Datasheet

Network Analysis Module (NM-NAM)
How to Configure and Manage the Network Analysis Module (NM-NAM)
16
Cisco IOS Release: Multiple releases (see the Feature History Table)
Configuring the Analysis-Module Interface—IP Unnumbered with Routable Subnet: Example
In the following example, the Analysis-Module interface is IP unnumbered and borrows the IP address
of the Fast Ethernet interface. The IP address is from a routable subnet, and the NM-NAM is installed
in router slot 1.
!
interface FastEthernet 0/0
ip address 209.165.202.129 255.255.255.224
no shutdown
!
interface Analysis-Module 1/0
ip unnumbered FastEthernet 0/0
no shutdown
!
Configuring the Analysis-Module Interface—IP Unnumbered with Subnet That Is Not Routable: Example
In the following example, the Analysis-Module interface is IP unnumbered and borrows a loopback
interface IP address that is not routable. The NM-NAM is installed in router slot 3.
!
interface loopback 0
ip address 10.20.30.40 255.255.255.0
!
interface Analysis-Module 3/0
ip unnumbered loopback 0
no shutdown
!
Sample Output for the show ip interface brief Command
Router# show ip interface brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 172.20.105.213 YES NVRAM up up
FastEthernet0/1 172.20.105.53 YES NVRAM up up
Analysis-Module2/0 10.1.1.1 YES manual up up
Router#
What to Do Next
If you configured authentication, authorization, and accounting (AAA) on your router, then proceed to
the “Disabling AAA Login Authentication on the NAM Console Line” section on page 16.
Otherwise, proceed to the “Opening and Closing a NAM Console Session from the Router” section on
page 18.
Disabling AAA Login Authentication on the NAM Console Line
If you configured authentication, authorization, and accounting (AAA) on your router, then you may
have to log in twice to open a NAM console session from the router: first with your AAA username and
password, and second with the NAM login and password.
If you do not want to log in twice to open a NAM console session from the router, then disable AAA
login authentication on the router’s NAM console line by performing the steps in this section.
Note, however, that if your router contains both the NM-NAM and the NM-CIDS, the Cisco intrusion
detection system network module, then AAA can be a useful tool for centrally controlling access to both
network modules. For information about AAA, refer to the Cisco IOS Security Configuration Guide.