Thanks guy... I can now mirror the source port after enable the flood unknown unicast traffic and unregistered multicast traffic
Alvin -----Original Message----- From: Stefan Dozier [mailto:[EMAIL PROTECTED]] Sent: Friday, January 04, 2002 9:17 AM To: [EMAIL PROTECTED] Subject: RE: setting SPAN on Cat 1900 [7:30746] A perfect example of the collective in action! Thanks Priscilla.... Stefan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Priscilla Oppenheimer Sent: Thursday, January 03, 2002 5:44 PM To: [EMAIL PROTECTED] Subject: RE: setting SPAN on Cat 1900 [7:30746] At 04:41 PM 1/3/02, Stefan Dozier wrote: >Please post replies to the list! That way you can benefit from >the wide ranging knowledge and wisdom of the groupstudy collective! Excellent advice. He sent the same question to my private unicast address and I ignored it. ;-) But I will answer questions to the collective. I have also run into surprising results with port monitoring on a 1900. I don't always see all the traffic I expect to see. I think we discussed this before and it might be in the archives. I discovered that some Cisco switches disable the forwarding of unknown (flooded) unicast traffic and unregistered multicast traffic to the monitor port. The goal is to protect the network from problems associated with this traffic exiting an additional port. Check to see if the 1900 switch automatically added the "port block unicast" and "port block multicast" commands to the monitor port. This can make troubleshooting difficult. I don't think you can get it not to do this. The workaround is to use a higher-end switch. Priscilla >As to your observation: Not really sure what's going on! > >You could double check just to make sure that only the ports >you're looking to monitor are enabled! > >Also I'll throw this out there and maybe someone else can >comment or correct me if I'm way out in left field. > >I seem to remember in one the switch models (maybe the 2900XL's) >where the port monitor command actually monitors all ports >belonging to the same vlan as the monitor port. Not sure if the >1900's are doing something similar or not! > >Stefan > > >-----Original Message----- >From: Chong Chun Wei (Central) [mailto:[EMAIL PROTECTED]] >Sent: Thursday, January 03, 2002 12:24 AM >To: 'Stefan Dozier' >Subject: RE: setting SPAN on Cat 1900 [7:30746] > > >Thanks Stefan.. > >I have enabled the monitor-port, and set the source and destination port. >And the result is I can now see some traffic traversing thru the destination >port. >BUT.. after some observation I found out that the traffic between the source >and dest are different!! So what's go wrong? Is there anythin else I left >out? >I even set both the port to the same vlan.. >Please help > >-Alvin- > >-----Original Message----- >From: Stefan Dozier [mailto:[EMAIL PROTECTED]] >Sent: Thursday, January 03, 2002 12:18 PM >To: [EMAIL PROTECTED] >Subject: RE: setting SPAN on Cat 1900 [7:30746] > > > From the command-line: If your switch is an Enterprise Edition > >monitor-port monitor-port port 0/27 monitor-port monitored 0/3 >See this link for a more detailed description of the commands: >Watch the word wrap.... > >http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v9x/cli/pa r >t1.htm#xtocid1592767 > > From the Management Console (Main Menu) > >Depress [M] Monitoring and follow the menu selections to enable >monitoring, and select the the ports your analyzer is connected >to and the port(s) you want to monitor. > > >HTH > >Stefan > > > >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of >Chong Chun Wei (Central) >Sent: Wednesday, January 02, 2002 9:50 PM >To: [EMAIL PROTECTED] >Subject: setting SPAN on Cat 1900 [7:30746] > > >Dear all, > >Is is possible to set SPAN on a catalyst 1900? If yes, how? >Thankyou. > >Cheers, >Alvin Chong >IT-NCS >Mobile: 016- 3304503 >Fixed: 03 - 7211595 ________________________ Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=30893&t=30746 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
