Solved

Port mirroring on Cisco Catalyst 3560 Series

Posted on 2009-03-31
4
3,440 Views
Last Modified: 2012-05-06
Hi All

I have a Cisco Catalyst 3560 Series switch on which I want to set up port mirroring (SPAN) so ALL traffic from all ports on the switch is mirrored onto one dedicated port so I can then plug in a hardware/software based network performance monitor into that port to analyze what's going on on the network. I have installed the Cisco Network Assistant software installed to connect to the switch can find the SPAN settings but cannot figure out how to copy the traffic from ALL ports to one port.

The background for this is that we have VoIP phones on this network and have recently started having problems with call quality and jitter on the line and believe something on the network is generating some traffic which is causing this. To this end, I want to use a network performance monitor like Orion (Solar Winds) or Fluke Etherscope II to see what's happening on the network but obviously this will require the Fluke or Orion to be plugged into a port that is receiving all traffic going through the switch.

Any help will be appreciated.

Thanks.
0
Comment
Question by:netstarukltd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 5

Expert Comment

by:rgutwein
ID: 24028957
I am not sure if you can copy all the ports into one, but normally you would mirror the port where your Router/Gateway is connected to so that you can see all the traffic coming in and leaving your network.
0
 
LVL 33

Expert Comment

by:Busbar
ID: 24028964
0
 

Author Comment

by:netstarukltd
ID: 24029019
Busbar, I have the below link that I'm looking at. Will also look at your link.
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.1_19_ea1/configuration/guide/swspan.html

Rqutwein, mirriroring the port where the firewall is connected would only show internet bound traffic and responses to it. Plugging an unswitched hub in that port and putting the firewall and the monitoring device into that hub will achieve the same thing. However, If any other random junk is being generated on the network that is not internet bound, I wouldn't be able to see that this way which is why I wanted to mirror all ports onto one.

Thank you both for the quick responses though.
0
 
LVL 8

Accepted Solution

by:
Sniper98G earned 250 total points
ID: 24029469
If you want to see all traffic you would usualy mirror the vlan to a port.

monitor session 1 source vlan X
monitor session 1 destination interface fastEthernet X
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When posting a question about a Cisco ASA, Cisco Router or Cisco Switch, it can aid diagnosis if a suitably sanitised copy of the config is provided. It is much better to leave as much of the configuration as original as possible, as it could be tha…
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Come and listen to Percona CEO Peter Zaitsev discuss what’s new in Percona open source software, including Percona Server for MySQL (https://www.percona.com/software/mysql-database/percona-server) and MongoDB (https://www.percona.com/software/mongo-…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question