cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
486
Views
0
Helpful
3
Replies

SPAN question

campbech1
Level 1
Level 1

Having an issue with our WLC devices showing we have APs disassociating at an alarming rate.

TAC has asked us to setup a debug command on the wireless lan controllers and that is working great. They also asked us to setup SPAN to monitor traffic.

I have setup the SPAN as follows:

monitor session 1 source interface Po10

monitor session 1 filter vlan 3 , 7 , 9 , 11 , 3004

monitor session 1 destination interface Gi9/32

GI9/32 is setup as follows:

DC-Core#sh run int gigabitEthernet 9/32

Building configuration...

Current configuration : 217 bytes

!

interface GigabitEthernet9/32

description portmonitor

switchport

switchport access vlan 3

switchport mode access

no ip address

logging event link-status

spanning-tree portfast

spanning-tree guard root

end

DC-Core#

I am able to see all broadcast traffic but no unicast traffic..

Any ideas? TAC is saying "it should work".

3 Replies 3

campbech1
Level 1
Level 1

Anyone?

try removing filter vlan 3, why are u using access vlan 3 under GE9/32 ?

robert.horrigan
Level 2
Level 2

Are you just using a windows box with shark? Make sure your nic supports trunking

Review Cisco Networking for a $25 gift card