08-12-2020 07:49 AM
Hello Cisco Community!
I've recently began encountering Cisco switches performing SPAN/ Mirroring on ports to make a copy of sets of traffic and exporting them for collection and analysis. While I feel like I understand most of how this process functions, I can not seem to find documentation or forums supporting or denying if the device collecting from the SPAN port is able to communicate back to the network it is collecting on. Does a SPAN port block all outbound traffic from the collection device? Does assigning an IP address to the collection device change anything?
Thanks you to anyone who is able to help me, first time posting!
Solved! Go to Solution.
08-12-2020 12:46 PM
SPAN Port can not take any action, If you want to take any action the device capturing, then you need to have 2 interfaces to the device, one will capture and other interface connect to the network will have communication to take action?
is this what you looking?
08-12-2020 09:56 AM
- A span destination is a passive dumb-end, it doesn't even block traffic from the span-destination, it just sends span-traffic to it.
M.
08-12-2020 12:46 PM
SPAN Port can not take any action, If you want to take any action the device capturing, then you need to have 2 interfaces to the device, one will capture and other interface connect to the network will have communication to take action?
is this what you looking?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: