SPAN with RSPAN - Help !

[sdawson35]

                   Hi,

I have 2 x 3560 switches that are trunked across Port 8, I then have an inbound source connection on each of the Port 2's.

I need to capture the traffic from both of the Port 2's to a single port on one of the 3560's.

So

Switch A

Inbound Traffic = Port 2

Trunk = Port 8

monitor session 1 source interface Gi0/2

monitor session 1 destination remote vlan 901

Switch B

Inbound Traffic = Port 2

Sniffer = Port 7

Trunk = Port 8

monitor session 2 source interface Gi0/2

monitor session 2 destination interface Gi0/7

How do I get the span session from Switch A to destination interface on Switch B as well as the source on Switch B to destination on Switch B

Regards

Scott.

[Reza Sharifi]

Hi,

Have a look at the config guide for the 3560 series switches.  It has examples of SPAN and RSPAN with configs.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_52_se/configuration/guide/swspan.html#wp1081130

HTH

[skapadi]

Hi Scott,

You can use the monitor session session_number source command multiple times to configure multiple source ports.

So on Switch B, configure.

monitor session 2 source interface Gi0/2

monitor session 2 source interface vlan 901

monitor session 2 destination interface Gi0/7

or

monitor session 2 source interface Gi0/2 , vlan 901

monitor session 2 destination interface Gi0/7

HTH

-Subhash