Configuring SNMP And Using The NetFlow MIB To Monitor NetFlow Data - Cisco

1y ago
17 Views
2 Downloads
1.44 MB
24 Pages
Last View : 13d ago
Last Download : 4m ago
Upload by : Dani Mulvey
Transcription

Configuring SNMP and using the NetFlow MIBto Monitor NetFlow DataNetFlow is a technology that provides highly granular per-flow statistics on traffic in a Cisco router. TheNetFlow MIB feature provides MIB objects to allow users to configure NetFlow and to monitor flow cacheinformation, the current NetFlow configuration, and statistics. Finding Feature Information, page 1 Prerequisites for Configuring SNMP and the NetFlow MIB to Monitor NetFlow Data, page 2 Restrictions for Configuring SNMP and the NetFlow MIB to Monitor NetFlow Data, page 2 Information About Configuring SNMP and the NetFlow MIB to Monitor NetFlow Data, page 2 How to Configure SNMP and use the NetFlow MIB to Monitor NetFlow Data, page 5 Configuration Examples using SNMP and the NetFlow MIB to Monitor NetFlow Data, page 19 Additional References, page 20 Feature Information for Configuring SNMP and using the NetFlow MIB to Monitor NetFlow Data,page 22 Glossary, page 23Finding Feature InformationYour software release may not support all the features documented in this module. For the latest caveats andfeature information, see Bug Search Tool and the release notes for your platform and software release. Tofind information about the features documented in this module, and to see a list of the releases in which eachfeature is supported, see the feature information table at the end of this module.Use Cisco Feature Navigator to find information about platform support and Cisco software image support.To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.NetFlow Configuration Guide, Cisco IOS Release 15M&T1

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataPrerequisites for Configuring SNMP and the NetFlow MIB to Monitor NetFlow DataPrerequisites for Configuring SNMP and the NetFlow MIB toMonitor NetFlow DataBefore you enable NetFlow you must: Configure the router for IP routing Ensure that one of the following is enabled on your router, and on the interfaces that you want to configureNetFlow on: Cisco Express Forwarding (CEF), distributed CEF, or fast switching Understand the resources required on your router because NetFlow consumes additional memory andCPU resources Configure SNMP on the router on which the NetFlow MIB feature is to be used. Refer to the Configuringthe Router to use SNMP, on page 5 for more information. For more information on configuring anSNMP server, refer to the Configuring SNMP Support in the Cisco IOS Network ManagementConfiguration Guide .Restrictions for Configuring SNMP and the NetFlow MIB toMonitor NetFlow DataCisco IOS Releases 12.2(14)S, 12.0(22)S, or 12.2(15)TIf your router is running a version of Cisco IOS prior to releases 12.2(14)S, 12.0(22)S, or 12.2(15)T the iproute-cache flow command is used to enable NetFlow on an interface.If your router is running Cisco IOS release 12.2(14)S, 12.0(22)S, 12.2(15)T, or later the ip flow ingresscommand is used to enable NetFlow on an interface.Information About Configuring SNMP and the NetFlow MIB toMonitor NetFlow DataNetFlow MIB Feature BenefitsNetFlow is a technology that collects traffic flow statistics on routing devices. NetFlow has been used for avariety of applications, including traffic engineering, usage-based billing, and denial of service (DoS) attackmonitoring.The NetFlow MIB feature is useful for obtaining IP flow information from a Cisco router when a NetFlowexport operation is not possible. NetFlow exporting does not have to be enabled for the NetFlow MIB featureto be used. The NetFlow MIB feature can be implemented instantaneously at any point in the network toobtain flow information.With the NetFlow MIB feature, system information that is stored in the flow cache can be accessed in realtime by utilizing a MIB implementation based on SNMP. This information is accessed using get and setNetFlow Configuration Guide, Cisco IOS Release 15M&T2

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataNetFlow MIB Overviewcommands entered on the network management system (NMS) workstation for which SNMP has beenimplemented. The NMS workstation is also known as the SNMP manager.NetFlow MIB OverviewThe Netflow MIB provides a simple and easy method to configure NetFlow, NetFlow aggregation caches,and NetFlow Data Export. You use the snmpget and snmpwalk tools to get NetFlow cache information andcurrent NetFlow configuration information. The NetFlow MIB feature enables medium to small size enterprisesto take advantage of NetFlow technology over SNMP at a reduced infrastructure cost. The MIB is created toprovide Netflow information in these areas: Cache information and configuration. Export information and configuration. Export Statistics. Protocol Statistics. Version 9 Export Template information. Top Flows information.Terminology UsedFlowA flow is defined as an unidirectional sequence of packets between a given source and destination endpoints.Network flows are highly granular; flow endpoints are identified both by IP address as well as by transportlayer application port numbers. NetFlow also utilizes the IP Protocol type, Type of Service (ToS) and theinput interface identifier to uniquely identify flows.ExporterA device (for example, a router) with NetFlow services enabled. The exporter monitors packets entering anobservation point and creates flows out of these packets. The information from these flows are exported inthe form of Flow Records to the collector. You can configure NetFlow data export using the NetFlow MIB.Flow RecordA Flow Record provides information about an IP Flow that exists on the Exporter. The Flow Records arecommonly referred to as NetFlow Services data or NetFlow data.CollectorThe NetFlow Collector receives Flow Records from one or more Exporters. It processes the received exportpacket, i.e. parses, stores the Flow Record information. The flow records may be optionally aggregated beforestoring into the hard disk.TemplateNetFlow Version 9 Export format is template based. Version 9 record format consists of a packet headerfollowed by at least one or more template or data FlowSets. A template FlowSet (collection of one or moreNetFlow Configuration Guide, Cisco IOS Release 15M&T3

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataUsing SNMP and MIBs to Extract NetFlow Informationtemplate) provides a description of the fields that will be present in future data FlowSets. Templates providean extensible design to the record format, a feature that should allow future enhancements to NetFlow serviceswithout requiring concurrent changes to the basic flow-record format.One additional record type is also a part of Version 9 specification: an options template. Rather than supplyinginformation about IP flows, options are used to supply meta-data about the NetFlow process itself.Top FlowsThis feature provides a mechanism which allows the top N flows in the NetFlow cache to be viewed in realtime.Criteria can be set to limit the feature to particular flows of interest, which can aid in DoS detection.Only the number of flows (TopN) and the sort criteria (SortBy) need be set.Top Flows is not intended as a mechanism for exporting the entire netflow cache.For more information on the Top Flows and the NetFlow MIB refer to the Configuring NetFlow Top Talkersusing Cisco IOS CLI Commands or SNMP Commands.Egress flowsThis feature analyzes traffic that is being forwarded by the router. This feature is often referred to as EgressNetFlow.Using SNMP and MIBs to Extract NetFlow InformationSNMP has historically been used to collect network information. SNMP permits retrieval of critical informationfrom network elements such as routers, switches, and workstations. The NetFlow MIB feature uses SNMPto configure NetFlow and to gather NetFlow statistics.The NetFlow MIB feature allows NetFlow statistics and other NetFlow data for the managed devices on yoursystem to be retrieved by SNMP. You can specify retrieval of NetFlow information from a managed device(for example, a router) either by entering commands on that managed device or by entering SNMP commandsfrom the NMS workstation to configure the router via the MIB. If the NetFlow information is configured fromthe NMS workstation, no access to the router is required and all configuration can be performed via SNMP.The NetFlow MIB request for information is sent from an NMS workstation via SNMP to the router and isretrieved from the router. This information can then be stored or viewed, thus allowing NetFlow informationto be easily accessed and transported across a multi-vendor programming environment.Objects That are Used by the NetFlow MIBThe NetFlow MIB feature defines managed objects that enable a network administrator to remotely monitorthe following NetFlow information: Flow cache configuration information NetFlow export information General NetFlow statisticsNetFlow Configuration Guide, Cisco IOS Release 15M&T4

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataHow to Configure SNMP and use the NetFlow MIB to Monitor NetFlow DataHow to Configure SNMP and use the NetFlow MIB to MonitorNetFlow DataNoteSome of the tasks in this section include examples of the SNMP CLI syntax used to set configurationparameters on the router, and to read values from MIB objects on the router. These SNMP CLI syntaxexamples are taken from a Linux workstation using public domain SNMP tools. The SNMP CLI syntaxfor your workstation might be different. Refer to the documentation that was provided with your SNMPtools for the correct syntax for your network management workstation.Configuring the Router to use SNMPBefore the NetFlow MIB feature can be used, the router must be configured to support SNMP. To enableSNMP on the router, perform this task.NoteThe SNMP community read-only (RO) string for the examples is public. The SNMP community read-write(RW) string for the examples is private. You should use more complex strings for these values in yourconfigurations.SUMMARY STEPS1. enable2. configure terminal3. snmp-server community string ro4. snmp-server community string rw5. endDETAILED STEPSStep 1Command or ActionPurposeenable(Required) Enables privileged EXEC mode.Example: Enter your password if prompted.Router enableStep 2configure terminal(Required) Enters global configuration mode.Example:Router# configure terminalNetFlow Configuration Guide, Cisco IOS Release 15M&T5

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring Options for the Main CacheCommand or ActionStep 3Purposesnmp-server community string ro (Required) Sets up the community access string to permit access to SNMP.Example:Router(config)# snmp-servercommunity public ro The string argument is a community string that consists of from 1 to 32alphanumeric characters and functions much like a password, permittingaccess to the SNMP protocol. Blank spaces are not permitted in thecommunity string. The ro keyword specifies read-only access. SNMP management stationsusing this string can retrieve MIB objects.Step 4snmp-server community string rw (Required) Sets up the community access string to permit access to SNMP.Example:Router(config)# snmp-servercommunity private rw The string argument is a community string that consists of from 1 to 32alphanumeric characters and functions much like a password, permittingaccess to the SNMP protocol. Blank spaces are not permitted in thecommunity string. The rw keyword specifies read-write access. SNMP management stationsusing this string can retrieve and modify MIB objects.NoteStep 5The string argument must be different from the read-only stringargument specified in the preceding step (Step 3).(Required) Exits the current configuration mode and returns to privileged EXECmode.endExample:Router(config)# endConfiguring Options for the Main CacheThis optional task describes the procedure for modifying the parameters for the NetFlow main cache. Performthe steps in this optional task using either the router CLI commands or the SNMP commands to modify theparameters for the NetFlow main cache.SUMMARY STEPS1. enable2. configure terminal3. ip flow-cache entries number4. ip flow-cache timeout active minutes5. ip flow-cache timeout inactive seconds6. endNetFlow Configuration Guide, Cisco IOS Release 15M&T6

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring Options for the Main CacheDETAILED STEPSStep 1Command or ActionPurposeenable(Required) Enables privileged EXEC mode.Example: Enter your password if prompted.Router enableStep 2configure terminal(Required) Enters global configuration mode.Example:Router# configure terminalStep 3ip flow-cache entries number(Optional) Specifies the maximum number of entries to be captured forthe main flow cache.Example:NoteRouter(config)# ip flow-cache entries4000Step 4ip flow-cache timeout active minutesExample:Router(config)# ip flow-cache timeoutactive 30Step 5ip flow-cache timeout inactive secondsExample:Router(config)# ip flow-cache timeoutinactive 100Step 6endThe valid range for the number argument is from 1024 to 524288entries.(Optional) Configures operational parameters for the main cache. The timeout keyword dissolves the session in the cache. The active minutes keyword-argument pair is the number ofminutes that an entry is active. The range is from 1 to 60 minutes.The default is 30 minutes.(Optional) Configures operational parameters for the main cache. The timeout keyword dissolves the session in the main cache. The inactive secondskeyword-argument pair is the number ofseconds that an inactive entry will stay in the main cache before ittimes out. The range is from 10 to 600 seconds. The default is 15seconds.(Required) Exits the current configuration mode and returns to privilegedEXEC mode.Example:Router(config)# endNetFlow Configuration Guide, Cisco IOS Release 15M&T7

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring Options for the Main CacheConfiguring Options for the Main CacheSUMMARY STEPS1. snmpset -c private -m all -v2c [ip-address hostname] cnfCICacheEntries.type unsigned number2. snmpset -c private -m all -v2c [ip-address hostname] cnfCIActiveTimeOut.type unsigned number3. snmpset -c private -m all -v2c [ip-address hostname] ccnfCIInactiveTimeOut.type unsigned numberDETAILED STEPSCommand or ActionStep 1Purpose(Optional) Defines the maximum number of entries to be captured for thesnmpset -c private -m all -v2c [ip-address hostname] cnfCICacheEntries.type unsigned main flow cache.number The value for the type argument in cnfCICacheEntries.type unsignednumber is 0 for the main cache.Example: The value for the number argument incnfCICacheEntries.typenumber is the maximum number of cacheentries.workstation% snmpset -c private -m all-v2c 10.4.9.62 cnfCICacheEntries.0unsigned 4000NoteStep 2The valid range for the number argument is from 1024 to 524288entries.snmpset -c private -m all -v2c [ip-address (Optional) Specifies the number of seconds that an active flow remains inhostname] cnfCIActiveTimeOut.type unsigned the main cache before it times out.number The value for the type argument in cnfCIActiveTimeout.typeunsigned number is 0 for the main cache.Example: The value for the number argument in cnfCIActiveTimeout.typeunsigned number is the number of seconds that an active flow remainsin the cache before it times out.workstation% snmpset -c private -m all-v2c 10.4.9.62 cnfCIActiveTimeOut.0unsigned 60NoteStep 3snmpset -c private -m all -v2c [ip-address hostname] ccnfCIInactiveTimeOut.typeunsigned number(Optional) Specifies the number of seconds that an inactive flow remainsin the main cache before it times out. The value for the type argument in cnfCIInactiveTimeout.typeunsigned number is 0 for the main cache.Example: The value for the number argument in cnfCIInactiveTimeout.typeunsigned number is the number of seconds that an inactive flowremains in the main cache before it times out.workstation% snmpset -c private -m all-v2c 10.4.9.62 cnfCIInactiveTimeOut.0unsigned 30NoteNetFlow Configuration Guide, Cisco IOS Release 15M&T8The range for the number argument is from 1 to 60 minutes. Thedefault is 30 minutes.The range for the number argument is from 10 to 600 seconds.The default is 15 seconds.

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataIdentifying the Interface Number to use for Enabling NetFlow with SNMPIdentifying the Interface Number to use for Enabling NetFlow with SNMPBefore you can use SNMP to enable NetFlow on an interface, you must identify the correct SNMP interfacenumber on the router. To identify the interface number for the interface that you want to enable NetFlow on,perform the steps in this task.SUMMARY STEPS1. enable2. show snmp mib ifmib ifindex type numberDETAILED STEPSStep 1enableEnters privileged EXEC mode. Enter the password if prompted.Example:Router enableStep 2show snmp mib ifmib ifindex type numberDisplays the SNMP interface number for the interface specified.Example:Router# show snmp mib ifmib ifindex fastethernet 0/0Ethernet0/0: Ifindex 1Configuring NetFlow on an InterfacePerform the task using either the router CLI commands or the SNMP commands to enable NetFlow on therouter.SUMMARY STEPS1. enable2. configure terminal3. interface type number4. ip flow {ingress egress}5. exit6. Repeat Steps 3 through 5 to enable NetFlow on other interfaces.7. endNetFlow Configuration Guide, Cisco IOS Release 15M&T9

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring NetFlow on an InterfaceDETAILED STEPSStep 1Command or ActionPurposeenable(Required) Enables privileged EXEC mode. Enter your password if prompted.Example:Router enableStep 2configure terminal(Required) Enters global configuration mode.Example:Router# configure terminalStep 3interfacetype number(Required) Specifies the interface that you want to enable NetFlowon and enters interface configuration mode.Example:Router(config)# interface fastethernet0/0Step 4ip flow {ingress egress}Example:Router(config-if)# ip flow ingress(Required) Enables NetFlow on the interface. ingress --captures traffic that is being received by theinterface egress --captures traffic that is being transmitted by f)# ip flow egressStep 5exit(Optional) Exits interface configuration mode and returns toglobal configuration mode.Example:NoteRouter(config-if)# exitYou only need to use this command if you want to enableNetFlow on another interface.Step 6Repeat Steps 3 through 5 to enable NetFlow onother interfaces.(Optional) --Step 7end(Required) Exits the current configuration mode and returns toprivileged EXEC mode.Example:Router(config-if)# endNetFlow Configuration Guide, Cisco IOS Release 15M&T10

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring NetFlow on an InterfaceConfiguring NetFlow on an InterfaceSUMMARY STEPS1. snmpset -c private -m all -v2c [ip-address hostname] cnfCINetflowEnable.interface-number integer[0 1 2 3]2. Repeat Step 1 to enable NetFlow on other interfacesDETAILED STEPSStep 1Command or ActionPurposesnmpset -c private -m all -v2c [ip-address hostname] cnfCINetflowEnable.interface-numberinteger [0 1 2 3](Required) Configures NetFlow for an interface.Example:workstation% snmpset -c private -m all -v2c10.4.9.62 cnfCINetflowEnable.1 integer 1The value for the interface-number argument is found byentering the router CLI command show snmp mib ifmibifindex on the router in privileged EXEC mode.The values for the direction argument are:Note 0--Disable NetFlow 1--Enable Ingress NetFlow 2--Enable Egress NetFlow 3--Enable Ingress and Egress NetFlowStep 2Repeat Step 1 to enable NetFlow on other interfaces (Optional) --Configuring the Destination-Prefix Aggregation CacheThis task describes the procedure for modifying the parameters for aggregation caches. The destination-prefixis used in this task. With the exception of specifying the aggregation cache that you want to modify, the stepsare the same for modifying these parameters for the other aggregation caches.Perform this task using either the router CLI commands or the SNMP commands to modify configurationparameters for an aggregation cache.Before You BeginYou must enable NetFlow on at least one interface before configuring a NetFlow aggregation cache.NetFlow Configuration Guide, Cisco IOS Release 15M&T11

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring the Destination-Prefix Aggregation CacheSUMMARY STEPS1. enable2. configure terminal3. ip flow-aggregation cache destination-prefix4. cache entries number5. cache timeout active minutes6. cache timeout inactive seconds7. enable8. endDETAILED STEPSStep 1Command or ActionPurposeenable(Required) Enables privileged EXEC mode.Example: Enter your password if prompted.Router enableStep 2configure terminal(Required) Enters global configuration mode.Example:Router# configure terminalStep 3ip flow-aggregation cache destination-prefix (Required) Enters aggregation cache configuration mode for thedestination-prefixaggregation cache.Example:Router(config)# ip flow-aggregation cachedestination-prefix The destination-prefixkeyword is equivalent to the typeargument of 4 in Step 2 of the SNMP commands.NoteStep 4cache entries numberFor information on other keywords for this command, seethe Cisco IOS NetFlow Command Reference .(Optional) Defines the number of entries that are allowed in theaggregation flow cache.Example:Router(config-flow-cache)# cache entries4000Step 5cache timeout active minutes(Optional) Specifies the number of minutes that an active flowremains in the cache before it times out.Example:NoteRouter(config)# cache timeout active 30NetFlow Configuration Guide, Cisco IOS Release 15M&T12The range is from 1 to 60 minutes. The default is 30minutes.

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring the Destination-Prefix Aggregation CacheStep 6Command or ActionPurposecache timeout inactive seconds(Optional) Specifies the number of seconds that an inactive flowremains in the cache before it times out.Example:NoteRouter(config-flow-cache)# cache timeout inactive 100Step 7enableThe range is from 10 to 600 seconds. The default is 15seconds.(Required) Activates the destination-prefixaggregation cache.Example:Router(config-flow-cache)# enableStep 8(Required) Exits the current configuration mode and returns toprivileged EXEC mode.endExample:Router(config-if)# endConfiguring the Destination-Prefix Aggregation CacheSUMMARY STEPS1. snmpset -c private -m all -v2c [ip-address hostname] cnfCICacheEnable.type integer truth-value2. snmpset -c private -m all -v2c [ip-address hostname] cnfCICacheEntries. type unsigned number3. snmpset -c private -m all -v2c [ip-address hostname] cnfCIActiveTimeOut. type unsigned number4. snmpset -c private -m all -v2c [ip-address hostname] ccnfCIInactiveTimeOut. type unsigned numberDETAILED STEPSStep 1Command or ActionPurposesnmpset -c private -m all -v2c [ip-address hostname] cnfCICacheEnable.type integertruth-value(Required) Enables the aggregation cache. Values for the type argument are: Main--0Example:workstation% snmpset -c private -m all-v2c 10.4.9.14 cnfCICacheEnable.4integer 1 AS--1 Protocol Port--2 Source Prefix--3 Destination Prefix--4 prefix--5NetFlow Configuration Guide, Cisco IOS Release 15M&T13

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring the Destination-Prefix Aggregation CacheCommand or ActionPurpose Destination Only--6 Source Destination--7 Full Flow--8 AS ToS--9 Protocol Port ToS--10 Source Prefix ToS--11 Destination Prefix Tos--12 Prefix Tos--13 Prefix Port--14 BGP Nexthop Tos--15 Values for truth-value in cnfCICacheEnable.type integertruth-valueare: 1--enable the aggregation cache 2--disable the aggregation cacheStep 2snmpset -c private -m all -v2c [ip-address (Optional) Defines the maximum number of entries to be captured for thehostname] cnfCICacheEntries. type unsigned aggregation flow cache.number The value for the type argument in cnfCICacheEntries.type unsignednumber is 4 for the destination-prefix cache.Example: The value for the number argument in cnfCICacheEntries.typeunsigned number is the maximum number of cache entries.workstation% snmpset -c private -m all-v2c 10.4.9.62 cnfCICacheEntries.4unsigned 4000NoteStep 3The valid range for the number argument is from 1024 to 524288entries.snmpset -c private -m all -v2c [ip-address (Optional) Specifies the number of seconds that an active flow remains inthe cache before it times out.hostname] cnfCIActiveTimeOut. typeunsigned number The value for the type argument in cnfCIActiveTimeout.type unsignednumber is 4 for the destination-prefix cache.Example: The value for the number argument in cnfCIActiveTimeout.typeunsigned number is the number of seconds that an active flow remainsin the cache before it times out.workstation% snmpset -c private -m all-v2c 10.4.9.14 cnfCIActiveTimeOut.4unsigned 60NoteStep 4snmpset -c private -m all -v2c [ip-address (Optional) Specifies the number of seconds that an inactive flow remainsin the cache before it times out.hostname] ccnfCIInactiveTimeOut. typeunsigned numberNetFlow Configuration Guide, Cisco IOS Release 15M&T14The range for the number argument is from 1 to 60 minutes. Thedefault is 30 minutes.

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring NetFlow Export from the Main NetFlow Cache using the Version 9 Export FormatCommand or ActionPurpose The value for the type argument in cnfCIInactiveTimeout.typeunsigned number is 4 for the destination-prefix cache.Example:workstation% snmpset -c private -m all-v2c 10.4.9.14 cnfCIInactiveTimeOut.4unsigned 30 The value for the number argument in cnfCIInactiveTimeout.typeunsigned number is the number of seconds that an inactive flowremains in the cache before it times out.NoteThe range for the number argument is from 10 to 600 seconds. Thedefault is 15 seconds.Configuring NetFlow Export from the Main NetFlow Cache using the Version9 Export FormatThe following example shows how to configure the router to export statistics from the NetFlow main cache(0), including peer autonomous system and BGP-related information using export Version 9.Perform this task using either the router CLI commands or the SNMP commands to configure the router toexport statistics from the main cache using the Version 9.SUMMARY STEPS1. enable2. configure terminal3. ip flow-export version 9 [ origin-as peer-as] [ bgp-nexthop ]4. ip flow-export destination {ip-address hostname} udp-port}5. Repeat Step 4 to add a second NetFlow collector6. endDETAILED STEPSStep 1Command or ActionPurposeenable(Required) Enables privileged EXEC mode.Example: Enter your password if prompted.Router enableStep 2configure terminal(Required) Enters global configuration mode.Example:Router# configure terminalNetFlow Configuration Guide, Cisco IOS Release 15M&T15

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring NetFlow Export from the Main NetFlow Cache using the Version 9 Export FormatStep 3Command or ActionPurposeip flow-export version 9 [ origin-as peer-as] [ bgp-nexthop ](Required) Enables the export of information in NetFlow cache entries. The version 9 keyword specifies that the export packet uses theVersion 9 format.Example: The origin-as keyword specifies that export statistics include theoriginating AS for the source and destination.Router(config)# ip flow-exportversion 9 peer-as bgp-nexthop The peer-as keyword specifies that export statistics include the peerAS for the source and destination. The bgp-nexthop keyword specifies that export statistics includeBGP next hop-related information.CautionStep 4ip flow-export destination {ip-address hostname} udp-port}Entering this command on a Cisco 12000 Series Internet Routercauses packet forwarding to stop for a few seconds whileNetFlow reloads the route processor and line card CEF tables.To avoid interruption of service to a live network, apply thiscommand during a change window, or include it in thestartup-config file to be executed during a router reboot.(Required) Specifies the IP address, or hostname of the NetFlow collector,and the UDP port the NetFlow collector is listening on.Example:Router(config)# ip flow-exportdestination 10.0.19.2 999Step 5Repeat Step 4 to add a second NetFlowcollector(Optional) --Step 6end(Required) Exits the current configuration mode and returns to privilegedEXEC mode.Example:Router(config)# endNetFlow Configuration Guide, Cisco IOS Release 15M&T16

Configuring SNMP and using the NetFlow MIB to Monitor NetFlow DataConfiguring NetFlow Export from the Main NetFlow Cache using the Version 9 Export FormatConfiguring NetFlow Export from the Main NetFlow Cache using the Version9 Export FormatSUMMARY STEPS1. snmpset -c private -m all -v2c [ip-address hostname] cnfEIExportVersion.type unsigned versioncnfEIPeerAS. type integer truth-value cnfEIBgpNextHop.type integer truth-value2. snmpset -c private -m all -v2c [ip-address hostname] cnfEICollectorStatus. type . address-type .ip-version . ip-address . port integer [4 6]3. Repeat Step 2 to add another collectorDETAILED STEPSCommand or ActionPurposeStep 1 snmpset -c private -m all -v2c [ip-address (Required) Specifies the export format and that the export statistics includepeer autonomous system and BGP-related information.hostname] cnfEIExportVersion.typeunsigned version cnfEIPeerAS. type integer The values for the type argument are:truth-value cnfEIBgpNextHop.type integertruth-value Main--0Example:workstation% snmpset -c private -m all-v2c 10.4.9.14 cnfEIExportVersion.0unsigned 9 cnfEIPeerAS.0 integer 1cnfEIBgpNextHop.0 integer 1 AS--1 Protocol Port--2 Source Prefix--3 Destination Prefix--4 prefix--5 Des

Example: Router enable Enteryourpasswordifprompted. configureterminal (Required)Entersglobalconfigurationmode. Example: Router# configure terminal Step 2 NetFlow Configuration Guide, Cisco IOS Release 15M&T 5 Configuring SNMP and using the NetFlow MIB to Monitor NetFlow Data How to Configure SNMP and use the NetFlow MIB to Monitor NetFlow Data

Related Documents:

Silat is a combative art of self-defense and survival rooted from Matay archipelago. It was traced at thé early of Langkasuka Kingdom (2nd century CE) till thé reign of Melaka (Malaysia) Sultanate era (13th century). Silat has now evolved to become part of social culture and tradition with thé appearance of a fine physical and spiritual .

May 02, 2018 · D. Program Evaluation ͟The organization has provided a description of the framework for how each program will be evaluated. The framework should include all the elements below: ͟The evaluation methods are cost-effective for the organization ͟Quantitative and qualitative data is being collected (at Basics tier, data collection must have begun)

ACI SNMP Overview SNMP Basic components are: Managed Device: the hardware device to be monitored Agent (SNMP software running on the Managed Device) Network Management System: the monitoring system which has SNMP Client to communicate with the Agent running on the Managed Device SNMP is widely supported across several Cisco platforms. For more information on SNMP, please refer to the Cisco .

Contents iv Using SNMP Version 3 with CiscoWorks and Third-Party Tools Implementation Guide OL-19726-01 Adding a Network to the Current Map 2-33 Configuring Specific SNMP Version 3 Parameters 2-36 Setting Global SNMP Version 3 Credentials 2-37 Setting Specific SNMP Version 3 Credentials 2-37 Viewing Node Information 2-38 Configuring the NNM MIB Browser 2-39

̶The leading indicator of employee engagement is based on the quality of the relationship between employee and supervisor Empower your managers! ̶Help them understand the impact on the organization ̶Share important changes, plan options, tasks, and deadlines ̶Provide key messages and talking points ̶Prepare them to answer employee questions

Dr. Sunita Bharatwal** Dr. Pawan Garga*** Abstract Customer satisfaction is derived from thè functionalities and values, a product or Service can provide. The current study aims to segregate thè dimensions of ordine Service quality and gather insights on its impact on web shopping. The trends of purchases have

On an exceptional basis, Member States may request UNESCO to provide thé candidates with access to thé platform so they can complète thé form by themselves. Thèse requests must be addressed to esd rize unesco. or by 15 A ril 2021 UNESCO will provide thé nomineewith accessto thé platform via their émail address.

Nimble Storage software provides an SNMP option for monitoring Nimble arrays.You should be familiar with Simple Network Topics: Setting up SNMP on the Nimble array Management Protocol (SNMP) bef ore enab ling SNMP monitor ing. RFC1155 is a good place to star t if you are not f amiliar with SNMP IANA and OID numbers and MIBs.