cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
630
Views
0
Helpful
1
Replies

SPAN

Hello,

I want to monitor 2 vlans (Pix inside and Outside) with TCP Reset on the same switch 2950 and i have only one sensing interface on my sensor 4210 !

Is it possible to do that ?

Many thanks.

1 Reply 1

a.arndt
Level 3
Level 3

Sure you can. Assuming your only want to monitor two physical ports, just have them both use the same destination port and you’re good to go.

Info on configuring SPAN and RSPAN on a 2950 can be found here:

http://www.cisco.com/en/US/products/hw/switches/ps4916/products_configuration_guide_chapter09186a008017e528.html

The only caveat is watch out for your aggregate throughput value. If you exceed the maximum throughput of the IDS, which is a mere 45 mbps for an IDS-4210 IIRC, you'll drop packets. If these are lower end links however, you should be OK.

I hope this helps,

Alex Arndt

Review Cisco Networking for a $25 gift card