Categories
Welcome Center
Education & Development
Discussions
Certification Preparation
Recent Posts
Groups
Free Resources
Ebooks
Free Workshops
Trending Certifications Infographic
Infosec Training
IT & Security Training
Live Boot Camps
Security Awareness Training
About Infosec Institute
Home
Certification Preparation
Cisco
CCNP (Professional)
RSPAN on 3550's
wave
Hi guys,
Has anyone else found RSPAN to be unreliable between two 3550s? I initially tried with 2950's but read about some limitations so I changed to 3550s. I've been using rx option on the source port as the both (default) option doesn't work for me:
SW1 with PC connected:
monitor session 1 source interface Fa0/24 rx
monitor session 1 destination remote vlan 90 reflector-port Fa0/15
SW2 with PC connected running WireShark:
monitor session 2 destination interface Fa0/24 (also tried with ingress vlan 1 here)
monitor session 2 source remote vlan 90
VLAN 90 is configured as the RSPAN VLAN. It seems that sometimes I will see ICMP traffic if I ping from the PC connected to Fa0/24 on SW1 and other times I won't. Sometimes if I pull out the cable connected to the monitoring port on SW2 and plug it back in, I will see ICMP traffic in Wireshark, at other times I don't see it.
I've tried removing and re-adding the config which sometimes shows the ICMP traffic in Wireshark, then I'll delete and re-add the config again and I don't see anything until I pull a cable a few times or fiddle with something else...
It seems hit-and-miss...any thoughts?
Find more posts tagged with
Save $250 on 2025 certification boot camps from Infosec!
Book now with code EOY2025
Button
Comments
There are no comments yet
Quick Links
All Categories
Recent Posts
Activity
Unanswered
Groups
Best Of
INFOSEC Boot Camps
$250
OFF
Use code
EOY2025
to receive $250 off your 2025 certification boot camp!
BROWSE BOOT CAMPS