Port mirroring and SPAN are ideally suited for use at access-layer switches because you can select individual interfaces as sources. For the source of the monitor session, use interfaces that are connected to production severs that host business-critical applications. This configuration helps ensure that data destined for other servers is not sent to the collection device and does not contend for bandwidth at the destination port.
The configuration in the illustration captures all traffic to and from the production server, while ignoring traffic to and from the backup server. The following commands represent the configuration in the illustration:
(config)# monitor session 1 source interface f2/17 (config)# monitor session 1 destination interface f2/13
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|