Cisco NAM - Capabilities

Hello All,
I'm looking for features of NAM 3.0 which may help on daily operational basis, below are few questions regarding the same:
1. Can NAM give real time data showing which IP addresses are connected to a particular server?
2. Can it provide details of which protocol is abruptly disconnecting between two end-points?
3. If I deploy Cisco NAM at my data centre in HQ, how would it help me monitor my traffic at remote sites, or does it help at all in this regards?
4. Can it differentiate between traffic coming from load balancers, WAN optimizers, SSL devices, etc apart from regular endpoints like servers, desktops?
5. I'm guessing it already does, but just wanted to know if NAM gives complete details of all ports active on a server and which protocols, clients connected to it?
6. Does it show real time traffic between two endpoints like two hosts on different remote sites?
Thank you.
Regards,
Adnan

NAM, NAM1, NAM2, NAM SoftAppliance, NAM WAAS Blade or NAM Appliances are hardware denominators. Each new hardware release brings new chipsets, designs and hardware capabilities to NAM.
But majorly, all features depends on the software version you are using, either NAM Software 4.x or 5.x.
As an example, it is like using a Windows Software on a old single processor or a new Quad-core processor, features may remain same. However, some of the selective features does depend on Hardware as well, but mostly the robust hardware adds performence.
The latest NAM3 has following architecture:
•Two high-performance CPUs with hardware-based packet acceleration offering greater than 10 Gigabit Ethernet monitoring performance, 24 GB RAM, 600 GB SATA hard disk drive, mini SAS, and 10 Gigabit Ethernet external storage interface, and 1 Gigabit Ethernet management interface
• 20 gigabit interface to backplane for Switched Port Analyzer (SPAN)/VLAN access control list (VACL) capture data sources, NetFlow, encapsulated remote SPAN (ERSPAN), Cisco WAAS, and Cisco Performance Agent (PA) data sources
For more details on NAM3 please visit this link:
http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps11659/data_sheet_c78-655374.html
-Thanks

Similar Messages

TACACS+ Authentication For Cisco NAM

Hi All,
I have an cisco ACS v5.1 and also a cisco NAM. Currently, I have configured TACACS+ on the NAM and the ACS v5.1 however when I try to access the NAM, the ACS v5.1 has an error message of "TACACS+ authentication ended with error" and I am not able to access the equipment.
For your information, I have no problem with others equipment TACACS+ authentication with the same ACS.
Please advise.
Thks and Rgds

Steven
I would first suggest that you verify that your ACS has an appropriate and correct entry configured for the NAM as a client. Assuming that is correct then I would suggest that you check and verify that the NAM is originating its TACACS requests from the address that you configured for the client on the ACS and that the shared secret is the same on both devices.
If those are correct then I would suggest to look in the Failed Attempts report of ACS and see if it provides a better identification of the problem.
HTH
Rick

Cisco NAM 5.0 API

Hi,
What all API's are exposed by cisco NAM 5.0 for data extractiom from it's embedded database.

Most if not all NDE collectors do include their own database. So, yes, that would be another database. The NAM CSV export feature does allow you to specify custom date ranges and get periodic exports in either CSV or HTML format. You can view these reports prior to sending them by first clicking the Export button, then click the Preview button. For example, here is a preview of the Application traffic report for SNMP for a day's worth of traffic:
Application,snmp
Time From,Sat, 18 Jun 2011 15:54
Time To,Sun, 19 Jun 2011 16:09
Application Traffic
Time,Bytes/sec,Packets/sec
Sat, 18 Jun 2011 16:00,1,769,9
Sat, 18 Jun 2011 17:00,1,893,10
Sat, 18 Jun 2011 18:00,1,683,9
Sat, 18 Jun 2011 19:00,1,690,9
Sat, 18 Jun 2011 20:00,1,702,9
Sat, 18 Jun 2011 21:00,1,726,9
Sat, 18 Jun 2011 22:00,1,669,9
Sat, 18 Jun 2011 23:00,1,684,9
Sun, 19 Jun 2011 00:00,1,695,9
Sun, 19 Jun 2011 01:00,1,734,9
Sun, 19 Jun 2011 02:00,1,682,9
Sun, 19 Jun 2011 03:00,1,686,9
Sun, 19 Jun 2011 04:00,1,706,9
Sun, 19 Jun 2011 05:00,1,734,9
Sun, 19 Jun 2011 06:00,1,672,9
Sun, 19 Jun 2011 07:00,1,681,9
Sun, 19 Jun 2011 08:00,1,683,9
Sun, 19 Jun 2011 09:00,1,735,9
Sun, 19 Jun 2011 10:00,1,670,9
Sun, 19 Jun 2011 11:00,1,690,9
Sun, 19 Jun 2011 12:00,1,692,9
Sun, 19 Jun 2011 13:00,1,738,9
Sun, 19 Jun 2011 14:00,1,669,9
Sun, 19 Jun 2011 15:00,1,706,9
Sun, 19 Jun 2011 16:00,1,730,9
Thu, 01 Jan 1970 00:00,,
Top N Hosts - Traffic In
Host,Bytes/sec
14.32.100.30,92
172.18.123.238,163
14.32.15.2,244
14.32.12.17,285
14.32.15.1,332
Top N Hosts - Traffic Out
Host,Bytes/sec
14.32.15.1,163
172.18.123.238,173
14.32.15.101,198
172.18.123.174,224
14.32.12.17,310
Application Configuration
Protocol,Port,Bytes/sec
UDP,161,1,643

Unable upgrade cisco NAM

Hi guys!
I have next problem:
I have cisco NAM server (Catalyst 6509 with module WS-SVC-NAM-2). I want install upgrade for 6.0.2 version but I get next error:
upgrade ftp://[email protected]/c6svc-nam.6-0-2.bin.gz
Downloading the image...
Password for [email protected]:
ftp://[email protected]/c6svc-nam.6-0-2.bin.gz (170786K)
- [############# ] 95734K | 11448.08K/swrite: No space left on device
426 Connection closed; aborted transfer of "/c6svc-nam.6-0-2.bin.gz"
Image download failed. Exiting...
Upgrade with <ftp://[email protected]/c6svc-nam.6-0-2.bin.gz> failed (1)
Can anybody help me?
Thanks

I can't believe no one has replied to you yet. I'm sure you've figured it out by now, but for those who are searching: the disk on the NAM device was full. You know how on the NAM you have your hard drive for all the data that's collected, but that's not where the OS for it resides. It resides on a flash card. That's probably like a 128MB card, and it's full. Typically in this situation you have to remove the old version of the software from flash before you ftp the new image up there. Now be careful with this because if you are not positive that you have the correct image, you could be temporarily bricking your device. By erasing the old image before loading the new one you're going to have the risk that if it doesn't work that you won't have an image to recover from. So typically you want to FTP the current image down to a computer where you can store the old image, until you're sure the new one works.

Cisco NAM 2204 Appliance Problem

Hi,
I wanna seen port utilization for Cisco 3750 with NAM 2204. What can i do this configuration in NAM and 3750?
Thanks.

I have copy&paste the error message in the web search and I did get a bunch of hits on this, all related to Linux. The NAM is build on a Linux kernel, so it is obviously related to it but I didn't found a good hint what really caused the issue, just a couple of suggestions. One thread described how to change some settings in grub.conf which is not soltion for you:
http://www.cyberciti.biz/faq/linux-kernel-uhhuh-nmi-received-for-unknown-reason-30/
In couldn't find an entry for this in Ciscos' bug tool, so I would say, its time to open a TAC service request with Cisco (or your partner) or just try to reload the module and see if you get it back working....

Cisco 11050 Capabilities

Hi
I have a CSS11050 running fine with 9 servers in 3 different pools. I use 1 port of the CSS to connect to a switch, and I use the switch to connect the 9 servers. I have plans to connect an addition 2 servers in the same manner. At present the CSS doesn't seem to be labouring.
I looking for a spec on what the CSS11050 can handle in both numbers of connctions from clients, and the number of servers that can be typically be set up. The CSS11050 has 8 physical connections but I don't think this is a limiting factor given the configuration I have described above. The CSS 11050 has a backplane speed of 5 Gig which is the same as the next range of CSS (11150)
so I don't really see what the difference is.
Anyone with ideas on what the CSS11050 capabilities are, would be much appreciated.
Thanks

This URL should help you:
http://www.cisco.com/en/US/products/hw/contnetw/ps789/prod_field_notices_list.html

Receiving Automatic calls from "CISCO" name continuously

We have installed one Cisco SX20 VC in our office last week only. Since then we are receiving auto call with name Cisco with no ip address.
Everyday approx. 250 calls we are getting on VC.
VC Network Configuration: Configured with Public static IP address, we don't have firewall in network and using as a standalone VC.
Product:
Cisco TelePresence SX20
Software version:
TC7.3.0.8cb420c
Can someone please help me to fixed this issue ASAP.
Regards,
Wajid Dabir

This has been covered quite a few times already, take a look at this thread; https://supportforums.cisco.com/discussion/12340591/nuisance-h323-calls-sx20 and https://supportforums.cisco.com/discussion/12336591/sourceh323idcisco-incomingcalls and https://supportforums.cisco.com/discussion/12472426/rogue-calls-expressway-e-can-they-be-blockeddropped for starters.
Not much you can do about it unless you put your system on a private address behind a gatekeeper etc.
You can at least avoid the SIP version of these scans by at least turning off SIP listening port, or turning SIP off all together unless you really need it. But no such luck when it comes to these h.323 scans.
/jens
Please rate replies and mark question(s) as "answered" if applicable.

Cisco NAC capabilities

I'm tryin to determine if Cisco's NAC appliance would be able to stop someone from plugging in a Wireless AP and get it working as an access point or bridge. Is there a configuration or option within the NAC to do this?

This document describes how to integrate the Cisco Clean Access (CCA) solution with a Cisco Wireless LAN Controller (referred to hereafter as the controller) to provide guest user access management and posture assessment features for wireless networks. A similar configuration is designed for non-guest user access and posture assessment.
http://www.cisco.com/en/US/docs/wireless/technology/clean_access/technical/reference/cleanAN.html

Cisco nam 2204 performance evaluation

Hi,
We are planning export 500 Netflow of ISR G2 to a NAM2204-RJ45 appliance.
But I Cannot find information about NAM2204-RJ45 Netflow Data Export performance.
Can someone share user experience?

The 2204 is an appliance with 4 gigabit ports where the ISR is a module with two ports.
2204 data sheet:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps5740/ps5688/ps10113/data_sheet_c78-655535.html
ISR data sheet:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps5740/ps11658/data_sheet_c78-655516.html

Install and configure Cisco Network Analysis Module NAM-2

Hi,
Does anyone have a step-by-step document on how to install and configure Cisco NAM-2 module ?
Thanks in advance.
Regards,
Lamine

Hi Lamine,
The official installation guides for NAM software can be found here:
http://www.cisco.com/en/US/products/sw/cscowork/ps5401/prod_installation_guides_list.html
Is this what you are looking for?
Cheers,
Shane

Cisco Network Analysis Module (NAM) data monitoring port

Hi, need some insight on this please. Your comments are appreciated.
My Cisco NAM 2220 comes with 10G data monitoring port, can I configure an IP address on this port for data monitoring?
or this data port can only support monitirong span, rspan, ersapn, vacl only (not for IP routing) and needs to be functioning in a promiscuous mode only?
Many thanks
Joe

Hi Lamine,
The official installation guides for NAM software can be found here:
http://www.cisco.com/en/US/products/sw/cscowork/ps5401/prod_installation_guides_list.html
Is this what you are looking for?
Cheers,
Shane

Traffic Analyzer is rare with Cisco Prime NAM

Hi,
we see any rare with Traffic Analyzer, see that ip source configured X.X.X.X/24 is as destination X.X.X.X. Where see that source is Y.Y.Y.Y. If we configure as destination X.X.X.X wihout source about Cisco Prime NAM, will have that appear in traffic analyzer as ip Destination correctly, but is backwards.
have a card NAM-2 with last patch (WS-SVC-NAM-2), Version 5.1(2)). We configure about Cisco Prime Network Analisis Module Web where
choose Capture > Packet/Capture Decode > Sessions
Configure Capture Session paramaters correctly, below:
with a Name "Prueba"
Capture Sourceis Data Ports with DATA PORT 1 and DATA PORT 2. (see attach file Configure Capture Session.jpg)
Configure Software Filter Dialog parameters correctly, below:
with a Name "Prueba"
Destination Address / Mask: X.X.X.X/24
select Both Directions
Application or Port: None
(see attach file Software Filter Dialog.jpg)
w
When have all configured about Cisco NAM, we see in Analyzer Packet that ip configure as destination appear as source, and as source other address. We see that is not correctly
(see attach file Nam Traffic Analyzer Packet Decoder.jpg)
It´s normal or is an issue real?
Best Regards.

Alfroj,
I downloaded the NAM 5.1 software to be installed on a SRE Module.
I was wondering if you could help me out with an error.
When i configure the module and then try to install the files from a ftp server, it doesnt work.
It loads all the files and when its installing, theres a crash and the system reboots. It does this all the time. Just keeps rebooting and rebooting.
Im attaching the messages I get
I would appriciate if you could help me out
Thanks in advance
Sincerely,
Dante Verastegui

WAAS and NAM 4.2 Reporting

hey folks,
I recently went through the upgrade process with a customer to move their NAMs to 4.2 and integrate WAAS 4.0.15 with the NAMs via the flow agent. We followed the NAM integration guide and setup some reporting in the NAM for collecting information from the WAAS flow agents on bandwidth and response time. However, at this point, the information that we seem to be getting is limited. I am finding the reports in the WAAS GUI itself to be more valuable at this time, however, I have heard from several engineers since this integration has been available that NAM and WAAS are a good fit. Does anyone have any specific reports that they can point me towards in the NAM? Right now I have setup some Application optimization specific reports in the WAAS CM for HTTP and CIFS. What I would like to do is use the NAM to validate those reports and provide some upper management level visibility into specific flows to specific servers and how effective WAAS has been in optimizing that traffic. This customer is about to deploy WAAS worldwide and having some more detailed reporting capability would be very helpful.
Does anyone on the list have any good experience with NAM 4.2 and WAAS that they can share and some how to's on what reports they are finding the most valuable to their senior managers and IT staff? Thanks
Sincerely
Mike Louis

Hi Mike,
This webinar on Jan 12; might be of interest to you.
You can register via this URL.
     https://ciscosales.webex.com/ciscosales/onstage/g.php?d=201229605&t=a
I also attached a document that might help as well - Using NAM Hardware in a WAAS POC and Depoloyment.
Thanks
Eric - please mark as answered with a rating of 5, if this answered your questions.
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
Leverage Cisco Network Analysis   Module to enhance operational visibility into WAAS deployments. NAM   reports on a comprehensive set of application performance metrics such as   application response time, WAN bandwidth usage, LAN and WAN data throughput,   and other application performance metrics to:
Identify        application optimization opportunities
Analyze        impact of Cisco WAAS implementation
§ Take advantage of visibility for ongoing    optimization improvements and troubleshooting
Cisco NAM   4.1 also introduces the first software only version of the NAM as a Virtual   Blade on the WAVE 574 and WAE 674.
If you have ever felt overwhelmed   trying to answer the following questions:
·         How do I verify the impact of WAAS on   application performance at my remote offices?
·         How do I get the level of visibility needed   for effective operational manageability?
·         Is there a monitoring solution that is   integrated and does not demand additional footprint?
·         Is there a solution that provides visibility   across the entire WAAS deployment lifecycle?
Please join us for a webinar of   the Cisco NAM 4.1 that explores the performance management and   troubleshooting capabilities of NAM hardware and NAM VB in a WAAS environment   to help address the above questions and more.
WEBINAR Dates and Times:
REGISTER January 12th, 2010 Tuesday at 8:00 - 9:00 AM PST/11:00-12:00 EST
Agenda:
·         Overview of NAM and NAM VB
·         Setting up NAM for WAAS analysis
·         Use of NAM for WAAS before-and-after impact   analysis
·         Use of NAM to improve manageability and   troubleshooting of WAAS
·         Q&A
NOTE – Once you have   registered for the webinar, you will get a WebEx message with outlook ics   file.
Please   click on the .ics file when you get your message from WebEx to make sure it   is placed on your Outlook Calendar.
© 2010 Cisco Systems, Inc. All rights   reserved. Privacy Statement and Trademarks of Cisco Systems, Inc

Can't create a session on Local Disk on Cisco NAM2204-RJ45 5.1(2)

I have a Cisco NAM 2204-RJ45 with the version 5.1(2).
The issue that I have is that when I want to create a new session capture, we can not select to save the capture to the local disk, and the NAM shows me this message: "All Disk Storage are currently 'In Use', please capture to memory.
Verifying the status of the Local Disk, There is a lot of availaible disk:
The only way to use the Local Disk is taking the capture on "Memory" and after that save to file this capture.
I need to know if there is a way to save the session capture directly to the Local Disk. Why the NAM send me the message of the all data storage in Local Disk is in Use?
Additional I attach the sh tech.
Thanks a lot for your answers!

Hi
can somebody advice the impact of "no keepalive " here ?
If i use keepalive command instead of "no keepalive " what would be the impact ?
Thanks

Cisco ISE functionally and license

HI.
I wanna configure the following on Cisco ISE 1.2.1.
Self-registration portal for guests (SSID: guests)
802.1x user certificate check (Cisco NAM supplicant) for employees (SSID: Corporate) (EAP-TLS)
Self provisioning portal (to deploy BYOD certificate and give access for BYOD devices) for BYOD devices (SSID: Corporate) (PEAP, MSHAPv2)
Can I configure these things with PLUS license or do I need Adv or Wireless? I am not sure if one of these requires profiling functionally.

With plus license all the above items should work.
Here is what plus license supports:
Bring Your Own Device (BYOD)
Profiling
Endpoint Protection Service (EPS)
TrustSec SGT
For more info, refer ISE license section:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_license.html#41012
Regards,
Jatin Katyal
**Do rate helpful posts**

Cisco NAM - Capabilities

Similar Messages

Maybe you are looking for