cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
304
Views
0
Helpful
2
Replies

IDS

ishwar
Level 1
Level 1

I have to deploy ids4215.and we are using cisco 1900 catalyst switch.

Now can anybody suggest me how to connect sniff interface(monitor) to switch ...should I configure the switch port??

Rgds

Ishwar

2 Replies 2

dblairii
Level 1
Level 1

The process is as simple as: Assigning one port on your switch to be the 'monitor' port, and specifying which ports will replicate their data to the 'monitor' port. Then you just cable your ids sniffing interface to the 'monitor' port.

Follow this link for specific information on configuring a 1900 series switch....

http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v9x/19icg9x/index.htm

Hope that helps.

YES, you have to configure a SPAN monitoring port see the on the foolowing link under the section - Port Monitoring (Switched Port Analyzer):

http://www.cisco.com/en/US/products/hw/switches/ps574/products_installation_and_configuration_guide_chapter09186a008007d9b4.html#xtocid1273957

Otherwisde you will not see all the traffic passing.

sincerly

Patrick