1

So here is the deal, I have a server on switch A where port 3 is monitoring traffic for most of the ports on switch A. However I have other users on switch B that needs to have port 3 on switch A monitor as well. Is this possible? I have been reading about rspan but doesnt seem to work.

Switch A:

monitor session 1 source interface fast0/1 - 2
monitor session 1 source interface fast0/4 - 46
monitor session 1 destination interface fast0/3

(this works great for switch A, I need a solution to get switch B to also have some ports sent to port 3 on switch A for monitoring.)

Onxx,

All the traffic on switch A is fine, there will be about 10-15 ports on switch B that I need to send to fa0/3 on switch A as the destination. I have the switches connected with a ethernet cable with a trunk port on both switches on port 48 on switch B and A and port 47 on A connects to our sonicwall. So I am assuming they are daisy chained?

What if I did the following:

Switch A
monitor session 1 source interface fast0/1 - 2
monitor session 1 source interface fast0/4 - 46
monitor session 1 destination interface fast0/3
Put all of the ports on vlan 10 because I made an rspan vlan 10

On switch B

monitor the ports I need will say 1-10

monitor session 1 source interface fast0/1 - 10
monitor session 1 destination remote vlan 10
as a prerequisite I would have created vlan 10 as a rspan vlan on switch B.

Switch A

Monitor session 1 destination remote vlan 10

Would this work?

By the way I am working with cisco catalyst 3560 switches.

1
  • Hi Matt, just a few quick questions. Are you wanting all traffic sent to the user on switch B? how are your switches configured? Are they stacked on daisy chained or Vlan routed? Please update your question.
    – onxx
    Dec 5, 2012 at 19:21

1 Answer 1

1

Thanks for updating the question and sorry for the late response.

Try this configuration instead. Just make sure the VLan ID match up and are pingable to from both switches.

======Taken from Cisco.com Rspan=====

local switch.


c3750(config)#monitor session 1 source vlan < Remote RSPAN VLAN ID >
c3750(config)#monitor session 1 source vlan 5
c3750(config)#monitor session 1 destination interface fastethernet 0/3

On the remote switch, use this configuration:

c3750_remote(config)#monitor session 1 source vlan 7
c3750_remote(config)#monitor session 1 destination remote vlan
===== End of line ======

Hope this helps.

Check this out Cisco CCNA this will bring you up to speed on the basics as a junior.

Hi Matt, Here is some extra information you should look into; these links will in understanding of how Vlans work and how to make them work together. They are both good sources of information and should be easy to follow. You dont need to use VTP for you current environment.

Additonal reading materials:

Cisco press Vlans Creating Ethernet VLANs on Catalyst Switches

Cheers,
Onxx

13
  • do I need to put all the other monitored ports on vlan 10 as well? example: interface range fastethernet0/4 - 45 ???
    – Matt
    Dec 6, 2012 at 21:00
  • Also I see you are using vlan 5 on the local switch and 7 on the remote switch, the rspan vlan on my switches are 10 does it matter?
    – Matt
    Dec 6, 2012 at 21:03
  • no on the local switch you can specific which ints you want plus specify a VLan. It doesn't matter that is just an example. You can specify multiple different source traffic i.e. ints and vlans. It might be easier to put everything you want to monitor into one or 2 vlans. I would do a simple test with the remote vlan first to make sure you are getting the right traffic.
    – onxx
    Dec 6, 2012 at 21:07
  • I tried the commands you suggested and not my monitor port is not receiving any traffic. i did the followg: local switch: monitor session 1 source vlan 10 monitor session 1 destination interface fastethernet 0/3 Remote switch: monitor session 1 source vlan 10 monitor session 1 destination remote vlan 10
    – Matt
    Dec 6, 2012 at 21:11
  • Keep in mind I had removed my command i had in there previously before your suggestion: Switch A monitor session 1 source interface fast0/1 - 2 monitor session 1 source interface fast0/4 - 46
    – Matt
    Dec 6, 2012 at 21:15

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .