Cisco Systems NAM, 5 manual For Devices Running Cisco IOS

Chapter 2 Setting Up The NAM Traffic Analyzer

Traffic

For Devices Running Cisco IOS

Step 1 Select the interface on which you wish to turn on routed flow cache.

Prompt# configure terminal

Prompt(config)# interface <type slot/port>

Prompt(config-if)# ip route-cache flow

Step 2 Export routed flow cache entries to UDP port 3000 of the NAM.

Prompt(config)# ip flow-export destination <NAM IP address> 3000

Note Newer Cisco IOS images support Flexible NetFlow. This feature allows you to configure a router

or switch to export certain fields of network traffic flow to the NAM. From the NAM’s perspective, it is not practical to have incomplete flow information, such as flow records with no packet count but byte count. Another exactly is flow records without a source address but with a destination address. These incomplete flow records make the presentation in the NAM GUI confusing. Cisco highly recommends that you export full flow (for example, NDEv5 format) information to the NAM.

For Devices Supporting Multi-Layer Switching Cache Running Cisco IOS

Step 1 Select the version of NDE.

Prompt(config)# mls nde sender version <version-number>

Note The NAM supports NDE versions 1, 5, 6, 7, 8, and 9 aggregation caches.

Step 2 Select NDE flow mask.

Prompt(config)# mls flow ip full

Step 3 Enable NetFlow export.

Prompt(config)# mls nde sender

Step 4 Export NetFlow to UDP port 3000 of the NAM.

Prompt(config)# ip flow-export destination <NAM IP address> 3000

For Devices Supporting NDE v8 Aggregations Running Cisco IOS

Step 1 Select a v8 aggregation.

Prompt(config)# ip flow-aggregation cache <aggregation-type>

Where aggregation-type can be:

•destination-prefix

•source-prefix

	User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0
OL-22617-01		2-21