Cisco Systems 6500

2-370

Catalyst 6500 Series Switch Command Reference—Release8.1

78-15474-01

Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set mls nde

Use the following syntax to specify an IP subnet address:

•ip_subnet_addr—This is the short subnet address format. The trail ing deci mal num be r 0 0 in an IP

address YY.YY.YY.00 specifies the boundary for an IP subnet address. For example, 172.22.36.00

indicates a 24-bit subnet address (subnet mask 172.22.36.00/255.255.25 5.0), and 17 3.2 4.00. 00

indicates a 16-bit subnet address (subnet mask 173.24.00.00/255.255.0.0). However, this format can

identify only a subnet address of 8, 16, or 24 bits.

•ip_addr/subnet_mask—This is the long subnet address format. For example,

172.22.252.00/255.255.252.00 indicates a 22-bit subnet address. This format can specify a sub net

address of any bit number. To provide more flexibility, the ip_addr is a full host address, such as

172.22.253.1/255.255.252.00.

•ip_addr/maskbits—This is the simplified long subnet address format. The mask bits specify the

number of bits of the network masks. For example, 172.22.252.00/22 indicates a 22-bit subnet

address. The ip_addr is a full host address, such as 193.22.253.1/22, which has the same subnet

address as the ip_subnet_addr.

When you use the set mls nde {collector_ip | collector_name} {udp_port_num} command, the host

name and UDP port number are saved in NVRAM and need not be specified again. If you specify a host

name and UDP port, the new values overwrite the values in NVRAM. Collector values in NVRAM do

not clear when you disable NDE.

Examples This example shows how to specify that only expired flows to a specific subnet a re expor ted :

Console> (enable) set mls nde flow include destination 171.69.194.140/24

NDE destination filter set to 171.69.194.0/24

Console> (enable)

This example shows how to specify that only expired flows to a specific host are exported:

Console> (enable) set mls nde flow include destination 171.69.194.140

NDE destination filter set to 171.69.194.140/32.

Console> (enable)

This example shows how to specify that only expired flows from a specific subnet to a specific host are

exported:

Console> (enable) set mls nde flow include destination 171.69.194.140/24 source 171.69.173.5/24

NDE destination filter set to 171.69.194.0/24, source filter set to 171.69.173.0/24

Console> (enable)

This example shows how to specify that only flows from a specific port are exported:

Console> (enable) set mls nde flow include dst_port 23

NDE source port filter set to 23.

Console> (enable)

This example shows how to specify that only expired flows from a specific host that are of a specified

protocol are exported:

Console> (enable) set mls nde flow include source 171.69.194.140 protocol 51

NDE destination filter set to 171.69.194.140/32, protocol set to 51.

Console> (enable)