Also be prepared to see some false duplicate packets when sniffing the bidirectionally on the whole vlan.  Good luck

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
LinkedIn blogging is great for networking, building up an audience, and expanding your influence as well. However, if you want to achieve these results, you need to work really hard to make your post worth liking and sharing. Here are 4 tips that ca…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question