Cisco Switching/Routing :: 1433 - Span Port Configuration To Listen To Specific Traffic Only?

Nov 2, 2011

Is it possible to configure the span(switch port analyzer) port and restrict it to only listen to ingress and egress of TCP/1433 from the source port?

View 2 Replies


Cisco Switching/Routing :: VTP Traffic Not Seen On SPAN Port On 3750

Dec 12, 2011

Been dealing with a strange problem for several days now.  It started out with a problem that I thought was VTP related but ended up being something else.  I setup a span port on a 3750 that I am connected to that was mirroring the trunk connection coming into the switch.
Never saw an VTP traffic come across the connection but doing a sh vtp status indicated the traffic was arriving and getting processed.  When I found some debug commands (debug sw-lan vtp), I was also able to see the packets go between switches.  Seeing this issue concerns me that there is other traffic that isnt showing up during a span session.
I know that doing a span on a switch, especially using a trunk port as a source, isnt a good idea.  Since I didnt have a TAP at time, this was my only choice.  I have since borrowed a NetOptics TP-CU3 tap from a good friend and was able to confirm the VTP traffic was going across the trunk connection between switches.
All of my 3750's are running 12.2.55.SE.

View 8 Replies View Related

Cisco Switching/Routing :: SPAN Port Configuration On 3750?

May 23, 2012

I'm trying to configure a mirror port on a 3750. This configuration needs to replicate data from local ports, but I need that also act as a regular access port.
With the initial configuration, SPAN port, there is no problem, all the data of the configurated ports is replicating in the configurated port. On the port configurated as mirror there is a PC connected for audio recording. When the port is not operating as SPAN there is communications without problem over the LAN. But when I configure the port as SPAN, communication is interrupted.
Here is the actual configuration:
SWITCH1-PISO7#sh monitor session 1
Session 1
Type                   : Local Session


View 5 Replies View Related

Cisco WAN :: 1433 How To Allow DMZ Access To LAN With Specific Port

Jun 27, 2012

I want DMZ1 talk to VLAN99 with port 1433.

View 2 Replies View Related

Cisco Switching/Routing :: Effects Of SPAN Port Configuration On 4507R+E Switch?

Oct 29, 2011

I read quite a few documents on configuring SPAN on a cisco switch but none of them mention any limitations or any kind of CPU load it can have on a switch. I need to configure this on one of our switches and would like to know if there are any implications related to SPAN.

View 5 Replies View Related

Block 1433 Port With Access List For Specific Ip Address?

Jan 2, 2012

I want to block the sql port access of my server to all except few of my ip addresses while access list on Cisco Router IOS how do i do that.

View 3 Replies View Related

Cisco Switching/Routing :: Not Capturing Span Traffic On WS-4510 / SupervisorV / 12.2(54)SG1

Mar 22, 2012

I have configured Span port on our 4510. We have an application 5view server to monitor trafic connected to G9/17 Since we have changed the network connection from physical Giga port and add a Port-channel instead, we don't see any more trafic from the new Port-channel to G9/17
We have the configuration below on our 4510 :
monitor session 1 source interface Gi4/6
monitor session 1 source interface Po20
monitor session 1 filter vlan 311 - 312 , 375
monitor session 1 destination interface Gi9/17
From the commands show, we don't see the trafic duplication from the source to the destination port :
Port Source
4510-5567#sh int po20
Port-channel20 is up, line protocol is up (connected)
Hardware is EtherChannel, address is 0016.9de2.a818 (bia 0016.9de2.a818)


View 2 Replies View Related

Cisco Switching/Routing :: Catalyst 6500 - Cannot See Return Traffic On SPAN Session?

Jan 31, 2012

On a Catalyst 6500, we configured a SPAN session with VLAN 300 as a source. We configured the session bi-directional ("both" keyword). We connect a sniffer on the SPAN destination port.
Strangely enough, we only see the traffic from the VRF to the firewall, but not the reverse traffic ! What can be the problem ?

View 2 Replies View Related

Cisco Switching/Routing :: 5596 VLAN Traffic Span Across Vpc Peer-link

Apr 22, 2013

I have pair of 5596 switches in vPC. One host say "HOST A" is connected to the primary vPC peer and other "HOST B" on secondary vPC peer.Both are in same VLAN 10. Both hosts are vpc orphan ports as their NIC is configured in active/standby mode.I have configured span session on both vPC peers with span source as VLAN 10 in rx mode.Span destination is connected to secondary vPC peer. The issue here is that I am not able to capture the traffic originating from HOST A destined to HOST B which is traversing vPC peer-link.Same issue occurs for the traffic in reverse way and span destination on primary vPC peer. In a nutshell, any traffic which crosses vPC peer-link is not getting captured.
What could be the issue and is there any solution for it. Below mentioned is the span config and relevant interfaces. [code]

View 4 Replies View Related

Cisco Switching/Routing :: SPAN Configuration In Catalyst 3750

Dec 31, 2011

I have CISCO catalyst with VLANs (VLAN ID 33, 36, 40-53) configured. I need to configure port mirroring in Switch 3750 for NAC (Network Access Control).  I need to Monitor all the VLANs. Here is the SPAN configuration of switch: [code] Monitor session 1 source vlan 33 , 36 , 40 – 53.Monitor Session 1 destination interface fa 1/0/8  (here I am not able to set encapsulation dot1q ) because the error occurred saying %one or more dest port do not support the encapsulation%.

View 5 Replies View Related

Cisco Switching/Routing :: 4900 Span Configuration On Switches

Sep 16, 2012

i have configured SPAN on cisco 4900 series switches its a Loacal SPAN . as there is only commnads to complete this activity but hard luck its not working.

View 5 Replies View Related

Cisco Switching/Routing :: 3750 - SPAN Configuration For Websense

Jul 3, 2012

I have configured SPAN in cisco 3750 switch as below mentioned. but the destination port protocol is down.
Network Diagram:
switch(config)#monitor session 1 source interface gigabitethernet1/0/1switch(config)#monitor session 1 destination interface gigabitethernet1/0/11 ingress vlan 1


View 8 Replies View Related

Cisco Switching/Routing :: SPAN SIP And Wireshark 2950 Configuration

May 26, 2013

I have cisco 2651 with one L3 interface ip This Cisco is gateway from E1 PRI (PBX Aastra MX-ONE TSW) to SIP (Asterisk). This cisco 2651 connected to cisco 2950 in port Fa 0/12. Fa 0/12 is in VLAN 518 (dot1q).

On cisco 2950 i made next commands:
# monitor session 1 source interface Fa 0/12 both encap dot1q
# monitor session 1 destination interface Fa 0/9
#sho monitor session 1

View 2 Replies View Related

Cisco Switching/Routing :: 2960 -Destination Port Not Responding Over SPAN

Jun 8, 2012

i have configured SPAN over cisco 2960 to monitor source port traffic but after configuration i dont able to get response from destination port  as my NMS is attached on destination port so i lost its web interface.
Configuration is as under.
monitor session 1 source interface gigabitEthernet0/5  (Source Port on Vlan 100) monitor session 1 destination interface gigabitEthernet0/1 (Destination Port on Vlan 200)

View 2 Replies View Related

Cisco Switching/Routing :: NEXUS 7k Span Session Getting Twice Data To Port

Jun 9, 2013

I'm setting up a montitor session on a NEXUS 7K as below.we are receiving in 150M of data and 0 data going out port 9/25.but port 4/24 shows 300M to the span port?

View 1 Replies View Related

Cisco Switching/Routing :: Creating A Span Port On Router 3640

Oct 1, 2012

i am running c3640-is-mz.124-21.bin on a cisco router 3640. i am trying to create a monitor session in the CLI and everytime i type the command Router(config)#monitor session 1 interface ethernet2/1 % Invalid input detected at '^' marker. Router(config)#monitor session 1 interface ethernet2/1 ^% Invalid input detected at '^' marker. i get the error invalid input ?

View 10 Replies View Related

Cisco Switching/Routing :: Configuring Span Port On 6513 Switch

Mar 2, 2012

I have two servers, connected on two(Different) 6513 directly connected switches. Both these servers are in the same Vlan.
I have to monitor communication these two servers. I have a system connected on one of the 6513 switch, where network tool wireshark is installed.
How to configure span port.
switch 6513-1# show run int Gi10/43  --------------------Server 1 is connected
switch 6513-2# show run int Gi9/45 ------------------------Server 2 is connected
switch 6513-2# show run int Gi9/46 ------------------------System on which network tool wireshark is installed.

View 9 Replies View Related

Cisco Switching/Routing :: SPAN / Monitoring Destination Port Behaviour - 2960 LAN

Jan 16, 2012

In s SPAN session , normally the destination prt is used for monitoring purpose only. But could destination port be used to access the equipement or PC connected to that port , for a 2960 LAN BASE image  switch .

View 2 Replies View Related

Cisco Switching/Routing :: CAT6500 / Duplicate Multicast Packets On A Span Session Port?

Apr 17, 2013

If I monitor a trunkport on the rootbridge in both directions  I get Duplicate Multicast Packets on the perticular VLAN.   The first guess is, that this is worked as designed and not a IOS Bug (Platform CAT6500 SUP720 IOS 12.2(33)SXI9 ) Until know I only found an old Cisco press link from 2002 with this subject.

View 2 Replies View Related

Cisco Switching/Routing :: Shutdown Specific Port On 3750x And Monitor Port At Same Time?

Oct 23, 2011

is it possible to shutdown a  specific port on my 3750x and monitor this port at the same time .for example , im dealing with a mac authenticated network using port security , i want to shut down all the ports that are not used at the moment , however , if some one gets connected to the one of the shutdown ports  i want to know the mac address of the user or atleast to know that i have someone who is just plugged in to the one of the shutdowned ports .

View 4 Replies View Related

Cisco Switching/Routing :: ASA 5510 Routing Specific Traffic To Inside Router

Nov 7, 2012

I have an ASA 5510, with Ethernet0 connected to Internet via a T1 line, Ethernet1 connected to LAN1, and Ethernet2 connected to LAN2.  LAN1 & LAN2 are independant, but share the Internet connection, via the T1 line.  On LAN2, I have another router that connects to the Internet, via a Comcast line.  I wish to route some of the traffic on LAN2 ( to the other Router, on LAN2 ( (connected to the Comcast line).  I have entered the following lines:

route inside2 1
route inside2 1
route inside2 1
I can trace the routes from the ASA 5510 (1st hop is to, but not from anything else on LAN2.

View 7 Replies View Related

Cisco Switching/Routing :: 3750 - Only Allow Specific Traffic To VLAN

Oct 10, 2012

Have a quick question regarding inter-vlan routing on a 3750.  Overview of network is ISP --> ASA --> 3750 (acting as my core and default gw).  I have 5 vlan interfaces on my 3750, all w/ 192.192.x.x subnets, a 6th w/ 192.168.100.x, and a 7th w/ 192.168.200.x.  I have enabled "ip routing" on the switch and can successfully ping from subnet A to subnet B as long as both devices are using the correct DG for their vlan, which is the switch.  I have a few ports that are trunked as well that go to ESX hosts which break out the vlans according to the subnet the vm should be attached to.  The ASA is set to nat internal traffic for all the vlans.
Now my question:  short of applying an ACL to each vlan interface to block traffic from other 192.192.x.x subnets is there a better way to accomplish this?  I want my 192.168.10.x subnet to be able to reach all the subnets, but don't want 192.192.10.x to be able to talk to 192.192.20.x for example.  I was thinking to create an acl like this:
access-list 120 permit ip access-list 120 deny ip 120 permit ip any
and then applying this to the interface for the appropriate vlan. 

View 4 Replies View Related

Cisco Switching/Routing :: ASA 5505 - Blocking Traffic To Specific IP Addresses

Sep 24, 2012

I inherited a Cisco ASA 5505 and am trying to piggy back the device off of an established Network.  Here is the basic layout: (Core Router - Handles DHCP/DNS) (ASA 5505 - Piggy backing off of Network)
192.168.40.x (ASA 5505 - VLAN)
I'm able to get onto the Internet without any problems.  Devices from the 192.168.10x Network can not ping the inside VLAN1 (192.168.40.x).  However, I would like traffic going from the inside VLAN to the Outside VLAN to be blocked, except for and  I've tried using ACL's but end up killing my Internet connection. is the default route and is how I get out to the Internet.  Is this possible?  Essentially, I'm trying to set up a small Network that guests can connect to.  The idea is that they can get to the Internet, but that is it. They can't get to internal resources on the 192.168.10.x Network
Here is the config:
ASA Version 8.2(1)
hostname ciscoasa
enable password EeCsulrpu.9LalEE encrypted


View 5 Replies View Related

Cisco WAN :: 871 SPAN Want To Monitor The Wan Port Using Span

Apr 4, 2011

I am having some problems creating a SPAN port on my Cisco 871 (running IOS 12.4-11T).  My 871 is connected to a DSL modem, and uses "IP Negotiated" to get its dynamic ip address.I want to monitor the WAN port (FastEthernet4) using SPAN, but when I type "monitor session 1 source interface FastEthernet4" into the cli, it is rejected.  I can successfully use any of the other FastEthernet ports, as well as Vlan1 as a source for the SPAN session. I have tried to use Dialer0 instead of FastEthernet4, but it still doesnt work.

View 5 Replies View Related

Cisco Switching/Routing :: 7060 - POE Not Working On Specific Port

Mar 18, 2013

when plugging a Cisco 7060 to the specific switch port it does not power on.  The inline power consumption is abnormally high compared to the other phones that are plugged in, maybe double the amount. 

non Poe devices work on the same port.
I used multiple cables and phones.

View 6 Replies View Related

Cisco Switching/Routing :: 1921 - Deny Specific Port From / To IP

Oct 7, 2012

I have a network with 3 segments and a 2921 router.v172.16.5.0/24, and             .
I want to block all 135 TCP traffic from/to IP to any host in other segment, but only TCP port 135 and only to the specified IP.

View 2 Replies View Related

Cisco Switching/Routing :: 6513 - Disable Logging On Specific Port

Jan 18, 2012

Ask this question, if someone came across a 6513, one of the RJ45 ports are constantly falling.The question is how to disable logging on a specific portno logging event link-status does not work. 

View 1 Replies View Related

Cisco Switching/Routing :: Catalyst 2960S - Protected Port But Allow Specific MAC?

Nov 5, 2011

We are using catalyst 2960S Lan Base IOS on Radio towers. We just bought 50 Accest points, thas are GPS synchronized. Problem is the APs need to be connected on L2-mac betwen each other. But at this time we are using port isolation on each switch (tower) by protected port function to isolate clients from each other.
My question is, is possible to specifi a Mac addresses in specific vlan thats can comunicate betwen protected ports? On tower is one Master unit and others are slave. I thing there is only 1 dirrection comunication - from master to slave.

View 2 Replies View Related

Cisco Routers :: RV042 - How To Direct Traffic Through Specific Wan Port

Aug 1, 2012

I have an RV042. I understand and have created the services I need. The documentation is just not clear on how to direct traffic for these services to a specific wan port.
Can this even be done with this router? If so, the how? Use rate control or priority? Does checking a wan port mean that it will only go through that port?

View 4 Replies View Related

How To Make Computer Listen To A Single Port

Oct 5, 2011

i want my computer to make connections to only a single port (53 in this case) can i do this? i am using a wireless broadband data card. i am using windows 7 ultimate. is there any way to make such settings in my pc and if so how do i set or make the settings so that my computer will only make connections and also listen to the single port 53?

View 9 Replies View Related

Cisco Switching/Routing :: 3825 ISR - Traffic Route From Switch Port To Router Port

Jun 5, 2013

I'm fairly new to Cisco products am in the process of developing my network knowledge on a deeper level.  I have a 3825 with a HWIC-4ESW and I'm struggling to fully understand how the two "see" each other.  I've setup a V LAN with a layer 3 address on the HWIC and added the switch ports to it.  This seemed to allow devices connected to the switch ports to talk to the built-in router ports.  I thought this was all making sense until i applied an access-list to the router port.  It's a simple ACL i'm just using for testing and the only thing it does is blocks telnet from anywhere.  I know the ACL is setup properly because if I connect a device directly to the router port i cannot telnet to the port.  However, if i connect a device to one of the switch ports, i am able to telnet to the router port successfully. 

It seems that I'm missing something with how traffic flows from the switch port to the router ports and how the two "see" each other. 

View 2 Replies View Related

Cisco Switching/Routing :: C6500 Filter ARP Answer On 802.1q Port For Specific VLan

Oct 10, 2012

I am trying to filter ARP answer arriving on a C6500 trunk port, for a specific vlan.Filtering conditions are:

- packet arrive from vlan ID x on the trunk (on only for this vlan ID)
- source MAC address = xx:xx:xx:xx:xx:xx

Thae aim is that the C6500 with never enter into its CAM table this MAC address.I looked at several methos like service policy or vlan filter, but no solution for the moment.

View 3 Replies View Related

How Does Firewall Block Or Filter Traffic On Specific Port Or IP Address

Nov 15, 2011

How does a firewall block or filter traffic on a specific port or IP address?

View 1 Replies View Related

Copyrights 2005-15, All rights reserved