Solved

how to configure port mirroring on a cisco 2950

Posted on 2006-10-26
7
909 Views
Last Modified: 2011-10-03
Hello,

I am evaluating surfcontrol software on a windows 2003 server with sp1. The server is a member server and has 2 nics. 1 for blocking and the other for destination. In order for surfcontrol to work I configured 2 ports on a cisco 2950 switch for port mirroring. Surfcontrol does not work. So i am going back to the company today and calling surfcontrol tech support. I want to make sure that i`ve configured the switch well.
This is how i configured it:

config t
monitor session 1 source interface fastethernet 0/24
monitor session 1 destination interface fastethernet 0/23
show monitor session 1
Source Ports:
    RX Only:       None
        TX Only:       None
        Both:          Fa0/24
Destination Ports: Fa0/23

copy runn start
 Are my configs ok?

Many thanks,
Tacobell2000


0
Comment
Question by:Tacobell2000
  • 4
  • 3
7 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17812069
Yeah, that looks correct.

Just make sure that fa0/24 is the port that goes out to your firewall if you have one and 0/23 is the port connected to your machine.

Cheers,
Rajesh
0
 

Author Comment

by:Tacobell2000
ID: 17812331
fa 0/24 is the source port and that is connected to 1 of the nics on the surfcontrol server. fa 0/23 is connected to the 2nd nic on the surfcontrol server. The firewall is connected to fa 0/16 on the same switch.
Am i doing this correctly,

Tacobell2000
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 500 total points
ID: 17813199
No, the idea is to make the packets reach the surfcontrol server and have it processed. So all the outgoing packets will be going to the firewall which is fa0/16.

So you need to mirror all the traffic from fa0/16 to 0/23

By the way this will enable you to monitor the traffic but not really control it. You'll get a feel of how it works. If you want it to be doing its job, you need to make the traffic pass through the surfcontrol server or have your firewall configured for web filtering and point the web filter server's address in the firewall. This way the firewall will first consult with the surfcontrol server before it allows any http traffic. What kinda firewall ?

Cheers,
Rajesh
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:Tacobell2000
ID: 17813501
It is a a 2600 cisco router.
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17813567
That doesn't support what we are looking for, so you'll have to route it through the surfcontrol server itself. Just configure the span as I mentioned and call the support person.

Cheers,
Rajesh.
0
 

Author Comment

by:Tacobell2000
ID: 17813625
Thank you very much!
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 17813650
Thanks.

Cheers,
Rajesh
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question