Networks

Ask something
Discussion Locked

Cisco 4006 port replication?

0 helpful
4 replies

by jaystar 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Simple Cisco 4006 question. I have all my router traffic comming in on a 10 megbit port on the third blade of port 24 a 4006 via copper. I want to use snort to detect for attacks. How can I have all the traffic from port 24 also on port 23?

4 replies

by stolson

Ah, an easy one. :)

The technology is known as SPAN for Switch Sort ANalyzer. It mirrors the data from one port to another, designed specifically for what you want to do. From the enable prompt

set span 3/24 3/23

this will mirror the data from port 24 to port 23.

Check the setup with

show span

You can also type

set span ?

to get a list of options.

Also check out

http://www.cisco.com/warp/customer/473/41.html

Any other questions, let me know.

Steve Olson

This discussion is closed to new replies.