RSPAN on 2 Core Switches

Hi Group,

Would you please advise me in this RSPAN scenario?
I'm trying to configure 2 RSPAN sessions on 2 Core switches, each used for
monitoring traffic go out/in in 1 Router as below scenario. The problem is
when I enabled only 1 RSPAN (for ex: in Core1) the 2 core switches seem OK
but after activated the 2nd session, CPU uti went to 99% and traffic
dropped:

R1----Fa0/48----[Core1]========[Core2]---Fa0/48------R2
                                                      |
            |
                                                       [Mornitoring
   SW]
                                                                    |
                                                                   PC
Config: Core1: monitor session 1 source interface Fa4/48
                       monitor session 1 destination remote vlan 990
            Core 2: monitor session 3 source interface Fa4/48
                        monitor session 3 destination remote vlan 980

 I thought there should be a loop in this but can not find because RSPAN are
in different VLANs. Is there something wrong with my configurations?
Can I monitor by 1 session 1 in core only, instead capture the interfaces, I
capture vlan (for ex: 500 ---- VLAN for both intrefaces in core switches)?
monitor sesion 1 source vlan 500
                        monitor session 1 destination remote vlan 990 in
Core1 only>>> is it possible to capture all traffic?

Thank you very much.
Regards,
Khoa

Blogs and organic groups at http://www.ccie.net
Received on Fri Apr 17 2009 - 12:34:02 ART