cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

686
Views
0
Helpful
3
Replies
craig.corbett
Explorer

Cisco IPS 4255 Monitoring mode issue

Hi all,

We have a Cisco IPS device in monitoring mode, monitoring 2 segments of traffic via spanned ports on two different 3750-x switches (inside and DMZ). After a period of say 2-3 hours the ports just stop passing traffic to the IPS device. To check there still is traffic we have a laptop connected on another port running wireshark and the port connected to the laptop never fails. I need to remove and re-add the span port config in order for the traffic to start flowing to our Cisco IPS again. I am not able to see in your syslog and reason for this.

Any comments / suggestions greatly appreciated.

Thanks.

3 REPLIES 3
craig.corbett
Explorer

These are the commands I need to issue with the device stops receiving packets from the spanned ports:

no monitor session 1 source interface Gi1/0/24 both
no monitor session 1 destination interface Gi1/0/1

monitor session 1 source interface Gi1/0/24 both
monitor session 1 destination interface Gi1/0/1

Thanks.

what is the config of the destination-port Gi1/0/1?

Sent from Cisco Technical Support iPad App

The only config is port fast. No vlan no trunk, no switch port config etc.

Thanks.

Content for Community-Ad