topic Re: How to best use IDSM in promiscuous mode? in Network Security https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894623#M85695 <HTML><HEAD></HEAD><BODY><P>I'm on 6.0 I don't remember if 5.x did inline vlan pairs. </P></BODY></HTML> Fri, 21 Sep 2007 14:21:03 GMT gmherring 2007-09-21T14:21:03Z How to best use IDSM in promiscuous mode? https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894620#M85692 <P>Hi folks</P><P></P><P>I need some input and ideas how to best set up my IDSM2 module.</P><P>Today I have the module set up to capture traffic from the 6513 using SPAN in both directions and two different firewalled VLANs as sources. The destination is data-port 1 on the IDSM. This setup is working fine but I'm curious as how to best use the second data-port. Our 6513 runs IOS 12.2(18)SXF3 and has a limit of only one SPAN session set up to capture an entire VLAN in both directions.</P><P>My idea was to use the second data-port as SPAN destination for our external/non-firewalled VLAN, but this isn't allowed.</P><P>Does anyone have or had a similar problem? Would using a VLAN access list with data-port 2 as destination be an option or are the dual IDSM interfaces mainly used for inline mode?</P><P></P><P>Regards</P><P>Fredrik Hofgren</P> Sun, 10 Mar 2019 10:48:05 GMT https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894620#M85692 hoffa2000 2019-03-10T10:48:05Z Re: How to best use IDSM in promiscuous mode? https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894621#M85693 <HTML><HEAD></HEAD><BODY><P>Fredrik,</P><P></P><P>I am using VACLs in the switch that has the IDSM. This will preserve your SPAN sessions. </P><P></P><P>You can specify which vlans go to which port on the IDSM.</P><P></P><P>We actually have our external vlan set up as an inline vlan pair on data port 2.</P></BODY></HTML> Fri, 21 Sep 2007 13:13:45 GMT https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894621#M85693 gmherring 2007-09-21T13:13:45Z Re: How to best use IDSM in promiscuous mode? https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894622#M85694 <HTML><HEAD></HEAD><BODY><P>Excellent</P><P>Might have a go at that idea with inline vlan pair for the external vlan. You using version 5.1 for the IDSM?</P></BODY></HTML> Fri, 21 Sep 2007 14:17:36 GMT https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894622#M85694 hoffa2000 2007-09-21T14:17:36Z Re: How to best use IDSM in promiscuous mode? https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894623#M85695 <HTML><HEAD></HEAD><BODY><P>I'm on 6.0 I don't remember if 5.x did inline vlan pairs. </P></BODY></HTML> Fri, 21 Sep 2007 14:21:03 GMT https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894623#M85695 gmherring 2007-09-21T14:21:03Z Re: How to best use IDSM in promiscuous mode? https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894624#M85696 <HTML><HEAD></HEAD><BODY><P>It does. Will try it next week</P></BODY></HTML> Fri, 21 Sep 2007 14:24:43 GMT https://community.cisco.com/t5/network-security/how-to-best-use-idsm-in-promiscuous-mode/m-p/894624#M85696 hoffa2000 2007-09-21T14:24:43Z