IPS 4270 with 6509 VSS in Promiscous mode

Mohammed Khair Khomakho — Sun, 10 Mar 2019 12:22:48 GMT

Dear all,

I am trying to figure out how to configure 2x IPS 4270 in promiscous mode with Cisco 6509 VSS:

I have attached the LLD core datacenter design including the IPS physical placement in my network.

The following points are my concerns in this design:

Shall I connect each of the IPS 4270's into VSS Chassis A and B, or I keep each IPS connected to different Chassis? (considering the SPAN port configuration on VSS and if I could encounted Asymmetric routing issue or not).
Can I use Etherchannel in either case (keep in mind it's promiscous mode), that means the destination interface on the VSS will be an Etherchannel interface, but does the Cisco IPS 4270 support Etherchannel while in promiscous mode?

I really appreciate your input on this matter guys.

Cheers

Mohammed Khair

IPS 4270 with 6509 VSS in Promiscous mode

haivrajesh — Mon, 27 Jun 2011 18:54:45 GMT

Hi,

1.You can Connect the each IPS into Chasis A and B That is Not aproblem .But While Configuring the RSPAN Monitor From A to B and B to A should monitor the both vlans ( i mean RSAPN A and B also vice versa in your config then it will give both out put even connectivity between IPs and chasisi one fails also)

2.IPS Supports the Etherchannel while in promiscous mode as well.

topic IPS 4270 with 6509 VSS in Promiscous mode in Network Security

IPS 4270 with 6509 VSS in Promiscous mode

IPS 4270 with 6509 VSS in Promiscous mode