jammin_j
asked on
How to configure port monitoring for screendoor
Need to configure ports to monitor internet access
ASKER
Precisely, on the Cisco. I have the source as the firewall and the destination the Screendoor.
so what do you actuly need to know?
on a cisco thats all you need to do tell the switch what port you want to use as source, and what port you want to send the mirrored data to. and then attach the monitering PC/software to that destination port.
on a cisco thats all you need to do tell the switch what port you want to use as source, and what port you want to send the mirrored data to. and then attach the monitering PC/software to that destination port.
ASKER
I put monitor destination on the listening port and the source as our pix firewall, and still no filtering. Is this not correct?
yes that should be fine.
you need to make sure that you monitor traffic in both ways in/out
if you are not sure you ahve it right. Put a PC on the monitering port and then look to see how its network card stats are mounting up. you should see a lot of packets hitting it if the monitering is set up corredctly. to be sure down load wire shark on to it and capture some data to see if the port is being mirrored correctly.
if you do a "show monitor" on the cisco swith what dose it desplay?
you need to make sure that you monitor traffic in both ways in/out
if you are not sure you ahve it right. Put a PC on the monitering port and then look to see how its network card stats are mounting up. you should see a lot of packets hitting it if the monitering is set up corredctly. to be sure down load wire shark on to it and capture some data to see if the port is being mirrored correctly.
if you do a "show monitor" on the cisco swith what dose it desplay?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
what types of switchs/ routers?
on a cisco switch you simple
type
#monitor session 1 source g1/0/2
#monitor session 1 destination g2/0/3
or some thing like that ;)