Cisco Systems 5 manual Method Usage Notes, NAM Traffic Analyzer the NAM GUI, Switch CLI

Chapter 2 Setting Up The NAM Traffic Analyzer

Traffic

	Before you can monitor data, you must direct specific traffic flowing through a switch to the NAM for
	monitoring purposes. Use the methods described in Table 2-1, Methods of Directing Traffic.
Table 2-1	Methods of Directing Traffic
Method		Usage Notes
Switch SPAN		You can direct a set of physical ports, a set of VLANs, or a set of EtherChannels to the
		NAM.
		Selecting an EtherChannel as a SPAN source is the same as selecting all physical ports
		comprising the EtherChannel as the SPAN source.
Switch Remote SPAN (RSPAN)		You can monitor packet streams from remote switches, assuming that all traffic from a
		remote switch arrives at the local switch on a designated RSPAN VLAN. Use the
		RSPAN VLAN as the SPAN source for the NAM.
NetFlow Data Export (NDE)		You can monitor NDE records directly from remote switches or routers. You must
		configure the NDE source to the NAM from a local switch or remote router, using the
		switch CLI. For received NDE traffic, a default site will be created including all
		interfaces from that device. See Sites, page 2-58.
		SPAN and NDE sources can be in effect simultaneously.
		Note Starting with NAM release 5.0, in addition to being a consumer of NDE
			records, the NAM is also a producer of NDE data packets.

Table 2-2, SPAN Sources, describes the types of SPAN sources and the possible ways to configure them.

Table 2-2	SPAN Sources
SPAN Source		Configured with one of the following:
Any set of physical ports		•	NAM Traffic Analyzer (the NAM GUI)
		•	Switch CLI
		•	Supervisor portCopyTable (SNMP)
Any EtherChannel		•	NAM Traffic Analyzer (the NAM GUI)
		•	Switch CLI
		•	Supervisor portCopyTable (SNMP)
Any set of VLANs configured on the local switch		•	NAM Traffic Analyzer (the NAM GUI)
		•	Switch CLI
		•	Supervisor portCopyTable (SNMP)

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

2-4 OL-22617-01