10-19-2017 04:55 AM - edited 03-05-2019 09:19 AM
Hi,
I am new to creating a SPAN. When creating a span port destination on a Catalyst switch such as a 6509, does the destination port need to be setup as routed port (no switchport) or a switch port (eg: switchport, switchport access vlan x). The source port will be setup to capture VLAN and physical Interface traffic.
thanks.
10-19-2017 04:57 AM - edited 10-19-2017 05:14 AM
Hi
The destination port (if you are going to connect a server or PC) should not have any configuration, it should be configured by default.
monitor session 1 source interface g1/x both
monitor session 1 destination interface g1/Y
or
monitor session 1 source vlan X both
monitor session 1 destination interface g1/Y
interface g1/Y
description SNIFFER
no shutdown
* both is receiver/transmitter by default. Port and VLAN as source on the same session is not recommended. You will need 2 sessions.
https://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/10570-41.html
Hope it is useful
:-)
10-19-2017 05:02 AM
Thank you so much Julio. This was really helpful.
10-19-2017 05:04 AM
Hi
Im glad to hear that, it was a pleasure,
Have a great day
:-)
10-19-2017 05:10 AM - edited 10-19-2017 05:13 AM
Hi
Just a recommendation, try to don't mix VLAN and physical ports on the same session.
The best option is create 2 sessions.
monitor session 1 source interface g1/x both
monitor session 1 destination interface g1/Y
monitor session 2 source interface VLAN X both
monitor session 2 destination interface g1/Y
Or if you are going to monitor the VLAN X from a physical port like a trunk, you can make a filter.
:-)
10-19-2017 08:19 AM
Hi Julio,
I wont. thanks for the suggestions.
10-19-2017 08:22 AM
You are welcome
:-)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide