So here is the deal, I have a server on switch A where port 3 is monitoring traffic for most of the ports on switch A. However I have other users on switch B that needs to have port 3 on switch A monitor as well. Is this possible? I have been reading about rspan but doesnt seem to work.
monitor session 1 source interface fast0/1 - 2 monitor session 1 source interface fast0/4 - 46 monitor session 1 destination interface fast0/3
(this works great for switch A, I need a solution to get switch B to also have some ports sent to port 3 on switch A for monitoring.)
All the traffic on switch A is fine, there will be about 10-15 ports on switch B that I need to send to fa0/3 on switch A as the destination. I have the switches connected with a ethernet cable with a trunk port on both switches on port 48 on switch B and A and port 47 on A connects to our sonicwall. So I am assuming they are daisy chained?
What if I did the following:
monitor session 1 source interface fast0/1 - 2
monitor session 1 source interface fast0/4 - 46
monitor session 1 destination interface fast0/3
Put all of the ports on vlan 10 because I made an rspan vlan 10
On switch B
monitor the ports I need will say 1-10
monitor session 1 source interface fast0/1 - 10
monitor session 1 destination remote vlan 10
as a prerequisite I would have created vlan 10 as a rspan vlan on switch B.
Monitor session 1 destination remote vlan 10
Would this work?
By the way I am working with cisco catalyst 3560 switches.