Chapter 2 Setting Up The NAM Traffic Analyzer

Traffic

Step 7 Enter ? to see all the command options available, as in the example below:

root@172-20-104-107.cisco.com(sub-data-source-erspan)# ?

?

- display help

cancel

- discard changes and exit from subcommand mode

device-id

- netflow device ID (*)

exit

- create data-source and exit from sub-command mode

help

- display help

name

- data-source name (*)

session-id

- erspan Session ID

show

- show current config that will be applied on exit

(*)- denotes a mandatory field for this configuration.

root@172-20-104-107.cisco.com(sub-data-source-erspan)#

Step 8 Enter the device ID from Step 4.

root@172-20-104-107.cisco.com(sub-data-source-erspan)# device-id 1

Step 9 Enter the name you would like for the data source (required):

root@172-20-104-107.cisco.com(sub-data-source-erspan)# name MyFirstErspanDataSource

Step 10 If desired, supply the specific Session ID for this ERSPAN data source (optional):

root@172-20-104-107.cisco.com(sub-data-source-erspan)# session-id 123

Step 11 Type show to look at the data source configuration that will be applied and verify that it is correct:

root@172-20-104-107.cisco.com(sub-data-source-netflow)# show

DATA

SOURCE NAME : MyFirstErspanDataSource

DATA

SOURCE TYPE : ERSPAN (Encapsulated Remote SPAN)

DEVICE

ID

: 1

DEVICE

ADDRESS

: 192.168.0.1

SESSION ID

: 123

root@172-20-104-107.cisco.com(sub-data-source-erspan)#

Step 12 Type exit to come out of the subcommand mode and create the data source:

root@172-20-104-107.cisco.com(sub-data-source-erspan)# exit Data source created successfully, ID = 3

The data source is now created, and ERSPAN records from the device will be received and accepted by the NAM as they arrive.

Deleting ERSPAN Data Sources Using the Web GUI

To delete an existing ERSPAN data source, use the following steps. Note that if the auto-creation feature is turned on, and the device continues to send ERSPAN packets to the NAM, the data source will be recreated again automatically as soon as the next ERSPAN packet arrives. Therefore, if you wish to delete an existing ERSPAN data source, it is usually advisable to first turn the ERSPAN auto-create feature off, as described earlier.

Step 1 Click Setup > Traffic > NAM Data Sources

Step 2 Click on the data source you would like to delete to highlight it.

 

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

2-14

OL-22617-01

Page 48
Image 48
Cisco Systems 5, NAM manual Deleting Erspan Data Sources Using the Web GUI, Enter the device ID from Step