dude02
asked on
Cisco Monitor Session - SPAN
I am trying to setup a Cisco monitor session. The source ports are g1/4 which is the inside interface for my Cisco ASA. The destination port G7/41 is on vlan 254. This is what I have so far.
interface GigabitEthernet1/4
description ASA5515X-Primary-Inside
switchport access vlan 256
switchport mode access
spanning-tree portfast
interface GigabitEthernet7/41
description FP Network Agent
switchport access vlan 254
switchport mode access
monitor session 1 source interface Gi1/4
monitor session 1 destination interface Gi7/41
monitor session 1 filter packet-type good rx
For testing purpose I have a user going to an outside ftp site and I have Wireshark on G7/41 which shows no ftp activity. I am also not seeing any http or https activity. So I know I am missing something. Any assistance will be greatly apperciated.
interface GigabitEthernet1/4
description ASA5515X-Primary-Inside
switchport access vlan 256
switchport mode access
spanning-tree portfast
interface GigabitEthernet7/41
description FP Network Agent
switchport access vlan 254
switchport mode access
monitor session 1 source interface Gi1/4
monitor session 1 destination interface Gi7/41
monitor session 1 filter packet-type good rx
For testing purpose I have a user going to an outside ftp site and I have Wireshark on G7/41 which shows no ftp activity. I am also not seeing any http or https activity. So I know I am missing something. Any assistance will be greatly apperciated.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Just run a packet capture on the ASA?
P
P
Thank You