Cisco SwitchProbe models include Ethernet, Token Ring, Fast Ethernet, Multiport Fast Ethernet, Gigabit Ethernet, Fiber Distributed Data Interface (FDDI), Wide Area Network (WAN), High-Speed Serial Interface (HSSI), and Asynchronous Transfer Mode (ATM).
The following information is provided in this chapter:
Before unpacking the shipping carton, ensure that there is no visible damage to the carton. If there is damage, notify the carrier representative, and arrange for a representative to be present while you unpack the carton.
After opening the shipping carton and removing the unit, inspect it for any obvious damage that might have occurred during shipment. If any damage is present, file a claim with the carrier.
The SwitchProbe devices in the small chassis series measure 12 inches wide, by 13.5 inches deep, by 3 inches high (30 x 33.75 x 7.5 cm). They are housed in standalone chassis that you can place on a table top.
The interface cards in the small chassis series are located in the back of the device. They are available in different configurations with different combinations of interface types.
The following devices are in the small chassis series:
Ethernet
Token Ring
Ethernet and Token Ring
WAN and Ethernet/Token Ring
Small Chassis SeriesFront Panel
Figure 3-1 shows the front panel of a small chassis SwitchProbe device.
To the left of the LEDs is a small pin hole (Figure 3-1) that provides access to the manual reset button. To manually reboot the device, insert a small object such as the tip of a pen and push inward. A slight press of the reset button reboots the SwitchProbe device.
Directly below the reset switch is a small toggle button that enables and disables power to the device. To toggle power on or off, press this button inward, then release it.
Caution
Do not use the keyboard port (5-pin DIN connector) at the back of the SwitchProbe device to connect to a keyboard or any other device; doing so might prevent the SwitchProbe device from operating.
Each SwitchProbe device contains one Peripheral Controller Card (PCC) and at least one Network Interface Card (NIC). In the small chassis SwitchProbe devices, these interfaces are located on the back panel of the device.
Use the remote port to exchange management data to and from an attached device such as a management station or a modem. You should always configure the Remote port to Manage mode. You can also use the remote port as the primary or secondary management port.
Note Do not use the remote port to monitor a network segment.
To configure a SwitchProbe device (set IP address, gateway address, network mask, and so on) using an ASCII terminal, you must connect that terminal to the device console port. For more information about configuring the SwitchProbe device using an ASCII terminal, see "Initializing a SwitchProbe Device."
Note Do not use the console port to monitor a network segment.
Use a null-modem cable to connect the console port to an ASCII terminal. See "Cable Pinouts," for a sample wiring diagram of a null-modem crossover cable.
Note EIA/TIA-232 and EIA/TIA-530 were known as recommended standards RS-232 and RS-530 before acceptance as standards by the Electronic Industries Association (EIA) and Telecommunications Industry Association (TIA).
Because SwitchProbe devices boot from flash memory by default, all upgraded agent firmware is written to flash memory. Regardless of any upgrades you might perform, the original, factory-installed version of agent firmware remains in EPROM. Therefore, if the upgrade fails or the flash becomes corrupted, you can force the device to boot from EPROM by setting DIP switch 1 to on. The agent then boots from EPROM using the original firmware shipped with the device.
The small chassis series SwitchProbe devices contain a minimum of one Network Interface Card (NIC), located in the back of the device. The number and topology of the network interfaces vary according to the type of device.
SwitchProbe devices use network interfaces to receive network traffic, or to exchange management data with a management stationor to perform both tasks simultaneously. The task that a particular interface performs is determined by the interface mode manage, monitor, or manage + monitor.
Table 3-7 defines the SwitchProbe interface modes.
Exchanges (sends and receives) management data with an attached management station.
Monitor
Receives network traffic for mapping statistical information into standard RMON-based counters.
Manage + monitor
Exchanges management data and receives network traffic simultaneously.
Each interface is set to a default mode during manufacture. You can change the mode using the Agent Configuration Utility. For more information about each network interface, see "Making Network Connections."
Each interface in a SwitchProbe device is assigned an interface number. Because every device has at least one NIC and only one PCC interface card, Cisco Systems assigns interface 1 and interface 2 to these interfaces, respectively.
Interface 1 is always the default management interface. Depending on the model, this interface is either Ethernet or Token Ring.
Interface 2 is always the SLIP port, and is labeled Remote on the PCC interface card.
Note If a device has more than one NIC, interfaces numbered 3 and higher are assigned to each additional NIC.
The Single Interface Ethernet SwitchProbe device contains one Ethernet NIC. The default configuration of this interfacemanage + monitorlets the interface monitor the traffic of an attached Ethernet segment and exchange (send and receive) commands with a management station.
Table 3-8 describes the interfaces in the Single Interface Ethernet SwitchProbe device.
The Dual Interface Ethernet SwitchProbe device contains two Ethernet NICs (interfaces 1 and 3). Each NIC can monitor the traffic of an attached Ethernet segment. The default configuration of interface 1manage + monitorlets that interface exchange (send and receive) commands with a management station. You can configure either interface 1 or interface 3but not bothto manage mode. Cisco Systems recommends that you configure interface 1 to manage mode and interface 3 to monitor mode.
You can use the Agent Configuration Utility to change the configuration of the Ethernet interfaces; however, the device cannot support more than one NIC configured to manage mode.
Table 3-9 describes the interfaces in the Dual Interface Ethernet SwitchProbe device.
The Token Ring SwitchProbe device contains one Token Ring NIC. The default configuration of this interfacemanage + monitorlets the interface monitor the traffic of an attached Token Ring segment, and exchange (send and receive) commands with a management station.
You can use the Agent Configuration Utility to change the configuration of the Token Ring interface only.
Table 3-10 describes the interfaces in the Token Ring SwitchProbe device.
SwitchProbe devices in the front-access chassis measure 17 inches wide, by 16.5 inches deep, by 5.25 inches high (13.3 by 43.18 by 41.91 cm). They are housed in a rack-mountable large chassis for mounting in a 19-inch equipment rack.
Unlike the small chassiswhere the interfaces are accessed from the back of the device the interfaces in the front-access chassis are accessed from the front of the device.
The front-access chassis series includes the following devices:
Multiport Ethernet
Fast Ethernet Half-Duplex TX and FX
Fast Ethernet Dual Interface Half-Duplex TX and FX
Fast Ethernet Full-Duplex TX and FX
Multiport Fast Ethernet TX and FX
Gigabit Ethernet
FDDI DAS
FDDI SAS
HSSI
Multiport T1/E1 WAN Ethernet/Token Ring
Multiport T1/D or E1/D WAN
Channelized T1/D or E1/D WAN
OC-3 ATM
DS-3 ATM
Front-Access Chassis SeriesFront Panel
Figure 3-7 shows the front panel of a front-access chassis SwitchProbe device.
There is a small pin hole (Figure 3-7) to the left of the LEDs that provides access to the manual reset button. To manually reboot the device, insert a small object such as the tip of a pen, and push inward. A slight press of the manual reset button reboots the device.
Note When you reset a SwitchProbe device, all counters are cleared to zero. Any changes you made to the device settings (using the Agent Configuration Utility) since the previous reset take effect.
You can also reset the device using the Reset Agent option of the Agent Configuration Utility. For more information about this option, see "Initializing a SwitchProbe Device."
Each SwitchProbe device contains one Peripheral Controller Card (PCC) interface card and at least one network interface card (NIC). In the front-access SwitchProbe devices, these interfaces are located on the front panel of the device.
Use the remote port to exchange management data to and from an attached device such as a management station or a modem. You should always configure the Remote port to Manage mode. You can also use the Remote port as the primary or secondary management port.
Note Do not use the remote port to monitor a network segment.
To configure a SwitchProbe device (set IP address, gateway address, network mask, and so on) using an ASCII terminal, you must connect that terminal to the console port. For more information about configuring the SwitchProbe device using an ASCII terminal see "Initializing a SwitchProbe Device."
Note Do not use the console port to monitor a network segment.
Use a null-modem cable to connect the console port to an ASCII terminal. See "Cable Pinouts," for a sample wiring diagram of a null-modem crossover cable.
Note EIA/TIA-232 and EIA/TIA-530 were known as recommended standards RS-232 and RS-530 before acceptance as standards by the Electronic Industries Association (EIA) and Telecommunications Industry Association (TIA).
Note Cisco SwitchProbe devices always ship with the latest version of agent firmware loaded in both EPROM and flash memory. If an updated version become available, you might need to upgrade the agent firmware. For information about updating the firmware, see "Configuring SwitchProbe Devices."
Because SwitchProbe devices boot from flash memory by default, all upgraded agent firmware is written to flash memory. Regardless of any upgrade, the factory-installed, original version of agent firmware remains in the EPROM. Therefore, if a firmware upgrade fails, you can force the device to boot from the EPROM by setting DIP switch 1 to on. The agent then boots from the EPROM using the original version of firmware.
If the flash becomes corrupted, the agent automatically boots from EPROM, regardless of the setting of DIP switch 1.
Network Interface CardsInterface 1 and Interfaces 3 and Higher
All Network Interface Cards (NICs) are positioned in the right front panel of the rack-mountable chassis. The number and topology of the NICs vary according to the model.
Interface Modes
SwitchProbe devices use network interfaces to receive network traffic or to exchange management data with a management station. The task that a particular interface performs is determined by the interface modemanage or monitor.
Exchanges (sends and receives) management data with an attached management station.
Monitor
Receives network traffic for mapping statistical information into standard RMON-based counters
Each interface is set to a default mode during manufacture. You can change the mode using the Agent Configuration Utility. For information about the network interfaces, see "Making Network Connections."
Interface Numbers
Each interface in a SwitchProbe device is assigned an interface number. Because every device has at least one NIC and only one PCC interface card, Cisco Systems assigns interface 1 and interface 2 to these interfaces, respectively.
Interface 1 is always the default management interface. Depending on the model, this interface is either Ethernet or Token Ring interface.
Interface 2 is always the Serial Line Internet Protocol (SLIP) port, and is labeled Remote on the PCC interface card.
Note If a SwitchProbe device has more than one NIC, interfaces numbered 3 and higher are assigned to each additional network interface card.
On some devicesthose with a single power socket (Figure 3-8)the power switch is on the upper right of the rear panel of the device.
To turn on the power, press the switch once.
To turn off the power, press the switch again.
Caution
To avoid damaging the device, you cannot turn the power off for four seconds after you turn the power on.
On other older devicesthose with two power sockets (Figure 3-9)the power switch is in the upper right of the rear panel of the device. To turn on the power, press the (|) side of the button until it is flush with the rear panel. To turn off the power, press the (0) side of the button until it is flush with the rear panel.
Caution
Before connecting the SwitchProbe device to the network, see "Site Requirements."
Note The power supply automatically adjusts to the applied voltage. There is no switch to change input voltage if the device is moved from the United States to Europe.
Note The power supply automatically adjusts to the applied voltage. There is no switch to change input voltage if the device is moved from the United States to Europe.
Caution
To prevent damage to the device, and to ensure that it operates correctly, never use the Power Out socket.
Each network interface can monitor the traffic of an attached segment.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet interfaces using the Agent Configuration Utility; however, the device cannot support more than one network interface configured to manage mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Each NIC can monitor the traffic of an attached segment.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet interface using the Agent Configuration Utility; however, the device cannot support more than one network interface configured to manage mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Fast Ethernet Half-Duplex devices are available in two models; the only difference between them is the type of connector on the Fast Ethernet interface:
Fast Ethernet Half-Duplex 100BaseTX modelA TX connector (RJ-45 connector) on the Fast Ethernet interface
Fast Ethernet Half-Duplex 100BaseFX modelAn FX connector (fiber-optic SC connector) on the Fast Ethernet interface
The Fast Ethernet Half-Duplex TX and FX SwitchProbe devices contain three NICs (Figure 3-12).
Interface 1Ethernet card
Interface 2PCC
Interface 3Fast Ethernet
Figure 3-12 shows the front panel on the Fast Ethernet Half-Duplex 100BaseTX SwitchProbe device.
Each NIC in a Fast Ethernet Half-Duplex device can monitor the traffic of an attached segment.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet interface using the Agent Configuration Utility; however, the device cannot support more than one network interface configured to manage mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Fast Ethernet Dual Interface Half-Duplex SwitchProbe devices are available in two models; the only difference between them is the type of connector on the Fast Ethernet interface.
Fast Ethernet Dual Interface Half-Duplex 100BaseTX modelA TX connector (RJ-45 connector) on the Fast Ethernet interface.
Fast Ethernet Dual Interface Half-Duplex 100BaseFX modelAn FX connector (fiber-optic SC connector) on the Fast Ethernet interface.
The Fast Ethernet Dual Interface Half-Duplex TX and FX SwitchProbe devices contain four NICs (Figure 3-14).
Interface 1Ethernet card
Interface 2PCC
Interfaces 3 and 4Fast Ethernet cards
Figure 3-14 shows the front panel of the Fast Ethernet Dual Interface Half-Duplex TX device.
Each NIC in a Fast Ethernet Dual Interface half-duplex device can monitor the traffic of an attached segment.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet interfaces using the Agent Configuration Utility; however, the device cannot support more than one network interface configured to manage mode.
Interfaces 3 and 4, the Fast Ethernet interfaces, are configured in monitor mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Fast Ethernet Full-Duplex SwitchProbe devices are available in two models; the only difference between them is the type of connector on the Fast Ethernet interface.
Fast Ethernet Full-Duplex 100BaseTX modelA TX connector (RJ-45 connector) on the Fast Ethernet interface.
Fast Ethernet Full-Duplex 100BaseFX modelAn FX connector (fiber-optic SC connector) on the Fast Ethernet interface.
The Fast Ethernet Full-Duplex TX and FX SwitchProbe devices contain four NICs (Figure 3-16).
Interface 1Ethernet card
Interface 2PCC
Interfaces 3 and 4Fast Ethernet cardsone for DTE and one for DCE
Figure 3-16 shows the front panel of the Fast Ethernet Full-Duplex 100BaseTX SwitchProbe device.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can use the Agent Configuration Utility to change the configuration of the standard 10 Mbps Ethernet interface only.
Interfaces 3 and 4, the Fast Ethernet interfaces, are always configured in monitor mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Cisco Systems offers two Multiport Fast Ethernet SwitchProbe models; the only difference between them is the type of connector on the Fast Ethernet interface:
Four-port Fast Ethernet TXA TX connector (RJ-45 connector) on the Fast Ethernet interface
Four-port Fast Ethernet FXAn FX connector (fiber-optic SC connector) on the Fast Ethernet interface
Both models contain two Fast Ethernet interface cards with two ports on each interface card.
The four-port Multiport Fast Ethernet TX and FX SwitchProbe devices contain four NICs (Figure 3-18).
Interface 1Ethernet card
Interface 2PCC
Interfaces 3 through 6Fast Ethernet cards
Figure 3-18 shows the front panel of the four-port Fast Ethernet TX SwitchProbe device.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet and/or Fast Ethernet (half-duplex only) interfaces using the Agent Configuration Utility; however, the device cannot support more than one NIC configured to manage mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
You can also use the Agent Configuration Utility to configure the ports of the Fast Ethernet interfaces to one of the three monitoring modes:
Half-duplex modeAll four ports monitor half-duplex Fast Ethernet segments (one port required to monitor each segment).
Full-duplex modeAll four ports monitor full-duplex Fast Ethernet segments (two ports required to monitor each segment). An additional tap (purchased separately) is needed to monitor four full-duplex ports.
Mixed modePorts 1 and 2 monitor half-duplex Fast Ethernet segments (one port for each segment); ports 3 and 4 monitor full-duplex Fast Ethernet segments (two ports for each segment).
Note The placement of the Peripheral Controller Card (PCC) in a rack-mountable SwitchProbe device can vary with the type of device. In all Gigabit Ethernet devices, the PCC is positioned in the far right slot.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of only the Ethernet interface using the Agent Configuration Utility.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interface 3 and 4, the Gigabit Ethernet interface, is always configured in monitor mode.
Note The placement of the Peripheral Controller Card (PCC) in a rack-mountable SwitchProbe device can vary with the type of device. In all Gigabit Ethernet devices, the PCC is positioned in the far right slot.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of only the Ethernet interface using the Agent Configuration Utility.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interface 3 and 4, the Gigabit Ethernet interface is always configured in monitor mode.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can use the Agent Configuration Utility to change the configuration of the Ethernet Interface to also monitor.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interface 3, the FDDI interface, is always configured in monitor mode.
The FDDI SAS SwitchProbe device contains three NICs (Figure 3-23).
Interface 1Ethernet card
Interface 1PCC
Interface 3FDDI card
Figure 3-23 shows the front panel of the FDDI SAS SwitchProbe device.
Figure 3-23: FDDI SAS SwitchProbe InterfacesFront Panel
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can use the Agent Configuration Utility to change the configuration of the Ethernet interface to also monitor.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interface 3, the FDDI interface, is always configured in monitor mode.
Each network interface can monitor the traffic of an attached segment.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can use the Agent Configuration Utility to change the configuration of only the Ethernet interface to also monitor.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interface 2, the HSSI interface, is always configured in monitor mode.
Cisco Systems offers two Multiport T1/E1 WAN SwitchProbe models:
Two-port T1/E1 WANCan simultaneously monitor the network traffic on a maximum of two individually attached WAN segments.
Four-port T1/E1 WANCan simultaneously monitor network traffic on a maximum of four individually attached WAN segments.
The Multiport T1/E1 WAN SwitchProbe device can support a 6 Mb inverse multiplexer (IMUX) connected to a single interface.
Note When the IMUX is connected, no other monitoring interfaces on the device can be used.
Each WAN interface can be configured to monitor traffic for its data-link connection identifier (DLCI) components. The SwitchProbe device can monitor up to 256 DLCIs aggregated from all interfaces. For example:
Interface 1100 DLCIs
Interface 220 DLCIs
Interface 3123 DLCIs
Interface 412 DLCIs
Two-Port T1/E1 WAN SwitchProbe Device
The two-port T1/E1 WAN SwitchProbe device contains four NICs (Figure 3-25).
Interface 1Ethernet/Token Ring card
Interface 2PCC
Interfaces 3 and 4Two separate WAN cards
Figure 3-25 shows the front panel of the two-port T1/E1 WAN SwitchProbe device.
Each network interface can monitor the traffic of an attached segment.
Interface 1 (Ethernet/Token Ring)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can use the Agent Configuration Utility to change the configuration of only the Ethernet interface to also monitor.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interfaces 3 and 4, the WAN interfaces, are always configured in monitor mode.
Each network interface can monitor the traffic of an attached segment.
Interface 1 (Ethernet/Token Ring)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can use the Agent Configuration Utility to change the configuration of only the Ethernet interface to also monitor.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interfaces 3 through 6, the WAN interfaces, are always in monitor mode.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of only the Ethernet interface using the Agent Configuration Utility.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interfaces 3 and 4 (two WAN interfaces correspond to one DB-26 connector) are always configured in monitor mode.
The four-port T1/D WAN SwitchProbe devices contain three NICs (Figure 3-28).
Interface 1Ethernet card
Interface 2PCC
Interfaces 3 through 6WAN card
Note Interfaces 3 and 4labeled WAN 1 and 2; and interfaces 5 and 6labeled WAN 3 and 4correspond (as two DB-26 connectors) to one WAN card (Figure 3-28).
Figure 3-28 shows the front panel of the four-port T1/D WAN SwitchProbe device.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of only the Ethernet interface using the Agent Configuration Utility.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interfaces 3 and 4 (two WAN interfaces that correspond to one DB-26 connector) are always configured in monitor mode.
Interfaces 5 and 6 (two WAN interfaces that correspond to one DB-26 connector) are always configured in monitor mode.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet interface using the Agent Configuration Utility.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interfaces 3 and 4 (two WAN interfaces correspond to one DB-26 connector) are always configured in monitor mode.
The four-port E1/D WAN SwitchProbe devices contain three NICs (Figure 3-30).
Interface 1Ethernet card
Interface 2PCC
Interfaces 3 through 6WAN cards
Note Interfaces 3 and 4labeled WAN 1 and 2; and interfaces 5 and 6labeled WAN 3 and 4correspond (as two DB-26 connectors) to one WAN card (Figure 3-30).
Figure 3-30 shows the front panel of the four-port E1/D WAN SwitchProbe device.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet interface using the Agent Configuration Utility.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interfaces 3 and 4 (two WAN interfaces that correspond to one DB-26 connector) are always configured in monitor mode.
Interfaces 5 and 6 (two WAN interfaces that correspond to one DB-26 connector) are always configured in monitor mode.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can use the Agent Configuration Utility to change the configuration of only the Ethernet interface to also monitor.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Interfaces 3 and 4, the WAN interfaces, are configured to monitor mode and cannot be changed.
Each network interface can monitor the traffic of an attached segment.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of only the Ethernet interface using the Agent Configuration Utility.
Interface 3, the ATM interface, is always in monitor mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.
Each network interface can monitor the traffic of an attached segment.
Interface 1 (Ethernet NIC)The default mode of this interface (manage) lets the SwitchProbe device communicate on the network. You can change the mode of the Ethernet interface using the Agent Configuration Utility.
Interface 3, the ATM interface, is always in monitor mode.
Note To ensure optimum performance, Cisco Systems recommends that you maintain the interface in manage mode.