SPAN for a VLAN

[inagaria]

Hi,

I would like to setup SPAN for a VLAN. 2 question I have are.

1. Does it matter if the destination port is part of the same vlan or not?

2. What is the cmd to cfg to setup SPAN port on 2950. I tried monitor session 1 source....but no luck.

Thanks,

Iltiaz

[nkhawaja]

hi,

it doesnot matter what vlan the destinaion port is in

the command should be

interface E1 (say this is your destination port)

port monitor FastEthernet0/23

port monitor VLAN1

thanks

Nadeem

[haleemk]

Dear Nadeem,

Pl clarify do we require both the command together or one at a time ?

port monitor FastEthernet0/23

port monitor VLAN1

Supposing my IDS sensor is connected at E1 interface and I want to monitor all the traffic coming from Internet router which is connected to Fastethernet0/23.My point is either we should monitor internet traffic or all the traffic/devices connected to VLAN1 but not monitor all of them together. I don't know which is good practice.

Regards

Haleem

[nkhawaja]

in your case, you just need

port monitor fastetherent0/23

the other command

port monitor vlan1 is needed only if you want to monitor all vlan1 traffic etc.