03-31-2020 07:55 AM
Our primary Solar Winds engineer is trying to configure Solar Winds to monitor the status of a SPAN port on a switch. The port, of course, is in up/down (mirroring) state. Because of this Solar Winds sees the port as down. Since this traffic is destined to an IDS that we don't manage we need to be able to monitor the status of this SPAN port. Any thoughts?
TIA,
Chuck McFadden
Solved! Go to Solution.
03-31-2020 11:04 AM
Hi,
If you don't want to make the port UP/UP (you could create a PACL and actually deny all ingress traffic anyways), look here for the SPAN MIB's, see if you can find it:
Regards,
Cristian Matei.
03-31-2020 08:05 AM
Hi,
When you configure the SPAN destination, at the end, do you have the "ingress" or "learning" options available?
Regards,
Cristian Matei.
03-31-2020 09:09 AM
The destination config is as follows:
monitor session 23 destination interface Gi1/0/23 encapsulation replicate
ingress is an option.
Thank you!
Chuck McFadden
03-31-2020 10:35 AM
For clarity, ingress is an option however I don't want to receive incoming traffic on my monitor session destination port. The device connected to the monitor session is an IDS and should only receive traffic.
Thanks again,
Chuck McFadden
03-31-2020 11:04 AM
Hi,
If you don't want to make the port UP/UP (you could create a PACL and actually deny all ingress traffic anyways), look here for the SPAN MIB's, see if you can find it:
Regards,
Cristian Matei.
03-31-2020 11:32 AM
Thank you!!
I created a PACL denying inbound and turned ingress on for the local span. Works perfectly, thank you for your help!
Chuck McFadden
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide