03-10-2011 05:21 AM - edited 03-06-2019 04:00 PM
Hi Experts,
We have a server connected on 1Gig port with a traffic load of 900mb tx and 900mb rx. For business requirement we need to span rx and tx traffic to a destination of 1gig interface on same switch. Since total traffic is more than 1Gb, it is getting dropped in the switch. Is there any way we can monitor tx and rx seperately and give in to 2 different physical ports?
Thanks in advance..
03-10-2011 05:48 AM
Yes, when you setup the SPAN session, you can specify rx, tx, or both. Both is the default.
Example.
Monitor session 1 source int gi4/1 rx
monitor session 1 destination int gi4/2
monitor session 2 source int gi4/1 tx
monitor session 2 destination int gi4/3
Hope to Help.
03-10-2011 07:28 AM
I already tried this and got no luck. When you chose a port for a monitor session, you cannot choose the same port for other monitor session.
Is there any other way to do it?
Thanks for the reply..
03-10-2011 07:58 AM
Depending on the software release you are running you have an option to set a port-channel as a SPAN destination. If you do that you can bundle two or more Gig interfaces in a port-channel and send the SPAN traffic out of the port-channel. An obvious thing to consider is how you will process it, maybe your probe can take in multiple interfaces.
Atif
03-10-2011 10:22 PM
Hello
Thanks for the reply.
I have tried setting the destination interface as port-channel but no luck as the swithc is not taking the port-channel in output.
monitor session 2 source vlan 24
monitor session 2 destination interface Gi2/21
Switch(config)#monitor session 2 destination ?
analysis-module SPAN destination analysis-module
anomaly-detector-module SPAN destination anomaly-detector-module
interface SPAN destination interface
intrusion-detection-module SPAN destination intrusion-detection-module
remote SPAN destination Remote
Switch(config)#monitor session 2 destination inter
Switch(config)#monitor session 2 destination interface ?
GigabitEthernet GigabitEthernet IEEE 802.3z
TenGigabitEthernet Ten Gigabit Ethernet
Switch(config)#monitor session 2 destination interface
This is not working
IOS details:
sup-bootdisk:s72033-advipservicesk9_wan-mz.122-18.SXF17.bin
BOOTLDR: s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(18)SXF17, RELEASE SOFTWARE (fc1)
Thanks
03-11-2011 01:45 AM
IBMBHARTISO wrote:
Hello
Thanks for the reply.
I have tried setting the destination interface as port-channel but no luck as the swithc is not taking the port-channel in output.
monitor session 2 source vlan 24
monitor session 2 destination interface Gi2/21Switch(config)#monitor session 2 destination ?
analysis-module SPAN destination analysis-module
anomaly-detector-module SPAN destination anomaly-detector-module
interface SPAN destination interface
intrusion-detection-module SPAN destination intrusion-detection-module
remote SPAN destination RemoteSwitch(config)#monitor session 2 destination inter
Switch(config)#monitor session 2 destination interface ?
GigabitEthernet GigabitEthernet IEEE 802.3z
TenGigabitEthernet Ten Gigabit EthernetSwitch(config)#monitor session 2 destination interface
This is not working
IOS details:
sup-bootdisk:s72033-advipservicesk9_wan-mz.122-18.SXF17.bin
BOOTLDR: s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(18)SXF17, RELEASE SOFTWARE (fc1)
Thanks
That is why I had written 'depending on the software release you are running' :-). You seem to be running 12.2(18)SXF17. This feature was introduced in 12.2(33)SXH I believe. If you want to upgrade then make sure you do a proper analysis of the new code specific to your operating environment.
Atif
03-11-2011 02:14 AM
OK Thanks Atif.
Let me test this and will update once i am through....
Thanks a lot.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide