I've configured N7K to export layer 2 flows. Using 2 different flow collectors (open source and commercial), gaps/drops in the reported traffic are observed on a periodic basis.Problem doesn't seems to be with the exporters, hence I wondering if netflow configuration on N7K can be tweaked to address this symptom. Using the 'show exporter' command, no errors/drops are observed. [code]
View 2 RepliesWe have Nexus 7000s configured for sampled netflow. We have tools that should reconstruct the sampled flow records for management displays. Most tools require the flow record, option and template to be sent in order to reconstruct the sampled flow record. We have captured some of this traffic and noticed that the template contains "SamplerMode": Unknown (1) [See Nexus 1-1.png]. Is this usual or have we not include commands required for proper operation? [code]
View 2 Replies View RelatedWe have ordered the following 10 line items , but only got 3 licenses , unless the 3 licenses somehow have all the licenses integrated into the 3 part numbers below, but I suspect not.
Licenses attached from Cisco:-
N7K-C7009-XL-SBUN Nexus 7009 Scalable Feature License x 1
N7K-C7009-SBUN-P1 Inc LAN,ADV,TRS,EL2,DCNM,DCNMSAN,MPLS,SAN,XL -Promotion x 1
[Code].....
I installed mpls feature set in N7K.I was able to enable feature l3vpn.Then, I tried enabling feature ldp. license not installed. ldp feature will be shut down after grace period of approximately 120 day(s).
I don't see any TRANSPORT_SERVICES_PKG in the NX-OS licensing guide.However, there is LAN_TRANSPORT_SERTICE_PKG. But I believe this is not for LDP.
have multicast data across OTV extensions? We run OTV between two pairs of Nexus 7000 in different datacenters with mcast underlying encapsulation. We stretch 10 or so vlans between the sites. We have encountered multiple bugs over the last two years and had to upgrade code and have rarely been clear for any period of time.
We've had an ongoing Tac case where IGMP requests are not getting across the OTV VLAN extension to the PIM forwarder on another site. You can see OTV IGMP snooping on the AED VDC is picking up the request on the local site but it does not get to the remote site that is the PIM forwarder so no multicast gets onto the VLAN. For a while we had a hack where we would get a local server to the PIM forwarder router to request the same groups and then this would somehow get across to the other site. Since clearing the overlay interfaces to try and fix the original problem the hack no longer works and I can't get multicast to the receiver at all.
Normally when we do HSRP with vPC on N7K the device will be Active/Standby in control plane but it will be Active/Active in data plane. In this case any traffic reach to standby device it can forward traffic directly to uplink which is not my desire. My goal is all traffic should pass through active (control plane) device in every case unless active device totally dead. So Is it possible for Nexus 7000 to be HSRP Active/Standby in Data Plane ?
View 4 Replies View RelatedI have been tasked to replace the existing Cat 6500 and 3750 switches by Nexus 7000 and Nexus 2000.I was told initially my boss plans to get 2 x Nexus 7000 and then eventually blow up to 4 x Nexus 7000s.For Nexus, is there a list of tasks / points that i need to consider for building the initial design?
Can i just link the Nexus 7000 like the following?
N7k-A ========= N7k-B
| |
lots of N2ks lots of N2ks
I'm trying to gather netflow data over an IPSEC VPN and through my research I've learned that I need to configure Flexible Netflow. However, I have a Cisco 2801 router with the latest ROMMON and IOS and the Flexible Netflow options aren't available.
For instance:
flow exporter dwtmonitor
destination 10.0.16.172
source Loopback0
transport udp 2055
output-features
When I type "flow exporter <name>" it only allows me to enter "flow <name>" and there's no "destination" options or anything else.
ROMMON: 12.4(13r)TIOS: 12.4(25d)
I am trying to fetch data on netflow analyzer 9 by Cisco router 2911. But netflow is unable to show any data.
cr2911-01#sh runn | sec ip flow
ip flow-cache timeout active 1
ip flow-export version 5
ip flow-export destination 10.1.208.32 9996
[code]...
I was trying to get Netflow setup on one of my 7K VDCs and ran into a problem. While netflow data was reaching the collector, IP src/dst information was not appearing in the analyzer tool. I could not see any information about conversations. So I contacted the company that makes the collector/analyzer and the directed me to a blog on their site and told me to setup the 7K exactly as it is described in the blog post. I did and a bit later the ip src/dst address information appeared. So the only difference between the two configurations was that in the first case I tried to define a record and in the second case, no record was defined and instead the orginial-netflow parameter was used in the "flow monitor" section. [code]
I referenced the document "Cisco Nexus 7000 Series NX-OS System Management Configuration Guide,Release 6.x", Chapter 19 - Configuring NetFlow.It's clear to me that I didn't do something right in defining my own record since that's really the only difference between the config that worked vs the config that didn't. However, the documentation I referenced doesn't really provide useful information about how to create a record (above and beyond what I can already see by typing '?' at the CLI).
For example, the "match" command makes no sense to me. Usually when you have a match command it is accompanied by some sort of ACL. In the "flow record" section a match command would be something like "match ipv4 source address" but that's it. What does that mean? Match anything that has a IPv4 source address?? That doesn't make much sense. The collect commands are equally as bewildering. If I want to define my own record (and not use the original-netflow parameter) what do I need to do in the "flow record" sub-configuration to get Nexus to send ip src/dst information to the collector (which, I would think, is basic information to send - what good is netflow data without it)?
I need to know if I can pull Netflow style data (Top Talkers, Top Sessions, etc) from ASA 5505s? We are looking at buying some but I need to be able to export this kind of data to my managment station which is also a collector. I have read on this forum that 8.2 and above should support Netflow but I have read conflicting information.
View 2 Replies View RelatedCisco 2951 w/ HWIC-4ESW
IOS 15.0(1)M5
#sh ip flow int
Vlan533
ip flow ingress
ip flow egress
#
The SVI sends the flow data just fine, however I also continue to receive flow data from most other interfaces.
I have attached a screenshot of one of our netflow collectors indicating that many of the interfaces are sending flow data even though not configured to do so. We have two different netflow collectors, from different vendors and both confirm the same interfaces sending flow data.
Normally I wouldn't care and ignore it, however one of them uses a license limit by interface and is a bit problematic.
I've got an issue with SNMP and netflow tools. They are displaying different data for the same (sub)interfaces.I've got metroethernet link which connects root A (Cisco 7606, 12.2(18)SXF8) and root B (Cisco 2811, 12.3(11)TS). MPLS is configured on the link (behind root B there is no more MPLS). I'm attaching root configurations (I've ommited parts of config).Interfaces are:
Root A - gi2/6.2144
Root B - fa0/1
I've configured SNMP and netflow on both devices. I'm using two SNMP tools (CA Spectrum and eHealth) and two netflow tools (CA NetQoS Reporter Analyzer and Fluke Networks NetFlow Tracker) to collect the data. SNMP tools show the same info for defined (sub)interface.Netflow tools also show the same info for defined (sub)interface. I'm attaching reports from one SNMP tool and one netflow tool for the same time period.
1. Looking at SNMP tool, it can be seen quite amount of that data in both in and out direction.
2. Looking at netflow tool, it can be seen quite amount of that data in out direction, while in direction shows small amount of data.
I'm aware that Cisco has difficulties with SNMP counters on subinterfaces. I'm also aware that MPLS netflow has its own difficulties.Root B netflow configuration is quite simple as it has just 2 interfaces to configure netflow on (Fa0/0 and Fa0/1). So I would guess SNMP and netflow data should match, but they don't. When you look at SNMP tool reports for roots A and B, it can be seen that traffic volume is practically mirrored.
i wanted to know if i can and when i will be able to run the nexus 7000 as a Fully MPLS PE router (L2VPN, L3VPN etc..) ?
the interfeces need to be 10Gbps so i need to use the 8 ports & the 32 ports M1 modules.
I just bought 2 Nexus 7000 to upgrade my primary/Production Data Center from 6509/MSFC. I'll keep the 6509E/SUP720 for the DR Data Center. I have ordered two 10Gig Wan Pipes between the Production and DR. In other words between the Nexus 7000 and the 6509E.
My problem is that i do not know the best way to do the routing between the 2 Data Centers. Currently I have MPLS with a provider connecting the 2 Data Centers using BGP on the CEs and I'm running eigrp in locally in the Cores. After the 10Gig comes to life, the MPLS will go away.
My QUESTION: Should i run ibgp between the 2 Nexus and ibgp between the 2 6509E/sup 720 AND THEN run ebgp between the Nexus and the 6509/sup 720 over the 10Gig WAN? OR should i collapse everything into one eigrp domain/AS and just run Eigrp between the Nexus and 6509E/Sup 720 over the 10Gig Wan?
I work in an organization where we recently upgraded our core switches to Nexus 7000. Everything is set up well but we still keep getting this annoying message when we log in the switch. Also the time taken to login into the switch (ssh and telnet) is longer than normal. It is not affecting the network in any way but my concern is somewhere something is wrong and it will give us trouble in the future. How to troubleshoot the cause of this error message. [code]
View 3 Replies View Relatedis the LMS 4.1 supports Nexus 7000 baundle ?
View 2 Replies View RelatedI have such input data:
2xN7K-C7010 - Nexus7000 C7010 (10 Slot) Chassis
2xN7K-M132XP-12 - 32x10Gbps
NX-OS version 6.1(1)
I have enable (by default) QoS feature on them:
N7k# show policy-map interface brief
Interface/VLAN [Status]:INP QOS OUT QOS INP QUE OUT QUE
================================================================================
port-channel1 [Active]: default-in-po default-out-p
port-channel2 [Active]: default-in-po default-out-p
port-channel10 [Active]: default-in-po default-out-p
Ethernet1/1 [Active]: default-in-po default-out-p
[code]....
I am working on a DataCenter architecture where we would like to implement Nexus 7000, For the time being, there only one "context" but we may take the opportunity to implement VDC in a later future, I was not able to find a clear answer on the following :
Can we add the VDC licence & configure a new VDC on a Nexus 7000 running without VDC ? I suppose this is possible. but does it need to have the whole configuration changed or adding a VDC can be done without any interruption on the current environnement ?
I am new to Cisco Nexus 7000 Series NX-OS System of appliances.I am looking for type of log events that are getting generated by CISCO Nexus 7000 switches. Need some documents which give me this references & some documents which have a log line explained.
View 2 Replies View RelatedIve tried to configure NetFlow on layer 2 without success. I configured the recondmonitorexporter like the configuration guide said. but still i dont receive any netflow traffic. I checked the firewall on the VM and it looks fine.
i have done the command under the ethernet interface :" layer2-switch flow monitor TEST input" - for layer2 input.
Net flow on the Nexus 5596upI can't seem to find any information on the Nexus 5596 support of net flow. On Nexus 5596UP support of net flow ?
View 4 Replies View RelatedI config LMS to manage many network devices with the same credential. However, only the Nexus 7000 fail to be archive configuration. LMS log said during telnet, the authentication fail 3 times. (I didn't use any authen server. The username and password are local. and in DCR page, i only configure " Primary Credential"l, nothing in "Auto Update Credential")Then i do a CAD check and fail also. I open the RME/CAD log, comparing with those successful log, there is one line different:[ Mon Mar 05 16:04:27 SGT 2012 ],WARN ,[main], com.cisco.nm.rmeng.inventory.cda.CdaFacade,getCdaHandlerIf, 163,CdaAG is not implemented for the device145.240.152.1 What does it mean "CdaAG is not implemented for the device?
View 1 Replies View RelatedI have configured my Nexus 7018 and 5548 as follow (see diag attached).Both 7000 and 5500 are vPC pair(po1and po2). Now I have created port-chanel between 7018and 5548 as port channel PO3 on 5500. Would it give me 20g bandwidth as PO3?or 10g only uplink to 7018? Do I need to config all four 10g links in PO3 on both 5500 and 7000 switches to achieve max b/w and failover?
View 4 Replies View Relatedi am trying to assign a right role for a user who authenticates to nexus 7k switch via radius. i am using cisco ISE version 1.1.1.268 and the nexus version is 5.0.2,I have created a role on nexus.
View 1 Replies View RelatedWhere to find the configuration for TCP window sizing or scaling on the nexus 7000. Also, if the Nexus 7000 handles packet traffic through-put from things like CIFS differently or does it just pass the packet straight through.
View 1 Replies View RelatedShould I install any special license to enable vrf within Nexus 7000 VDC? I observed that vrf routing instance is not enabled in the VDC.
View 2 Replies View RelatedCan the Nexus 7000 provide NTP to the rest of my network? Can it be an NTP server? I have the followign ntp configuration on it, and have used the commit command, but it seems to be ignoring any NTP requests from other devices. [code]
View 8 Replies View RelatedI am configuring NTP on a new Cisco Nexus 7000 running version 6.1(2). NTP is working properly between the access switches and Nexus, however when configuring Authentication, NTP is not working anymore.
confguration:
Nexus 7K server
=============
ntp server x.x.x.x
ntp peer q.q.q.q
ntp server e.e.e.e
ntp server r.r.r.r
ntp source-interface Vlanx
[code]...
why NTP authentication is not working !!!!! on Nexus 7000
On a 7K (5.0(2)), I have a situation where the FIB and RIB are out of sync. I'm not sure it's causing a problem, but it's been implicated in some weird packet loss issues. It seems like it could cause network issues if you had two routes in the RIB, only one in the FIB, and then you lost the single path in the FIB. How the RIB/FIB gets out of sequence, how to proactively know about it (nothing in the logs here), and whether or not this is a big deal or a red herring?
Here's sample output that illustrates the RIB and FIB being out of sequence.
ROUTER1# show ip route 172.16.100.1
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
[Code].....
i have problem with device. The device Nexus7000 C7010 with System version: 4.2(1) is suddenly reload .this is cause from sh system reset-reason
CORE1-7010# sh system reset-reason
----- reset reason for Supervisor-module 6 (from Supervisor in slot 6) ---
1) At 493933 usecs after Thu Jul 19 08:47:07 2012
Reason: Reset triggered due to HA policy of Reset
Service: netstack hap reset
Version: 4.2(1)
when i see this problem related with this bug
CSCtd14544 g Details [URL]
How to get a summary of netflow statistics on NX-OS? On IOS you could do sh ip cache flow which would show what I need? Can't find a similar command on the Nexus Platform.
View 4 Replies View RelatedI can't seem to find any information on the Nexus 5000 support of netflow. I assume that means it doesn't do netflow.
View 5 Replies View Related