[c-nsp] question about rspan sessions

[Voll, Scott]

Ovidiu--

Source is where the port or vlan is that you want to sniff.

Destination is the port that is going to take the sniffed traffic and
let you look at the data.


This is my config off my cat 6509:

monitor session 1 destination interface Fa3/44

monitor session 1 source remote vlan 202

monitor session 2 source vlan 102 rx

monitor session 2 destination remote vlan 202

Session 2 moves all rx traffic to my RSPAN Vlan from my voice Vlan

Session 1 moves all my RSPAN Traffic from the RSPAN Vlan to the computer
to put all the packets back together to listen in on the TAC calls.  

This is my config from my Cat 3550:

monitor session 1 source vlan 102 rx

monitor session 1 destination remote vlan 202 reflector-port Fa0/24

Session 1 moves all Voice traffic (rx only) to my RSPAN Vlan via the
reflector port F0/24.  

Using RSPAN on a remote switch means that you loose a port.  It makes
F0/24 unusable.  But it routes all the traffic back over to my CAT 6509.
The RSPAN Vlan is only for transporting the SPAN Traffic.  You can not
use it for anything else.

Hope that helps.

Scott

-----Original Message-----
From: ovidiu neghina [mailto:ovidiu at ipnet.ro] 
Sent: Friday, August 27, 2004 8:28 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] question about rspan sessions 

on cisco web site :
SPAN and RSPAN Session Limits

You can configure (and store in NVRAM) one local SPAN session or
multiple RSPAN sessions on a switch. The number of active sessions and
combinations are subject to these restrictions:
SPAN or RSPAN source (rx, tx, both): 1 active session limit. (SPAN and
RSPAN are mutually exclusive on a source switch).
RSPAN source sessions have one destination per session with an RSPAN
VLAN associated for that session.
Each RSPAN destination session has one or more destination interfaces
for each RSPAN VLAN that they support.
RSPAN destination sessions are limited to two, or one if a local SPAN or
a source RSPAN session is configured on the same switch.
---------

what does it mean a source session and  destionation session ?
they say that : "An RSPAN session is an association of source ports
across your network with an RSPAN VLAN. The destination source is the
RSPAN VLAN."
but i don't undersand what is a source session and a destination session


help please


_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/