Need help/confirmation on RSPAN multiple switches configuration

I'm going to install an IDS sensor to monitor some network segments. I've been reading some cisco documentation and I htink I've got it right, but wanted to have the config checked, as well as check if an assumption I've made is correct.

Hardware:
Switch 1 & 2 - Cisco Catalyst 3560
Switch 3 - Cisco Catalyst 3130G (Blade switch)

See picture for simple switch configuration, as well as vlan configuration. I will connect the sniff port on the IDS to gi0/48 on switch 1.

Assumption: A monitor session #1 at one switch is not the same as monitor session #1 on another switch, correct?

Presuming the above is correct about monitor session numbering, and that I want to have all traffic going into and coming out from devices/servers in vlan 30,40 and 50; this is what my config should be like, please correct me or verify it's correct:

Switch 3:
 vlan 99
  remote-span
 monitor session 1 source vlan 30 , 40 , 50 both
 monitor session 1 destination remote vlan 99

Switch 2:
 vlan 99
  remote-span
 monitor session 1 source vlan 30 , 40 , 50 both
 monitor session 1 destination remote vlan 99

Switch 1:
 vlan 99
  remote-span
 monitor session 1 source vlan 30 , 40 , 50 , 99 both
 monitor session 1 destination interface gi0/48

(not directly important, but my switch 1 is also vtp domain server, while sw2/3 is vtp client, so I manage my vlans on sw1)
20090428---Cisco-RSPAN-02.jpg
LVL 1
JofferAsked:
Who is Participating?
 
JitparConnect With a Mentor Commented:
Assumption: A monitor session #1 at one switch is not the same as monitor session #1 on another switch, correct?
Yes, this is correct. Both will have seperate sessions.
The config is absolutely correct. For further reference, you can use the following link.
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.1_19_ea1/configuration/guide/swspan.html#wp1081130 
 
 
 


0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.