Tacack, When you configure a switch interface for SPAN, it goes to monitor mode and hence whatever you configure on F0/21 doesn't matter.
But why have you configured *encap dot1q* in "monitor destination 1 interface fa 0/10 encap dot1q"? "encap dot1q" is required only when you monitor more than one vlan or a local trunk port. "encap dot1q" will tag and send the packets to the IPS interface. You need to use vlan groups on the sensor. Since you are monitoring just one vlan, you don't require it. I think, reflector fa 0/21 will make f0/21 a monitoring interface. If f0/21 is the actual trunk interface between sw1 and sw1, that might break the connection. The reflector port should be any unused port. With regards Kings On Thu, Jun 17, 2010 at 5:15 PM, Vybhav Ramachandran <[email protected]>wrote: > I'm having an RSPAN issue . > > This is my config > > SW1 > > Vlan 900 > remote-span > > int fa 0/21 > switchport trunk encapsulation dot1q > switchport mode trunk > no shut > exit > > > monitor session 1 source vlan 12 rx > monitor destination 1 remote 900 reflec fa 0/21 > > SW2 > > Vlan 900 > remote-span > > int fa 0/21 > switchport trunk encapsulation dot1q > switchport mode trunk > no shut > exit > > monitor session 1 source remote vlan 900 > monitor destination 1 interface fa 0/10 encap dot1q > > > I see that the interface fa 0/21 is down on both switches. Any idea what > the issue is? This is on a 3550 > > Cheers > TacaCK > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
