cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3667
Views
0
Helpful
1
Replies

SPAN for IDS

Michal Valach
Level 1
Level 1

Hello all,

Can somebody help to understand our solution please?

We have dedicated aggregation switch for SPAN, to aggregate access SPAN ports.

1) How can I check that all access switches are SPAN properly? 

2) Is local SPAN configuration correct or we must use remote SPAN?

 

When I check MAC addresses on aggregation switch I see MAC's only on port 1/3 and 1/2 and nothing is on 1/4.

What is the best way to confirm SPAN works?

1 Reply 1

Michal Valach
Level 1
Level 1

Picture 

Review Cisco Networking for a $25 gift card