SPAN PORT MIRRORING

[tanner.zaitt]

Hello, my question is about SPAN in local switch.

My example is with 24 gigabits Cisco switch!

To port gi0/1 is connected Server!

I want to see all traffic  in port gi0/1 in port gi0/2.

I run two commands:
monitor session 1 source interface gi0/1 both
monitor session 1 destination interface gi0/2.

When I use Sniffer I see the traffic!

My question is  If in this port gi0/2 I connect computer, the client application in computer will see services from  Server?

Or I am wrong?

I want to do port mirroring because I want to connect  client computer 2.
But with SPAN is this possible?

[mlund]

Hi

No it won't work. A span port will not forward traffic from the computer.

/Mikael

[tanner.zaitt]

Yes I read about it.

Some one can tell me how RSPAN work?

Between two switches I successfully did it but between multiple switches I can't do it.....

I try with Packet Tracer.

My example is with 3 switches.

Switch A#gi0/5 ------ Switch B -------Switch C#gi0/5

I want gi0/5 from switch A to forward (copy) traffic to gi0/5 in switch C.

I create in 3 switches vlan 900 and I run option remote-span inside vlan 900.

I create monitor session in switch A and I run these commands:
monitor session 1 source interface gigabitEthernet 0/5 both
monitor session 1 destination remote vlan 900 reflector-port gigabitEthernet 0/24

In switch B I only create vlan 900 for remote-span.

In switch C I run these commands:
monitor session 2 source remote vlan 900
monitor session 2 destination interface gigabitEthernet 0/5

Between 3 switches I run switchport mode trunk.


With 2 swtiches this work, but more than 3 include 3 rspan doesn't work.

Can you help me?