2-419
Catalyst 6500 Series Switch Command Reference—Release8.4
OL-6244-01
Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set mls nde
In software release 8.3(1) and later releases, the dual destination feature allows NetFlow export data to
be sent to two destinations simultaneously. With this enhancement, you can set up two unique collec tors.
The same NetFlow data is exported to both the destinations. However, the count of the packets to the two
collectors may differ depending on the time the two destinations were creat ed . Th e coun t of th e p ackets
sent to the individual collectors is maintained separately. Apart from the count, the other NetFlow
parameters for both the destinations are the same.
NDE cannot be enabled unless a collector is set up. Both the primary and secondary destinations should
be set up before enabling NDE. The secondary destination IP address and port numbe r can not be equ al
to the primary destination IP address and port number.
Use the following syntax to specify an IP subnet address:
•ip_subnet_addr—This is the short subnet address format. The trail ing deci mal num be r 0 0 in an IP
address YY.YY.YY.00 specifies the boundary for an IP subnet address. For example, 172.22.36.00
indicates a 24-bit subnet address (subnet mask 172.22.36.00/255.255.25 5.0), and 17 3.2 4.00. 00
indicates a 16-bit subnet address (subnet mask 173.24.00.00/255.255.0.0). However, this format can
identify only a subnet address of 8, 16, or 24 bits.
•ip_addr/subnet_mask—This is the long subnet address format. For example,
172.22.252.00/255.255.252.00 indicates a 22-bit subnet address. This format can specify a sub net
address of any bit number. To provide more flexibility, the ip_addr is a full host address, such as
172.22.253.1/255.255.252.00.
•ip_addr/maskbits—This is the simplified long subnet address format. The mask bits specify the
number of bits of the network masks. For example, 172.22.252.00/22 indicates a 22-bit subnet
address. The ip_addr is a full host address, such as 193.22.253.1/22, which has the same subnet
address as the ip_subnet_addr.
When you use the set mls nde {collector_ip | collector_name} {udp_port_num} command, the host
name and UDP port number are saved in NVRAM and need not be specified again. If you specify a host
name and UDP port, the new values overwrite the values in NVRAM. Collector values in NVRAM do
not clear when you disable NDE.
Examples This example shows how to set the NDE version to 5:
Console> (enable) set mls nde version 5
Multilayer switching netflow data export version set to 5
Console> (enable)
This example shows how to specify that only expired flows to a specific subnet are exported:
Console> (enable) set mls nde flow include destination 171.69.194.140/24
NDE destination filter set to 171.69.194.0/24
Console> (enable)
This example shows how to specify that only expired flows to a specific host are exported:
Console> (enable) set mls nde flow include destination 171.69.194.140
NDE destination filter set to 171.69.194.140/32.
Console> (enable)
This example shows how to specify that only expired flows from a specific subnet to a specific host are
exported:
Console> (enable) set mls nde flow include destination 171.69.194.140/24 source
171.69.173.5/24
NDE destination filter set to 171.69.194.0/24, source filter set to 171.69.173.0/24
Console> (enable)