[cisco-voip] The CMM and SPAN

[Ray Burkholder]

The trick of doing this across switches and preventing replicated packets is
to:
 
a) when creating a vlan, use the extra command to turn it into a special
spanning/remote vlan
b) when using the monitor session command, use it in 'remote' mode, such as
what was provided in the example 
 
These two details will get you a single stream of packets to the
destinination monitoring port when running across multiple switches.

  _____  

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Ryan LaTorre
Sent: Monday, September 18, 2006 12:35
To: Voll, Scott; cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] The CMM and SPAN


Thanks for the ideas guys, I should've mentioned that I did implement a
successful workaround, so I do have recording operational right now. I just
don't like leaving things like this unresolved! Also, IPCCx 4.x upgrade is
in the planning stages, but I'm just trying to figure this out because it
seems like the switch is not operating as it should. I admit it could be my
config, but it's only two lines!
 
My config (that doesn't quite work):
monitor session 2 source interface Gi4/1 both (the CMM backplane port)
monitor session 2 destination interface Gig8/1 (the IPCCx monitor port)
 
The reason we're not spanning the VLAN is because when we do that I get two
copies of each frame on the TX side, since currently the CMM and the IP
phones are in the same VLAN.  This is using 12.2(18)SXF3 on the s720 and
12.4(7a) on the CMM. Pretty close versions, that's for sure.  Maybe it's not
a bug...
 


  _____  

From: Voll, Scott [mailto:Scott.Voll at wesd.org] 
Sent: Monday, September 18, 2006 11:18 AM
To: Ryan LaTorre; cisco-voip at puck.nether.net
Subject: RE: [cisco-voip] The CMM and SPAN



Is the layer three vlan interface on the Cat 6509?  If so, try to SPAN the
layer 3 interface rather then the CMM port.

 

What version of IOS are you using on the 65xx and the CMM?

 

I'm using 12.2(18)SXF4 and 12.4(7a) without problem

 

SPAN Config:

 

Vlan 102 is my Core Voice VLAN and 202 is my RSPAN

 

monitor session 2 source vlan 102

monitor session 2 destination remote vlan 202

monitor session 4 destination interface Fa3/44 <-- IPCCx Monitor server

monitor session 4 source remote vlan 202

 

 

Sh mon sess all

 

Session 2

---------

Type                   : Remote Source Session

Source VLANs           :

    Both               : 102

Destination RSPAN VLAN : 202

 

Session 4

---------

Type                   : Remote Destination Session

Source RSPAN VLAN      : 202

Destination Ports      : Fa3/44

 

Scott

 

PS.  All your agents are on the same vlan as your IPCCx server, right?

 

  _____  

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Ryan LaTorre
Sent: Monday, September 18, 2006 8:00 AM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] The CMM and SPAN

 

 

The other day I encountered what appears to be a bug, but I could not locate
anything in the bug navigator. 

Trying to SPAN the backplane port of a CMM module in a Cat 6500 with Sup720,
for the purposes of IPCCx recording/monitoring (in 3.x).  The SPAN
configuration is very straight forward (I believe) but I found that when I
SPAN both directions I receive only the transmit packets, resulting in only
recording one side of the conversation.  I confirmed this by changing the
SPAN source to receive only and NO packets were mirrored whatsoever.  From
what I can tell, it seems I can't SPAN packets coming from the CMM.

Are there any SPAN/CMM caveats I should be aware of, or does this really
sound like a defect? I didn't see anything in release notes or guides.

Thanks, 
Ryan 

  _____  

Privileged/Confidential Information may be contained in this message.
Disclosure to any person other than the named recipient is unauthorized.  If
you are not the intended recipient, please delete all copies of this
information and kindly notify the sender by reply email.  Opinions,
conclusions and other information in this message that do not relate to the
official business of UNIS LUMIN Inc. shall be understood as neither given
nor endorsed by it.  UNIS LUMIN Inc. and any of its subsidiaries reserve the
right to monitor all e-mail communications through its networks.  Thank you.


-- 
Scanned for viruses & dangerous content at One Unified
<http://www.oneunified.net>  and is believed to be clean. 

-- 
Scanned for viruses and dangerous content at 
http://www.oneunified.net and is believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20060918/a7b6e334/attachment-0001.html