Tat Wee, Kan wrote: > > > I'm also interested to know if it's possible to configure span > on a router.
SPAN stands for Switch Port Analyzer. It's not intended for routers. I'm loath to say you simply can't do it in case Cisco lets you, but I couldn't find anything in their router config guides that said you could do it. It's probably way too risky to have the exact same traffic flowing in two directions at once. Think of all the things it would break. (Of course that applies on switches too, actually.) > I've posted this question earlier at Cisco NetPro forum, but I > got no > concrete answer on my query. Here's a repost into this group. : > > --snipped-- > The story is like this - I have a 7204VXR router connected to a > 45 Mbps > satellite downlink via a HSSI interface. I have a PA-2FE-TX > module on the > router and currently Fa1/0 (IP: 10.1.1.254) is connected to > Server A (IP: > 10.1.1.1). Traffic coming in from the satellite is being routed > to Server A. > > There is a default ip route which goes like this: > > ip route 0.0.0.0 0.0.0.0 10.1.1.1 > > There are access-lists implemented on Fa1/0 such that only > certain ports are > being permitted to be routed to Server A. > > The question: I would like to make use of the other FE port > (Fa1/1) and > implement another set of different access rules such that the > traffic from > the satellite will also go to Server B (IP: 10.2.2.2). Why do you want to replicate packets to two devices? Perhaps if you give us more background we can help. If you're just trying to mirror two servers, for example, there are many options for doing that without trying to do something bizarre on the router. Another thought that comes to mind is that when you want to send the exact same data to two or more devices, this usually indicates a need to use broadcast or multicast packets. Could you get the senders to send to a multicast address? The recipients would have to register to receive it. Is this a private network or is NAT involved, by the way? How good are you at writing software? You could probably put a LINUX box into the mix and have it be the recipient and then act as a redirector and send the packets to both servers. > The > problem is > traffic is only flowing to the Fa1/0 interface, and not onto > the other Fa1/1 > interface. How could I have two streams of data 'duplicated' > out onto the > two interfaces? Having another default route to 10.2.2.2 would > not work as > the traffic would load balance out to the 2 interfaces. > > Some guy I've asked mentioned something about IRB. Is this > correct? I certainly can't think of a way to do it with IRB. You may want to repost this in a new thread with a relevant title. Be SURE to tell us what it is you are really trying to do or you won't get a real answer. Tell us what you want to do and why; don't tell us how you want to do it (by making a router duplicate packets or whatever). Don't put anything into the solution part of the message. Just put as much info as you can think of in the problem desciption, from an application point of view, and maybe somebody will have a creative suggestion. Be sure to explain enough so that we don't just think that you don't understand traffic flow and routing. If you really want the exact same packets to go to two different servers, say that, and say why unless it's proprietary. Priscilla > > Basically if this is a switch, I could think of doing a SPAN > where the > satellite downstream is being replicated onto 2 FE ports. How > could I > achieve this on a router? > > There's a picture of the setup at > http://kan.hardware-one.com/7204.gif. > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=60672&t=60546 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
