<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Russ Garrett &#187; ios</title>
	<atom:link href="http://russ.garrett.co.uk/tag/ios/feed/" rel="self" type="application/rss+xml" />
	<link>http://russ.garrett.co.uk</link>
	<description></description>
	<lastBuildDate>Wed, 02 Jun 2010 21:20:55 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Configuring NetFlow on the Catalyst 6500</title>
		<link>http://russ.garrett.co.uk/2008/12/29/configuring-netflow-catalyst-6500/</link>
		<comments>http://russ.garrett.co.uk/2008/12/29/configuring-netflow-catalyst-6500/#comments</comments>
		<pubDate>Mon, 29 Dec 2008 13:08:24 +0000</pubDate>
		<dc:creator>Russ</dc:creator>
				<category><![CDATA[Networking]]></category>
		<category><![CDATA[catalyst]]></category>
		<category><![CDATA[cisco]]></category>
		<category><![CDATA[ios]]></category>

		<guid isPermaLink="false">http://russ.garrett.co.uk/?p=27</guid>
		<description><![CDATA[A quick note on the black art of Cisco configuration. Conveniently the Catalyst 6500 series (and likely higher models which use dCEF) has a different method of configuring NetFlow from lower-end switches. The Cisco docs don&#8217;t really touch on why this is. (This guide is based on IOS 12.2(33)SXH on the Sup720. Your mileage most [...]]]></description>
			<content:encoded><![CDATA[<p>A quick note on the black art of Cisco configuration. Conveniently the Catalyst 6500 series (and likely higher models which use <abbr title="Distributed Cisco Express Forwarding">dCEF</abbr>) has a different method of configuring NetFlow from lower-end switches. The Cisco docs don&#8217;t really touch on why this is. (This guide is based on IOS 12.2(33)SXH on the Sup720. Your mileage most likely <em>will</em> vary.)</p>
<p>So, firstly enable NetFlow like you would on any other IOS switch. It&#8217;s worth noting that at some point during the configuration you&#8217;ll likely get one of those trademark heart-stopping console freezes for up to 20 seconds. It&#8217;s not clear if this actually interrupts switching.</p>
<pre>switch(config)#interface Te2/2
switch(config-if)#ip flow ingress
switch(config-if)#ip flow egress</pre>
<p>I understand that this command used to be called <code>ip route-cache flow</code>, just to add to the confusion.</p>
<p>Now enable <abbr title="Netflow Data Export">NDE</abbr> to export your data to something like <a href="http://www.splintered.net/sw/flow-tools/docs/flow-tools.html">flow-tools</a>:</p>
<pre>switch(config)#ip flow-export source Vlan1
switch(config)#ip flow-export version 5 origin-as # This is where it hangs a while...
switch(config)#ip flow-export destination x.x.x.x yyyy</pre>
<p>At this point you can run <code>sh ip flow export</code> to see your many flows being exported. Well, except you can&#8217;t, because on the 6500, the <code>ip flow</code> class of commands only deal with NetFlow for packets which hit the supervisor module, i.e. forwarding cache misses. (Older cat6500 hardware would merit a discussion of <abbr title="Multilayer Switch Feature Card">MSFC</abbr>s and <abbr title="Policy Feature Card">PFC</abbr>s here, but my hardware isn&#8217;t old, so we don&#8217;t need that complication.)</p>
<p>So, to enable NetFlow and NDE for dCEF switched packets throughout the switch, the appropriate incantations are done using the <abbr title="Multi-Layer Switching">mls</abbr> series of commands:</p>
<pre>switch(config)#mls netflow
switch(config)#mls nde sender version 5
switch(config)#mls flow ip interface-full
</pre>
<p>Confusingly, although it uses the NDE collector you configured earlier, you must view the MLS NDE stats differenlty, by using <code>sh mls nde</code>.</p>
<p>More detail can be found in the <a href="http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/netflow.html">Configuring Netflow</a> section of the Catalyst 6500 config guide.</p>
]]></content:encoded>
			<wfw:commentRss>http://russ.garrett.co.uk/2008/12/29/configuring-netflow-catalyst-6500/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
