06-09-2015 08:31 AM - edited 03-08-2019 12:28 AM
I have a 3750 Cisco Switch on which I have configured a Local SPAN Session as follows:
Session 1
---------
Type : Local Session
Source Ports :
Both : Gi1/0/43-44
Destination Ports : Gi1/0/10
Encapsulation : Native
Ingress : Disabled
I have a laptop connected to port Gi1/0/10 with Wire Shark on it and the packets are not showing the correct MAC Address for the traffic.
How do I get the SPAN traffic to keep the identical packets and MAC addresses right through to the SPAN Destination port?
Thanks
06-09-2015 11:00 AM
Hi,
SPAN does not change the mac of the packet it is mirroring. So what is the difference you are seeing or what do you expect to see in capture.
Thanks,
Madhu
06-09-2015 11:50 AM
Hi Madhu,
Thanks for reply. The source ports of the SPAN port has 2 servers connected to them. They are the phone servers that our IP phones register to.
We have 2 core switches that have VLANs for different areas so the traffic is going: phone -- server -- switch -- core -- destination.
We are seeing the MAC address of the VLAN the servers are on, but, need to see the original MAC address of the actual phone that is sending the traffic.
Thanks,
Varina
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide