SPAN and RSPAN with VLAN source?

SPAN and RSPAN with VLAN source?

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
SPAN and RSPAN with VLAN source? joeblow 02-16-2005
Posted by joeblow on February 16, 2005, 5:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I've got six 3550-24 switches with three vlans vlan_a vlan_b and vlan_c
set up across all six 3550s. They are interconnected with gigabit fiber.

I want to monitor vlan_a with a fluke lanmeter. I'm plugging the lanmeter
into fastethernet 0/24 on the switch in the lab (which is not the cluster
master).

Can I get away with:

SW_LAB # mon sess 1 source vlan 2 rx

(2 is the vlan_a vlan number)

Or do I need to set up rspan on the other 5 3550's as well to see all
vlan_a traffic?

Thanks!




Posted by Walter Roberson on February 17, 2005, 3:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options
:I've got six 3550-24 switches with three vlans vlan_a vlan_b and vlan_c
:set up across all six 3550s. They are interconnected with gigabit fiber.

:I want to monitor vlan_a with a fluke lanmeter. I'm plugging the lanmeter
:into fastethernet 0/24 on the switch in the lab (which is not the cluster
:master).

:Can I get away with:

:SW_LAB # mon sess 1 source vlan 2 rx

:Or do I need to set up rspan on the other 5 3550's as well to see all
:vlan_a traffic?

You mention that the 3550's are connected via gigabit fibre, but you
din't mention the magic word "gigastack". I was looking at the
documentation just yesterday; as best I can tell, 3550's that are
connected via plain GBICs act as independant devices; putting them into
a "cluster" just makes administration easier. When you use "gigastack"
GBICs, though (easy to tell, there is two connections for each
gigastack GBIC instead of a single connection) then the 3550's are
truly stacked together.

If stacked, you could expect to be able to span all of the vlan 2
traffic, but if merely cross-connected then you would only see the vlan
2 traffic that needed to go as far as the spanning switch in order to be
handled.
--
Sub-millibarn resolution bio-hyperdimensional plasmatic space
polyimaging is just around the corner. -- Corry Lee Smith


Posted by Jayesh Sharma on February 16, 2005, 11:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi..

First of all understand.. wht stacking is..and how it is different from
cascading.. When u stack 3550's it just extends the switching fabric
across multiple switches.. so it still acts as a single switch.. When u
cascade two switches.. then u hv to enable trunking between two
switches.. considering u hv multiple VLANS...

U need RSPAN when u hv trunking enabled between two switches.. ( or if
they are cascaded) but this is not the case in stacking .. hence RSPAN
is not needed..

The configuration mentioned should work.. Also i hope u must hv
specified the second command to specify destation as the port on which
sniffer is connected...


~ Jay :o)



Posted by thrill5 on February 21, 2005, 12:23 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
retrieved - head follows
From: anybody43@hotmail.com
Newsgroups: comp.dcom.sys.cisco
Subject: Re: 'Wargames' Ping Utility
Date: 21 Feb 2005 09:33:34 -0800
Organization: http://groups.google.com
Lines: 14
NNTP-Posting-Host: 217.154.232.222
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1109007219 25912 127.0.0.1 (21 Feb 2005 17:33:39 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Mon, 21 Feb 2005 17:33:39 +0000 (UTC)
User-Agent: G2/0.2
Complaints-To: groups-abuse@google.com
Injection-Info: z14g2000cwz.googlegroups.com; posting-host=217.154.232.222;
posting-account=VdxokQwAAABYu9ks4y4eJiAwxWWXZDJh
Path:
alt.athenanews.com!feed5.newsreader.com!newsreader.com!border2.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!news.glorb.com!postnews.google.com!z14g2000cwz.googlegroups.com!not-for-mail
Xref: 1650-01 comp.dcom.sys.cisco:197461


Similar ThreadsPosted
Combined SPAN and RSPAN July 10, 2006, 6:18 am
RSPAN and its own VLAN February 21, 2005, 6:12 am
port span vlan May 19, 2008, 8:59 pm
Broadcast, ip forward, vlan, source addr? November 10, 2004, 11:41 pm
RSPAN no workie... December 16, 2005, 6:04 pm
4500 RSPAN ?? Does it work? January 30, 2006, 4:06 pm
RSPAN Ingress Problem July 25, 2007, 9:11 am
switch newbie - rspan over wan possible? August 6, 2008, 9:38 am
RSPAN Trunked port - 6509 October 27, 2005, 4:46 pm
RSPAN Trunked port - 6509 October 27, 2005, 4:46 pm

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map