IDS Module in C6K

[paul.stephens]

Hi

We have two cat6k in the core with a layer 3 routed link between. The design is such that if an uplink fails the vlan on the msfc goes down, this is due to the vlans being unique on each switch in the network.

My question is though when we install the ids module it has a trunk connected to each vlan and this keeps the msfc interface up during a link failure. Is there a way to have another vlan that is a span destination and then put the ids port in that vlan without having it trunk ??

[hadbou]

Yes, I think this is possible. Check out the following URL

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/cfgnotes/idsm_4_0/smchap3.htm

[marcabal]

You could try using the RSPAN functionality. You would span the traffic to the RSPAN then configure the IDSM port as an RSPAN destination port.

You would then need to clear all vlans from the IDSM's trunk port except the one RSPAN vlan.