Network Analysis Module (NM-NAM) The Network Analysis Module (NM-NAM) feature is a network module that monitors and analyzes network traffic for a system using extended Remote Monitoring (RMON) standards, RMON2, and other Management Information Bases (MIBs). Note The Network Analysis Module (NAM) is available in multiple hardware forms for some Cisco routers and Catalyst switches.
Network Analysis Module (NM-NAM) Contents Contents • Prerequisites for the Network Analysis Module (NM-NAM), page 2 • Restrictions for the Network Analysis Module (NM-NAM), page 2 • Information About the Network Analysis Module (NM-NAM), page 3 • How to Configure and Manage the Network Analysis Module (NM-NAM), page 12 • Configuration Examples for the Network Analysis Module (NM-NAM), page 47 • Additional References, page 53 • Command Reference, page 55 • Glossary, page 75 Prerequisites for
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) • When access control lists are used: – Packets dropped by an inbound access list are not forwarded to the NAM. – Packets dropped by an outbound access list are forwarded to the NAM for analysis.
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) Table 1 NM-NAM Specifications (continued) Specification Description Nonoperating temperature –40° to 185°F (–40° to 85°C) Humidity 5 to 95% noncondensing Operating altitude 0 to 10,000 ft (0 to 3,000 m) Faceplate and LEDs Figure 1 NM-NAM Faceplate and LEDs 1 2 3 NM-NAM WARNING!! Shut down NM-NAM application before removing or power cycling.
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) NAM Network Interfaces The NAM uses three interfaces for communication (see Figure 2): Note • Analysis-Module Interface • Internal NAM Interface • External NAM Interface The NM-NAM does not have an external console port. To access the NAM console, open a NAM console session from the router or use Telnet or SSH over the network.
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) Internal NAM Interface The internal NAM interface is used for monitoring traffic that passes through router interfaces. You can also select the internal NAM interface as the management interface for the NAM. Visible only to the NAM software on the NM-NAM, the internal NAM interface is the Fast Ethernet interface on the NM-NAM that connects to the Analysis-Module interface on the router.
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) External NAM Interface for Management Traffic—How to Assign IP Addresses If you select the external NAM interface to handle management traffic: • For the Analysis-Module interface (in Cisco IOS CLI), we recommend that you use the IP unnumbered interface configuration to borrow the IP address of another router interface. The subnet does not need to be routable.
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) Sample Operating Topologies In each of the following topologies, the router’s LAN interface is monitored through the external NAM interface, and the router’s WAN interface is monitored through the internal NAM interface: • NAM Management Interface Is Internal and Analysis-Module Interface Is Assigned an IP Address, page 8 • NAM Management Interface Is Internal and Analysis-Module Interface Is IP Unnumbered, page 9 •
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) Figure 3 Callout Interface Location 4 Serial interface WAN interface card (WIC) 5 Fast Ethernet interface Router rear panel NAM Management Interface Is Internal and Analysis-Module Interface Is IP Unnumbered Figure 4 shows a sample topology, in which: • The internal NAM interface is used for management traffic.
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) NAM Management Interface Is External and Analysis-Module Interface Is IP Unnumbered Figure 5 shows a sample topology where: • The external NAM interface is used for management traffic. • The Analysis-Module interface is configured as IP unnumbered to borrow an IP address from the loopback interface. • The borrowed loopback interface IP address is not routable.
Network Analysis Module (NM-NAM) Information About the Network Analysis Module (NM-NAM) NAM CLI This section includes the following topics: • NAM CLI Access • NAM CLI Prompt • Basic NAM CLI Commands • NAM CLI Context-Sensitive Help NAM CLI Access There are three ways to access the NAM CLI: • Open a NAM console session from the router in which the NM-NAM is installed—See the “Opening and Closing a NAM Console Session from the Router” section on page 18.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Table 2 Basic NAM CLI Commands (continued) NAM CLI Command Purpose ip http secure server enable Enables the secure HTTP server. ip http server enable Enables the HTTP server. ip interface external Selects the external NAM interface for management traffic. ip interface internal Selects the internal NAM interface for management traffic. ip nameserver Sets the system name server address.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) • Configuring a Static Route to the NAM Through the Analysis-Module Interface, page 25 (required for using the internal NAM interface for management traffic) • Enabling NAM Packet Monitoring, page 27 (required for monitoring traffic through the internal NAM interface) • Enabling and Accessing the NAM Traffic Analyzer, page 29 (required) • Changing the NAM Root Password, page 32 (optional) • Resetting
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose enable Enables privileged EXEC mode. • Enter your password if prompted. Example: Router> enable Step 2 configure terminal Enters global configuration mode. Example: Router# configure terminal Step 3 interface type number Example: (Optional) Configures an interface, and enters interface configuration mode.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 7 Command or Action Purpose no shutdown Activates the Analysis-Module interface. Example: Router(config-if)# no shutdown Step 8 Returns to privileged EXEC mode. end Example: Router(config-if)# end Router# Step 9 show ip interface brief or show running-config Displays the IP addresses and summary status of the interfaces. or Displays the contents of the currently running configuration file.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Configuring the Analysis-Module Interface—IP Unnumbered with Routable Subnet: Example In the following example, the Analysis-Module interface is IP unnumbered and borrows the IP address of the Fast Ethernet interface. The IP address is from a routable subnet, and the NM-NAM is installed in router slot 1. ! interface FastEthernet 0/0 ip address 209.165.202.129 255.255.255.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) SUMMARY STEPS 1. enable 2. configure terminal 3. aaa authentication login list-name none 4. line number 5. login authentication list-name 6. end 7. show running-config DETAILED STEPS Step 1 Command or Action Purpose enable Enables privileged EXEC mode. • Enter your password if prompted. Example: Router> enable Step 2 Enters global configuration mode.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 6 Command or Action Purpose end Returns to privileged EXEC mode. Example: Router(config-line)# end Router# Step 7 show running-config Displays the contents of the currently running configuration file. • Example: Router# show running-config Verify that you configured the local authentication list and applied it to the line associated with the NM-NAM.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose enable Enables privileged EXEC mode. • Enter your password if prompted. Example: Router> enable Step 2 service-module analysis-module slot/0 session Establishes a console session with the NAM.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 5 Command or Action Purpose At the password prompt, enter your password. — or If you have not changed the password from the factory-set default, enter root as the root password. Example: Password: Step 6 Step 7 Perform the tasks that you need to perform in the NAM CLI. When you want to end the NAM console session and return to the Cisco IOS CLI, complete Step 7 through Step 10.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Opening and Closing a NAM Console Session When AAA Authentication Is Not Configured or Is Disabled on the NAM Console Line: Example In the following example, a NAM console session is opened and closed from the router. The NM-NAM is installed in router slot 2. Router# service-module analysis-module 2/0 session Trying 10.1.1.1, 2065 ... Open Cisco Network Analysis Module (NM-NAM) nam1.cisco.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Troubleshooting Tips Make sure that the NAM console line is clear by entering the service-module analysis-module slot/0 session clear command in privileged EXEC mode. What to Do Next Proceed to the “Configuring the NM-NAM” section. Configuring the NM-NAM This section describes how to configure the NM-NAM to establish network connectivity and configure IP parameters.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose ip interface {internal | external} Specifies which NAM interface will handle management traffic. Example: root@localhost# ip interface internal Example: root@localhost# ip interface external Step 2 Configures the NAM system IP address. ip address ip-address subnet-mask • Example: root@localhost# ip address 172.20.104.126 255.255.255.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 9 Command or Action Purpose ping {host | ip-address} Checks connectivity to a network device. • Verify connectivity to the router or another known host. Example: root@nam1# ping 10.20.30.40 Step 10 Displays the NAM IP parameters. show ip • Verify that you properly configured the NM-NAM.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Sample Output for the show ip NAM CLI Command root@nam1.cisco.com# show ip IP address: Subnet mask: IP Broadcast: IP Interface: DNS Name: Default Gateway: Nameserver(s): HTTP server: HTTP secure server: HTTP port: HTTP secure port: TACACS+ configured: Telnet: SSH: root@nam1.cisco.com# 172.20.105.215 255.255.255.192 10.255.255.255 External nam1.cisco.com 172.20.105.210 209.165.201.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose enable Enables privileged EXEC mode. • Enter your password if prompted. Example: Router> enable Step 2 configure terminal Enters global configuration mode. Example: Router# configure terminal Step 3 ip route nam-ip-address mask analysis-module slot/unit Establishes a static route to the NAM. Example: Router(config)# ip route 172.20.105.215 255.255.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Verifying Network Connectivity with Ping: Example In the following example, entering the ping command verifies network connectivity to the NAM with IP address 172.20.105.215. Router# ping 172.20.105.215 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.20.105.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose enable Enables privileged EXEC mode. • Enter your password if prompted. Example: Router> enable Step 2 configure terminal Enters global configuration mode. Example: Router# configure terminal Step 3 Enables the CEF switching path. ip cef Example: Router(config)# ip cef Step 4 interface type slot/port Selects an interface for configuration.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Enabling NAM Packet Monitoring: Example In the following example, NAM packet monitoring is enabled on the serial interfaces: interface Serial 0/0 ip address 172.20.105.213 255.255.255.240 ip route-cache flow speed auto full-duplex analysis-module monitoring no mop enabled ! interface Serial 0/1 ip address 172.20.105.53 255.255.255.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) 3. Enter a web username. or Press Return to enter the default web username “admin”. 4. Enter a password. 5. Enter the password again. 6. On your PC, open a web browser. 7. In the web browser, enter the NAM system IP address or hostname as the URL. DETAILED STEPS Command or Action Step 1 Purpose Open a NAM console session from the router. See the Accesses the NAM CLI.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 5 Command or Action Purpose Enter the password again. Confirms the password for the web username. Example: Confirm password: Step 6 On your PC, open a web browser. Step 7 In the web browser, enter the NAM system IP address Opens the NAM Traffic Analyzer in your web browser. or hostname as the URL. • You are automatically redirected to the NAM Traffic Analyzer login page.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Figure 6 Sample NAM Traffic Analyzer Login Page What to Do Next For information on the NAM Traffic Analyzer, refer to the User Guide for the Network Analysis Module Traffic Analyzer for your NAM software release. This document is available on Cisco.com and as online help within the NAM Traffic Analyzer application.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose password root Starts the process of changing the NAM’s root (read/write) level password. Example: root@localhost.cisco.com# password root Step 2 Enter the new password. Enters the new password. Example: New UNIX password: Step 3 Enter the new password again. Confirms the new password.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Verifying the NAM Root Password: Example nam1.cisco.com login: root Password: Terminal type: vt100 Cisco Network Analysis Module (NM-NAM) Console, 3.2 Copyright (c) 1999-2003 by cisco Systems, Inc. root@nam1.cisco.com# root@nam1.cisco.com# exit Troubleshooting Tips If you forget the NAM root password, see the “Resetting the NAM Root Password to the Default Value” section on page 34.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose enable Enables privileged EXEC mode. • Enter your password if prompted. Example: Router> enable Step 2 service-module analysis-module slot/0 reload Reloads the software on the NM-NAM. Example: Router# service-module analysis-module 1/0 reload Step 3 Confirms that you want to proceed with the NAM software reload.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 8 Command or Action Purpose When prompted to select from the helper menu, enter r. Selects the menu option to exit the helper and reset the NAM. Example: Selection [12345678rh]:r Step 9 Confirms that you want to exit the helper and reset the NAM. y • Example: This time, ignore the prompt to enter ***. About to exit and reset Services Engine.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) ServicesEngine boot-loader> boot flash . . ============================================================================== Cisco Systems, Inc. Services engine helper utility for NM-NAM Version 1.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Troubleshooting Tips If you have trouble opening a NAM console session from the router, make sure that the NAM console line is clear by entering the service-module analysis-module slot/0 session clear command in privileged EXEC mode.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) SUMMARY STEPS 1. telnet {ip-address | hostname} or ssh {ip-address | hostname} 2. At the login prompt, enter root. 3. At the password prompt, enter your password. or If you have not changed the password from the factory-set default, enter root as the root password. 4. Perform the tasks that you need to perform in the NAM CLI.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 5 Command or Action Purpose exit Leaves a subcommand mode. • Return to command mode. Example: root@localhost(sub-custom-filter-capture)# exit root@localhost# Step 6 Logs out of the NAM system. logout Example: root@localhost# logout Connection closed by foreign host.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Upgrading the NAM Software This section describes how to upgrade the NAM software. This task is performed from the NAM CLI.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose patch ftp://user:password@host/full-path/filename Downloads and installs a software patch. • Use the first option, which includes the password, if the FTP server does not allow anonymous users. patch ftp://user@host/full-path/filename • If you use the second option, enter your password when prompted.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) DETAILED STEPS Step 1 Command or Action Purpose reboot Shuts down and restarts the NAM. • Remember to perform this task in the NAM CLI. Example: root@nam1.cisco.com# reboot Step 2 Confirms that you want to reboot the NAM. y • Example: Reboot the NAM? (Y/N) [N]: y Step 3 When prompted, enter *** to change the boot configuration.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Step 7 Command or Action Purpose y Confirms that you want to install the specified NAM software image. Example: Do you want to proceed installing it? [y/N] y Step 8 Selects the menu option to exit the helper and reset the NAM. r Example: Selection [12345678rh]:r Step 9 Confirms that you want to exit the helper and reset the NAM. y • Example: This time, ignore the prompt to enter ***.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Applying /usr/local/nam/patch/workdir/nam-app.3-2.cryptoK9.patch.1-0.bin. Please wait... ########################################### [100%] ########################################### [100%] Patch applied successfully. root@nam1.cisco.com# show patches Tue Aug 31 21:04:28 2004 Patch:nam-app.3-2.strong-crypto-patchK9-1-0 Description:Strong Crypto Patch for NAM. root@nam1.cisco.
Network Analysis Module (NM-NAM) How to Configure and Manage the Network Analysis Module (NM-NAM) Main menu 1 - Download application image and write to HDD 2 - Download application image and reformat HDD 3 - Download bootloader and write to flash 4 - Download helper and write to flash 5 - Display software versions 6 - Reset application image CLI passwords to default 7 - Change file transfer method (currently ftp/http) 8 - Show upgrade log 9 - Send Ping r - Exit and reset Services Engine h - Exit and shutdo
Network Analysis Module (NM-NAM) Configuration Examples for the Network Analysis Module (NM-NAM) Configuration Examples for the Network Analysis Module (NM-NAM) This section provides the following configuration examples: • NAM Management Interface Is Internal and Analysis-Module Interface Is Assigned an IP Address: Example, page 47 • NAM Management Interface Is Internal and Analysis-Module Interface Is IP Unnumbered: Example, page 49 • NAM Management Interface Is External and Analysis-Module Interface
Network Analysis Module (NM-NAM) Configuration Examples for the Network Analysis Module (NM-NAM) Figure 7 NAM Management Interface Is Internal and Analysis-Module Interface Is Assigned an IP Address Figure 7 Callout Interface Location 1 Analysis-Module interface Router internal 2 Internal NAM interface (management) NM-NAM internal 3 External NAM interface NM-NAM faceplate 4 Serial interface WAN interface card (WIC) 5 Fast Ethernet interface Router rear panel Router Configuration (Cisco
Network Analysis Module (NM-NAM) Configuration Examples for the Network Analysis Module (NM-NAM) ! interface analysis-module 2/0 ip address 209.165.200.225 255.255.255.224 hold-queue 60 out no shutdown ! NAM Configuration (NAM Software) ! ip address 209.165.200.226 255.255.255.224 ! ip host "nam1" ! ip domain "cisco.com" ! ip gateway 209.165.200.225 ! ip broadcast 10.255.255.255 ! ip nameserver 172.16.201.
Network Analysis Module (NM-NAM) Configuration Examples for the Network Analysis Module (NM-NAM) Figure 8 Sample Topology: NAM Management Interface Is Internal and Analysis-Module Interface Is IP Unnumbered Figure 8 Callout Interface Location 1 Analysis-Module interface Router internal 2 Internal NAM interface (management) NM-NAM internal 3 External NAM interface NM-NAM faceplate 4 Serial interface WAN interface card (WIC) 5 Fast Ethernet interface Router rear panel Router Configuration
Network Analysis Module (NM-NAM) Configuration Examples for the Network Analysis Module (NM-NAM) ! interface analysis-module 2/0 ip unnumbered FastEthernet0/0 no shutdown hold-queue 60 out ! NAM Configuration (NAM Software) ! ip address 209.165.200.226 255.255.255.224 ! ip host "nam1" ! ip domain "cisco.com" ! ip gateway 209.165.200.225 ! ip broadcast 10.255.255.255 ! ip nameserver 172.16.201.
Network Analysis Module (NM-NAM) Configuration Examples for the Network Analysis Module (NM-NAM) Figure 9 Sample Topology: NAM Management Interface Is External and Analysis-Module Interface Is IP Unnumbered Figure 9 Callout Interface Location 1 Analysis-Module interface Router internal 2 Internal NAM interface NM-NAM internal 3 External NAM interface (management) NM-NAM faceplate 4 Loopback interface Router internal 5 Serial interface WAN interface card (WIC) 6 Fast Ethernet interface
Network Analysis Module (NM-NAM) Additional References ! interface Serial 0/0 encapsulation ppp ip address 209.165.202.129 255.255.255.224 analysis-module monitoring no shutdown ! interface analysis-module 3/0 ip unnumbered loopback 0 hold-queue 60 out no shutdown ! NAM Configuration (NAM software) ! ip address 209.165.201.2 255.255.255.224 ! ip host "nam1" ! ip domain "cisco.com" ! ip gateway 209.165.201.1 ! ip broadcast 10.255.255.255 ! ip nameserver 209.165.201.
Network Analysis Module (NM-NAM) Additional References Related Topic Document Title Router documentation Modular Access Routers IP unnumbered interfaces Understanding and Configuring the ip unnumbered Command Authentication, authorization, and accounting (AAA) Cisco IOS Security Configuration Guide Standards Standards Title No new or modified standards are supported by this — feature, and support for existing standards has not been modified by this feature.
Network Analysis Module (NM-NAM) Command Reference Technical Assistance Description Link Technical Assistance Center (TAC) home page, containing 30,000 pages of searchable technical content, including links to products, technologies, solutions, technical tips, and tools. Registered Cisco.com users can log in from this page to access even more content. http://www.cisco.com/public/support/tac/home.shtml Command Reference This section documents new commands.
Network Analysis Module (NM-NAM) analysis-module monitoring analysis-module monitoring To enable Network Analysis Module (NAM) packet monitoring on an interface, use the analysis-module monitoring command in interface configuration mode. To disable NAM packet monitoring, use the no form of this command. analysis-module monitoring no analysis-module monitoring Syntax Description This command has no arguments or keywords. Defaults NAM packet monitoring is disabled.
Network Analysis Module (NM-NAM) interface analysis-module interface analysis-module To configure the Analysis-Module interface on the router that connects to an installed Network Analysis Module (NM-NAM), use the interface analysis-module command in global configuration mode. This command does not have a not form. interface analysis-module slot/unit Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network module.
Network Analysis Module (NM-NAM) interface analysis-module Related Commands Command Description ip unnumbered Enables IP processing on an interface without assigning an explicit IP address to the interface. show interfaces analysis-module Displays status, traffic data, and configuration information about the Analysis-Module interface.
Network Analysis Module (NM-NAM) service-module analysis-module reload service-module analysis-module reload To perform a graceful halt and reboot of the Network Analysis Module (NAM) software on the NM-NAM network module, use the service-module analysis-module reload command in privileged EXEC mode. service-module analysis-module slot/unit reload Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network module.
Network Analysis Module (NM-NAM) service-module analysis-module reset service-module analysis-module reset To reset the hardware on the Network Analysis Module (NM-NAM), use the service-module analysis-module reset command in privileged EXEC mode. service-module analysis-module slot/unit reset Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network module. For the NM-NAM, always use 0.
Network Analysis Module (NM-NAM) service-module analysis-module session service-module analysis-module session To access the Network Analysis Module (NAM) console from the router, use the service-module analysis-module session command in privileged EXEC mode. service-module analysis-module slot/unit session [clear] Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network module. For the NM-NAM, always use 0.
Network Analysis Module (NM-NAM) service-module analysis-module session WARNING! Default password has not been changed! root@nam1.cisco.com# Clearing the NAM Console Line The following example shows how to clear the NAM console line when the NM-NAM is installed in router slot 1: Router# service-module analysis-module 1/0 session clear [confirm] [OK] Related Commands Command Description ssh Starts an encrypted session with a remote networking device. telnet Logs in to a host that supports Telnet.
Network Analysis Module (NM-NAM) service-module analysis-module shutdown service-module analysis-module shutdown To gracefully halt the operating system on the Network Analysis Module (NM-NAM), use the service-module analysis-module shutdown command in privileged EXEC mode. service-module analysis-module slot/unit shutdown [no-confirm] Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network module. For the NM-NAM, always use 0.
Network Analysis Module (NM-NAM) service-module analysis-module shutdown Gracefully Halt the Operating System — No Confirmation The following example shows how to gracefully halt the operating system of the NM-NAM in slot 2 without any user confirmation: Router# service-module analysis-module 2/0 shutdown no-confirm Use service module reset command to recover from shutdown.
Network Analysis Module (NM-NAM) service-module analysis-module status service-module analysis-module status To display hardware and software status information about the Network Analysis Module (NM-NAM), use the service-module analysis-module status command in privileged EXEC mode. service-module analysis-module slot/unit status Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network module. For the NM-NAM, always use 0.
Network Analysis Module (NM-NAM) show controllers analysis-module show controllers analysis-module To display controller information for the analysis module interface, use the show controllers analysis-module command in user EXEC or privileged EXEC mode. show controllers analysis-module slot/unit Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network analysis module (NAM). For NAM, always use 0.
Network Analysis Module (NM-NAM) show controllers analysis-module Rx Rx Tx Tx Tx Tx Tx Tx Tx Tx Tx Tx Tx Tx Tx Tx Tx Tx Ring (malloc) = 0x4F7C9FE0 Buffer Descr (malloc) = 0x4F7CA420 Ring entries = 128 Shadow = 0x64AD754C Shadow Head = 117 Shadow Tail = 117 Shadow Free = 128 Ring = 0x F7CA860 Head = 19 Last = 18 Tail = 19 Count = 0 Buffer Descr = 0x F7CB8A0 Buffer Descr Head = 0 Buffer Descr Tail = 0 Shadow (malloc) = 0x64AD754C Ring (malloc) = 0x4F7CA860 Buffer Descr (malloc) = 0x4F7CB8A0 CONTROL AND STA
Network Analysis Module (NM-NAM) show controllers analysis-module INTERRUPT STATISTICS CX = 613298 FR = 805 CNA = 0 RNR = 0 MDI = 0 SWI = 0 FCP = 0 Receive All Multicasts = enabled Receive Promiscuous = disabled Loopback Mode = disabled Table 4 describes the significant fields shown in the display. Table 4 Related Commands show controllers analysis-module Field Descriptions Field Description Hardware is Description of the chip being used.
Network Analysis Module (NM-NAM) show interfaces analysis-module show interfaces analysis-module To display status, traffic data, and configuration information about the analysis module interface, use the show interfaces analysis-module command in user EXEC or privileged EXEC mode. show interfaces analysis-module slot/unit Syntax Description slot Number of the router chassis slot for the network module. /unit Number of the daughter card on the network analysis module (NAM). For NAM, always use 0.
Network Analysis Module (NM-NAM) show interfaces analysis-module 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 671863 packets output, 96101624 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out Table 5 describes the significant fields shown in the display.
Network Analysis Module (NM-NAM) show interfaces analysis-module Table 5 show interfaces analysis-module Field Descriptions (continued) Field Description Last input Number of hours, minutes, and seconds since the last packet was successfully received by the interface and processed locally on the router. This field is useful for detecting when a dead interface failed. Note This field is not updated by fast-switched traffic.
Network Analysis Module (NM-NAM) show interfaces analysis-module Table 5 show interfaces analysis-module Field Descriptions (continued) Field Description 5 minute input rate, 5 minute output rate Average number of bits and packets transmitted per second in the last 5 minutes. If the interface is not in promiscuous mode, it senses network traffic that it sends and receives (rather than all network traffic).
Network Analysis Module (NM-NAM) show interfaces analysis-module Table 5 show interfaces analysis-module Field Descriptions (continued) Field Description CRC Errors created when the CRC generated by the originating LAN station or far-end device does not match the checksum calculated from the data received. On a LAN, this usually indicates noise or transmission problems on the LAN interface or the LAN bus itself.
Network Analysis Module (NM-NAM) show interfaces analysis-module Table 5 Related Commands show interfaces analysis-module Field Descriptions (continued) Field Description collisions Number of messages that have been retransmitted because of an Ethernet collision. This is usually the result of an overextended LAN (Ethernet or transceiver cable too long, more than two repeaters between stations, or too many cascaded multiport transceivers). A packet that collides is counted only once in output packets.
Network Analysis Module (NM-NAM) Glossary Glossary AAA—authentication, authorization, and accounting. Pronounced “triple a.” access list—A list kept by routers to control access to or from the router for a number of services (for example, to prevent packets with a certain IP address from leaving a particular interface on the router). CEF—Cisco Express Forwarding. DSMON—Differentiated Services Monitoring.
Network Analysis Module (NM-NAM) Glossary of Management Information (SMI), protocol operations, management architecture, and security. SNMPv3 provides secure access to devices by a combination of authenticating and encrypting packets over the network. SSH—Secure Shell Protocol. A protocol that provides a secure remote connection to a router through a Transmission Control Protocol (TCP) application. UDP—User Datagram Protocol. Connectionless transport layer protocol in the TCP/IP protocol stack.
