Specifications

© 2006 Cisco Systems, Inc.
All rights reserved.
Product Features 2-71
NAM / Traffic Analyzer v3.5 Tutorial
© 2006 Cisco Systems, Inc. All rights reserved.
Product Features 2-71
NAM / Traffic Analyzer v3.5 Tutorial
Basic NAM-1/2 Configuration
Step 2: Enabling Core Monitoring
Basic NAM-1/2 Configuration
Step 2: Enabling Core Monitoring
Step 2: Enable monitoring type
by data source
Step 2: Enable monitoring type
by data source
NAM DATAPORT 1
NAM DATAPORT 1
SPAN source 2/1 (Trunk)
VLAN 1 and 99
Internal
Interface
Internal
Interface
NDE Device
192.168.79.110
NAM
Traffic
Analysis Engine
NAM
Traffic
Analysis Engine
NDE Default
192.168.79.110
ALL SPAN
DATAPORT 1
VLAN 1
MPLS VRF Cust1
App,host, conv
App, host, conv, voice,
ART, DiffServ, VLAN, URL
App, host, conv, voice,
ART, DiffServ, VLAN,URL
NDE Custom
“To WAN”
App, host, conv
App, host, conv, voice
App, host, conv, DiffServ, URL
Step 1: Configure Data
Sources
Step 1: Configure Data
Sources
Supervisor Module
Mini-RMON, VLAN, NBAR
App, host, conv, voice
ERSPAN
ERSPAN
Enabling Data Collection (NAM-1/2)
After you have configured the data sources (SPAN / VACL / NetFlow), you are ready to begin configuring
data collection. Enabling data collection entails configuring the NAM to collect specific types of data, listed
below, from the various data sources.
• ALLSPAN – Monitors all traffic forwarded to the NAM-1/2 by means of spanning sessions and VACL
traffic
• DATAPORT X – Monitors all traffic forwarded to an individual NAM-2 data port by means of Spanning
sessions and VACL traffic (NAM-2 option only)
• VLAN X – Monitors all traffic forwarded to the NAM-1/2 by means of spanning sessions and VACL
traffic that has membership in the VLAN selected
• ERSPAN – Monitors all traffic received via ERSPAN
• MPLS Tag X – Monitors all traffic forwarded to the NAM-1/2 by means of spanning sessions and VACL
traffic that has membership in the MPLS traffic flow selected
• NDE default – Monitors all NetFlow traffic sent by a single NetFlow device
• NDE Custom – Monitors a subset of NetFlow traffic from a single device
Enabling data collection informs the NAM how to analyze the data, including what tables, graphs, and charts
will be generated, and how many entries each report will contain.
The figure above shows an example of the data streams available for analysis on a NAM-1/2. The “stream”
forwarded to the NAM-1/2 data port is a single port albeit a trunk. Possible data streams to enable analysis
for include All SPAN which is an aggregate of all traffic sent to the NAMs data ports, Dataport X which is an
aggregate of all traffic sent to the data port, VLAN 1 which is a subset of all traffic sent to the NAM, MPLS
VRF:cust1 which is a subset of all traffic sent to the NAM, ERSPAN which is an aggregate of all ERSPAN
traffic sent to the NAM, NDE Default for 192.168.79.100 which is an aggregate of all NetFlow packets from
that device, Custom NDE “TO WAN” which is a subset of the NDE packets from 192.168.79.100, and finally
Supervisor which includes mini-RMON, VLAN, and NBAR statistics from the host switch.