Specifications

3-6
Catalyst 6500 Series Switch and Cisco 7600 Series Router Network Analysis Module Installation and Configuration Note
78-16413-01
Chapter 3 Getting Started
Configuring Traffic Sources for Capturing NAM Traffic
Using NetFlow Data Export as a Traffic Source
NDE makes traffic statistics available for analysis by an external data collector. You can use NDE to
monitor all Layer 3-switched and all routed IP unicast traffic. To use NDE as a traffic source for the
NAM, enable the NetFlow Monitor option to allow the NAM to receive the NDE stream. The statistics
are presented on reserved ifIndex.3000.
Configuring NDE for a NetFlow device so that it exports NDE packets to the NAM is platform specific
and version specific to the sending device. Refer to the device NDE configuration guidelines for more
information:
NDE Configuration
To configure NDE for the Cisco IOS software for both local and remote NDE devices, follow these steps:
Step 1 Configure NDE as follows:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# interface
type slot/port
Step 2 Enable NetFlow for the interface.
Router(config)# ip route-cache flow
Step 3 Export the routed flow cache entries to the NAM UDP port 3000.
Router(config)# ip flow-export destination NAM-address 3000
Note The UDP port number must be set at 3000.
When you configure a NAM module as an NDE collector, you should use the IP address of the NAM (set
up by sessioning into the NAM module).
This example shows how to set up a basic NDE configuration:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# interface vlan 2
Router(config)# ip route-cache flow
Router(config)# ip flow-export destination 172.20.104.74 3000
Router(config)# exit
NDE Configuration from MLS Cache
To configure NDE from the PFC (Multilayer switching cache), follow these steps:
Step 1 Enter configuration mode.
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.