I have configure my 3750 switch for span. In this switch my IPS 4255, Internet router and Pix firewall is connected.
Below mention is the span configuration
monitor session 1 source interface Gi1/0/1 - 3
monitor session 1 destination interface Gi1/0/5
now the problem is the that IPS capturing traffic twice once while going out and once while coming in.
I wana know how to configure monitor session that it only capture traffic that is coming from Internet. Not traffic that
is originating from inside of the network.
In switch port 1 Internet router is connected, port 2 is for firewall and three is for concentrator.
I m confuse about the span port configuration either Rx or Tx. Right it is both Rx and Tx.