Solved

Port mirroring on Cisco Catalyst 3560 Series

Posted on 2009-03-31
4
3,421 Views
Last Modified: 2012-05-06
Hi All

I have a Cisco Catalyst 3560 Series switch on which I want to set up port mirroring (SPAN) so ALL traffic from all ports on the switch is mirrored onto one dedicated port so I can then plug in a hardware/software based network performance monitor into that port to analyze what's going on on the network. I have installed the Cisco Network Assistant software installed to connect to the switch can find the SPAN settings but cannot figure out how to copy the traffic from ALL ports to one port.

The background for this is that we have VoIP phones on this network and have recently started having problems with call quality and jitter on the line and believe something on the network is generating some traffic which is causing this. To this end, I want to use a network performance monitor like Orion (Solar Winds) or Fluke Etherscope II to see what's happening on the network but obviously this will require the Fluke or Orion to be plugged into a port that is receiving all traffic going through the switch.

Any help will be appreciated.

Thanks.
0
Comment
Question by:netstarukltd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 5

Expert Comment

by:rgutwein
ID: 24028957
I am not sure if you can copy all the ports into one, but normally you would mirror the port where your Router/Gateway is connected to so that you can see all the traffic coming in and leaving your network.
0
 
LVL 33

Expert Comment

by:Busbar
ID: 24028964
0
 

Author Comment

by:netstarukltd
ID: 24029019
Busbar, I have the below link that I'm looking at. Will also look at your link.
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.1_19_ea1/configuration/guide/swspan.html

Rqutwein, mirriroring the port where the firewall is connected would only show internet bound traffic and responses to it. Plugging an unswitched hub in that port and putting the firewall and the monitoring device into that hub will achieve the same thing. However, If any other random junk is being generated on the network that is not internet bound, I wouldn't be able to see that this way which is why I wanted to mirror all ports onto one.

Thank you both for the quick responses though.
0
 
LVL 8

Accepted Solution

by:
Sniper98G earned 250 total points
ID: 24029469
If you want to see all traffic you would usualy mirror the vlan to a port.

monitor session 1 source vlan X
monitor session 1 destination interface fastEthernet X
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows NLB support on Cisco Nexus 9000 1 99
Split my switch into 2 switches 4 49
Help creating a custom privilege level in a Cisco switch or router 3 48
SMPS issue 1 41
#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question