I am a relative newbie on Cisco and need help urgently.\r\n\r\n\r\nI have been trying to get RSPAN working on my two 2950 switches.\r\n\r\nEarlier I had enabled SPAN on my switch (say Switch1) with Snort monitoring port fa0/24 and everything worked fine.\r\n\r\nNow, I have another 2950 switch (say Switch2) which I have connected via cross cable to Switch1 between fa0/16 ports on both ends.\r\n\r\nOn both the switches, I have a VLAN 100 defined. \r\nOn both the switches, VLAN 100 comprises of port fa0/1 - fa0/15.\r\nPort fa0/16 is connected to the other switch via cross cable.\r\n\r\n[B]My objective is to monitor traffic on ports fa0/1 - fa0/16 on both the switches. My sniffer is connected to fa0/24 on Switch1.[/B]\r\n\r\nThe output of [FONT="Courier New"]show vlan [/FONT]on Switch1 is attached as a screenshot.\r\nJust incase you are not able to see the image, I am also pasting the output here:\r\n-\-\-\-\-\-\-\-\-\-\-\-paste start-\-\-\-\-\-\-\-\-\-\-\r\nVLAN Name Status Ports\r\n-\-\-\- -\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\- -\-\-\-\-\-\-\-\- -\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\r\n1 default active Fa0/17, Fa0/18, Fa0/19, Fa0/20\r\n Fa0/21, Fa0/22, Fa0/23, Fa0/24\r\n Gi0/1, Gi0/2\r\n100 MONITOREDVLAN active Fa0/1, Fa0/2, Fa0/3, Fa0/4\r\n Fa0/5, Fa0/6, Fa0/7, Fa0/8\r\n Fa0/9, Fa0/10, Fa0/11, Fa0/12\r\n Fa0/13, Fa0/14, Fa0/15\r\n-\-\-\-\-\-\-\-paste end-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\r\n\r\n\r\nI followed the Cisco documentation and did the following:\r\n1. Created an RSPAN VLAN with vlan id 150. This got reflected on the other switch automatically, since I have VTP configured.\r\n\r\n\r\n\r\n2. On Switch2, I configured monitor session 2 and the output is as follows:\r\n\r\n-\-\-\-\-\-\-\-\-\r\nType : Remote Source Session\r\nSource Ports :\r\n Both : Fa0/1-20\r\nReflector Port : Fa0/23\r\nDest RSPAN VLAN: 150\r\n\r\n3. On Switch1, I configured monitor session 2 and the output is as follows:\r\n\r\n\r\nType : Remote Destination Session\r\nSource RSPAN VLAN: 150\r\nDestination Ports : Fa0/24\r\n Encapsulation : Native\r\n Ingress: Disabled\r\n\r\nNote that on Switch2, I have configured fa0/23 as the reflector port. Currently this port is not in VLAN 100 (which I believe is the right way).\r\nHowever, currently this port is not connected to anything! I don't know what needs to be done with it.\r\n\r\nNote that on Switch1, after doing all the changes, the LED has turned amber and has remained that way...My sniffer is not picking any traffic.\r\n\r\n\r\nPlease help.