Chapter 2 Setting Up The NAM Traffic Analyzer

Traffic

Creating ERSPAN Data Sources Using the CLI

To manually configure a ERSPAN data source on the NAM using the CLI (for example if the auto-creation feature is turned off), use the following steps. Note that when using the CLI, there are two separate phases involved: First, you must create a “device” entry on the NAM and remember the device ID, and then you must create a data source entry using this device ID. In the NAM GUI, these two phases for creating ERSPAN data sources are combined together.

Step 1 Enter the command device erspan. You will now be in erspan device subcommand mode as shown here:

root@172-20-104-107.cisco.com# device erspan

Entering into subcommand mode for this command.

Type 'exit' to apply changes and come out of this mode.

Type 'cancel' to discard changes and come out of this mode.

root@172-20-104-107.cisco.com(sub-device-erspan)#

Step 2 Enter ? to see all the command options available, as in the example below:

root@172-20-104-107.cisco.com(sub-device-netflow)# ?

 

?

- display help

 

address

- device IP address (*)

 

cancel

- discard changes and exit

from subcommand mode

exit

- create device and exit from sub-command mode

help

- display help

 

show

- show current config that

will be applied on exit

(*)- denotes a mandatory field for this configuration.

root@172-20-104-107.cisco.com(sub-device-netflow)#

Step 3 Enter the IP address of the device as shown in this example (required):

root@172-20-104-107.cisco.com(sub-device-erspan)# address 192.168.0.1

Step 4 Type show to look at the device configuration that will be applied and verify that it is correct:

root@172-20-104-107.cisco.com(sub-device-erspan)# show

DEVICE

TYPE

:

ERSPAN (Encapsulated Remote SPAN)

DEVICE

ADDRESS

:

192.168.0.1

root@172-20-104-107.cisco.com(sub-device-erspan)#

Step 5 Type exit to come out of the subcommand mode and create the device. Remember the ID value that was assigned to the new device (you will need it to create the data source).

root@172-20-104-107.cisco.com(sub-device-erspan)# exit Device created successfully, ID = 1 root@172-20-104-107.cisco.com#

Step 6 Enter the command data-source erspan. You will now be in erspan data source subcommand mode as

shown here: root@172-20-104-107.cisco.com# data-source erspan

Entering into subcommand mode for this command.

Type 'exit' to apply changes and come out of this mode.

Type 'cancel' to discard changes and come out of this mode.

root@172-20-104-107.cisco.com(sub-data-source-erspan)#

 

 

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

 

 

 

 

 

 

OL-22617-01

 

 

2-13

 

 

 

 

 

Page 47
Image 47
Cisco Systems NAM, 5 manual Creating Erspan Data Sources Using the CLI