RSPAN setup for monitoring.
What im trying to accomplish:
Monitor all bandwidth usage going from the users (all in VLAN2) out our main connection.
Problem:
More then half of the traffic coming off each users computer doesnt go out our main connection. We have other routers and T's where specific programs only send data out those ways, VIA VLAN3. This traffic i do not care about at all.
Equipment Used:
all users connected to one of two 6506's and the router out the main connection is a 3725. Like i mentioned, all users are in VLAN2 and all the other connections are in VLAN3
Solution?
setup RSPAN with the network monitor as the destination and all traffic from VLAN2 as the source. Use an access list on the RSPAN vlan to deny all traffic originally sent from VLAN2 to VLAN3 (i suppose thats possible?)..Install a second NIC in the network monitor so i can access that terminal via RDP, etc.
Any flaws there?
Monitor all bandwidth usage going from the users (all in VLAN2) out our main connection.
Problem:
More then half of the traffic coming off each users computer doesnt go out our main connection. We have other routers and T's where specific programs only send data out those ways, VIA VLAN3. This traffic i do not care about at all.
Equipment Used:
all users connected to one of two 6506's and the router out the main connection is a 3725. Like i mentioned, all users are in VLAN2 and all the other connections are in VLAN3
Solution?
setup RSPAN with the network monitor as the destination and all traffic from VLAN2 as the source. Use an access list on the RSPAN vlan to deny all traffic originally sent from VLAN2 to VLAN3 (i suppose thats possible?)..Install a second NIC in the network monitor so i can access that terminal via RDP, etc.
Any flaws there?