Only one interface?

[Stew]

I'm setting up security onion sensor on vmware infrastructure but cannot span particular vlans to it (a limitation of the cisco nexus switch I'm using). The only thing I can do is span over layer3 to destination ip address - it effectively means that my monitoring interface would need to have an IP address in order to receive the traffic

Is this setup likely to cause any problems?

[Wes Lambert]

Stew,

You could try configuring the single interface (monitor + IP address) as described here:

http://www.makethenmakeinstall.com/2013/02/the-security-onion-nsm-in-an-esxi-vm/#more-195

https://github.com/Security-Onion-Solutions/security-onion/wiki/NetworkConfiguration

Thanks,
Wes

I'm setting up security onion sensor on vmware infrastructure but cannot span particular vlans to it (a limitation of the cisco nexus switch I'm using). The only thing I can do is span over layer3 to destination ip address - it effectively means that my monitoring interface would need to have an IP address in order to receive the traffic

Is this setup likely to cause any problems?

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To post to this group, send email to securit...@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.