IDS and 802.1q?

[ciscobloke]

Hi All,

Can 802.1q be used for monitoring with IDS? is so can someone guide me as to how it works and how its configured.

I have been searching for more information to no avail.. please help.

[Fernando_Meza]

Hi .. For IDS .. you would configure one interface on the IDS as the sensing (monitoring) interface. On the switch you would have to SPAN the trunk carrying the VLANs so that the destination of the SPAN points to the port where the IDS is connected. A second interface on the IPS can be used for TCP resets and you need to plug this one on another trunk port on the switch.

I hope it helps .. please rate it if it does !!!