Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 271

Chapter 15 Configuring IDSM-2
Enable SPAN to IDSM-2:
Step 3
From a source port:
•
cat6k> (enable) set span 3/3 13/7
Destination
Admin Source
Oper Source
Direction
Incoming Packets: disabled
Learning
Multicast
Filter
Session Number
cat6k> (enable)
Note
From a VLAN:
•
cat6k> (enable) set span 650 13/7 rx
Destination : Port 13/7
Admin Source : VLAN 650
Oper Source : Port 11/1,13/1
Direction : receive
Incoming Packets: disabled
Learning : enabled
Multicast : enabled
Filter : -
Session Number : 1
cat6k> (enable)
Show the SPAN sessions:
Step 4
cat6k> (enable) show span
Destination
Admin Source
Oper Source
Direction
Incoming Packets: disabled
Learning
Multicast
Filter
Session Number
Total local span sessions:
cat6k> (enable)
To disable the SPAN session that is sending traffic to IDSM-2:
Step 5
cat6k> (enable) set span disable session 1
This command will disable your span session.
Do you want to continue (y/n) [n]? y
Disabled Port 13/7 to monitor receive traffic of VLAN 650
cat6k> (enable)
78-16527-01
: Port 13/7
: Port 3/3
: Port 3/3
: transmit/receive
: enabled
: enabled
: -
: 1
Use the filter keyword to monitor traffic on specific VLANs on source trunk ports.
: Port 13/7
: VLAN 650
: Port 11/1,13/1
: receive
: enabled
: enabled
: -
: 1
1
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Configuring the Catalyst Series 6500 Switch for IDSM-2 in Promiscuous Mode
15-9