The correct answer can be
monitor session 1 source remote vlan 224 or monitor session 1 source vlan 24,224 By default if you don't specify direction it will account for both sent and received traffic. As ASA2 will have to send traffic to R2, R4, or ASA1 the traffic is always going to pass thru Cat2 & Cat3. Now there is a mistake in thinking about this. R2 used to use Fa1/1 that was connected to Cat3 when this lab was written. R2 Gi0/1 is now connected to Cat2 though. So the solution should include: Cat2 & Cat3: vlan 224 remote-span ! monitor sess 1 sour vlan 24 both monitor sess 1 dest remote vlan 224 Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Kingsley Charles Sent: Friday, September 10, 2010 8:19 AM To: Jimmy Larsson Cc: OSL Security Subject: Re: [OSL | CCIE_Security] rspan? Ok I thought that the destination rspan was on a switch other cat 3 and cat 4. Yogesh was correct. There is small twist here. Since you need monitor vlan 24 along with remote vlan 224, you need configure as following: monitor session 1 source vlan 24 ,224 You can see that the remote keyword is not there as when you use remote only one vlan can be mentioned. So with "monitor session 7 source vlan 24 ,224" cat 4 considers both 24 and 224 as local. With regards Kings
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
