11-23-2002 07:56 AM - edited 03-09-2019 01:10 AM
Hello, We have a new project with IDS and We wants to install the IDS 4250 (chassis, s/w, SHH, 1000BaseSX w/ SC connector) in our LAN We have a Catalyst 5500, with a 1000BaseSX port. We want to monitor the traffic of 6 VLAN or even more in this 1000BaseSX port of the Catalyst 5500, it has sense? or is better to install an IDS 4235 for each VLAN?
We also are going to use the VMS 2.1 to manage this IDS.
Do We need something else?
We thanks to All for the advice!
11-25-2002 08:42 AM
Look at the limitation on the Cat5000 for creating Span Session. There is a limit on the chassis.
Calculate the sum of Tx and Rx of all ports on your 6 VLAN... if the value exceed 1 Gbit... this will not work.
11-27-2002 02:36 PM
Sergio,
What you really need to watch is the sum of the real peak rates (in duplex mode) of all the ports of the Vlan's you need to monitor in the worst operational scenario of your network. If that sum exceed 1GB, the switch will drop packets after the Rx queue get full. In that case, the IDS 4250 will miss these packets. With the IDS 4235 the same math applies with each Vlan and a peak rate of 200Mbps. You also need to consider the throughput of each IDS device (500MB and 200MB) for your calculations.
Regards,
Miguel
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide