Over the weekend I enabled port spanning on the switches. I have included some screen shots of the monitor configuration on the switches. However there are two things I noticed. One the destination port (recording server) no longer has internet access since it was configured to be the destination port, if i plug that server into another port internet comes back. I was able to create the source on another switch and point it to the destination however if I do the same config on our third switch I lose network connection and internet is down, so for this reason I have left the monitoring off on our 3rd and 4th switches. Here are the commands I used to configure.
Sightly1 (main switch with the revcord server connected to FA0/3 All four switches at 3560's.
sightly1#conf t vlan 10 remote-span (this creates the vlan 10 as a remote span and propagates to all the other switches connected to this one) monitor session 1 source remote vlan 10 monitor session 1 destination interface fast 0/3
Sightly2 switch sightly2#conf t monitor session 1 source interface fast 0/1 - 46 monitor session 1 destination remote vlan 10
Appstack1 switch appstack1#conf t monitor session 1 source interface fast 0/1 - 46 monitor session 1 destination remote vlan 10 (however once the source monitoring is enabled I lose network connection same as on Appstack2. This only seems to occur when I have more then one other switch sending info over the remote span.
I ran a no monitor session 1 all command to remove the monitoring on appstack1 and 2 switches.
Appstack2 switch appstack1#conf t monitor session 1 source interface fast 0/1 - 46 monitor session 1 destination remote vlan 10