TCP reset packet issue on Cisco 6509 switch

[wasimujawar]

Hi,

We are connecting a malware prevention appliance to a SPAN port on cisco switch 6509 which uses IOS firmware.

When the Malware appliance send TCP RST packet to the switch, it does not accept it.

Please help with what additional config to be done on the switch or the span sport so that the packet is received by the switch.

[Vasilii Mikhailovskii]

Hello, Wasim.

No sure if 6500 supports the feature, but 3750 does:

monitor session destination int f0/1 ingress vlan 100

This last part allows SPAN port to send traffic into VLAN 100 (more details here -

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_52_se/configuration/guide/3750scg/swspan.html#wp1260596)