Saturday, July 24, 2021

Traffic monitoring not seeing data on access level

TOPOLOGY https://ibb.co/tCS70MF

It is not RSPAN, Its using regular SPAN

I have a traffic analyzer program installed on a VM using vswitch SPAN. We are seeing broadcast traffic but not east/west traffic from our networks.

SVI Gateway IPs are defined on the core. They all have .250 IPs. From the core, the links are trunked with the VLANs going down to the access layer. If you look at the topology, we cannot see 10.33.33.131 traffic even though the VLAN is spanned up to the Vswitch.

What is missing here? Do we need IPs for every switch and corresponding VLAN? Does just the Dell switch need IPs in the same VLAN for it to see the traffic?



No comments:

Post a Comment