Solved

mirror ports

Posted on 2014-03-12
3
302 Views
Last Modified: 2014-04-09
I need to mirrors 3 ports, 2 on sw1 and the other one on sw2. The system that monitors the ports is on sw1. This is all Cisco Catalyst 3750.
I have no problem to mirror the 2 ports on sw1 and send it to the port destination (fa0/1) where the monitor system is. I am not sure how to mirror the port on sw2 to sw1 (fa0/1). Any thoughts would be greatly appreciated.
0
Comment
Question by:leblanc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 17

Accepted Solution

by:
lruiz52 earned 250 total points
ID: 39925570
For sw2 to sw1 you can try RSPAN you can check link below for more info.

https://supportforums.cisco.com/document/139236/understanding-spanrspanand-erspan
0
 
LVL 12

Assisted Solution

by:Infamus
Infamus earned 250 total points
ID: 39929994
In order to configure RSPAN, you need to create RSPAN vlan and it has to be lower than vlan # 1005.

For example;

config t
vlan 300
remote span
end

Switch2
monitor session 1 source interface fax/x rx
monitor session 1 destination remote vlan 300
end

Switch1
monitor session 1 source remote vlan 300
monitor session 1 destination interface fa0/1
end

Also all of the conditions below must met.

1.The RSPAN VLAN should be allowed in ALL trunks between the involved switches (Source and Destination switches in this case);


2.If you have enabled "pruning" in your network, remove the RSPAN VLAN from the pruning, with the command: switchport trunk pruning vlan remove <RSPAN VLAN ID> under the interface configure as trunk;
0
 
LVL 1

Author Comment

by:leblanc
ID: 39930852
I have 2 ports on sw1 that need to be mirrored to fa0/1 as well. I guess the only way to do it is to get monitor session 2... Correct?


According to the Cisco TAC, you cannot have the same destination for different span session. So the below is not possible. Is that true?

sw1:
monitor session 1 source remote vlan 500
monitor session 1 destination interface fa0/1
monitor session 2 source fa0/10,fa0/20
monitor session 2 destination interface fa0/1
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question