Cisco Prime- Netflow Export Issue

Dear All,
We are observing high bandwidth being utliized between ASR1004 and Cisco Prime 2.1 after enabling "ip netflow exporter". Is there any way to mitigate it..?

Yes - use sampled Netflow which statistically samples the flows instead of trying to send every single one back to Prime Infrastructure.
The IOS-XE configuration guide section on Netflow describes how to set it up.

Similar Messages

Ask The Expert: Understanding, Implementing, and Troubleshooting Cisco Prime Network

Ask questions and learn about Cisco Prime Network with Cisco experts Vignesh Rajendran Praveen and Jaminder Singh Bali.
Cisco Prime Network is and Cisco Prime Network provides cost-effective device operation, administration and network fault management for today’s complex and evolved programmable networks (EPNs). It is a single solution to support both the traditional physical network components, as well as compute infrastructure, and the virtual elements found in data centers. Automated configuration and change management combined with advanced troubleshooting and diagnostics greatly help service providers enable proactive service assurance. Additionally, the flexible and extensible architecture is designed to support the multivendor environment, helping to lower operational costs.
This event runs January 5 through January 16, 2015.
Vignesh Rajendran Praveen is a High Touch Engineer with the Focused Technical Services team supporting Cisco's major Service Provider customers in Routing, Switching, Multiprotocol Label Switching (MPLS) technologies and Cisco Prime Network related issues. Previously at Cisco he has worked as a Network Consulting Engineer for Enterprise Customers and as a Customer Support Engineer for Service Provider customers. He has been in the networking industry for ten years and holds CCIE certification (#34503) in the Routing and Switching as well as Service Provider tracks.
Jaminder Singh Bali is a Customer Support Engineer working in SP-NMS TAC team, supporting Cisco's major service provider customers in Cisco Prime Network, Performance and Prime Central related issues. His areas of expertise include Oracle, Linux and NMS applications. He has been in the industry for past six years.
Remember to use the rating system to let the experts know if you have received an adequate response.
The Experts might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation in Network Infrastructure community, sub-community, LAN, Switching and Routing discussion forum shortly after the event. This event lasts through January 16, 2015. Visit this forum often to view responses to your questions and the questions of other community members.

Hello Jerome,
A variety of Cisco devices are supported by the the Cisco Prime Network. I would encourage you to go through the below links on the user guide depending the version of Cisco Prime Network being used.
"Cisco Prime Network Supported Cisco Virtual Network Elements (VNEs)"
"Cisco Prime Network Supported Cisco VNEs - Addendum"
Below is the link for the user guide.
http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-network/products-user-guide-list.html
Hope this would help in providing you more clarity.
***********Plz do rate this post if you found it helpful*************************
Thanks & Regards,
Vignesh R P

Comparing NX-OS Configurations in Cisco Prime 2.1 or LMS 4.2.5

Hello All,
Maybe this is just an NX-OS thing but does anyone have issues comparing different versions of a configuration for the same device? As an example we have Nexus 5548 running version 5.1(3)N2(1). When someone configures an interface on the switch Prime and LMS receive syslog notifications and back up the configuration. When you attempt to do a configuration comparison within Cisco Prime 2.1 it appears like the entire configuration has changed (see below - if you were to scroll over the entire config is red).
When I do the same comparison within LMS 4.2.5 it gives the same result. Is this just the way it is?
Brian

So I checked another Nexus 5548 that's running 5.0(3)N1(1c) and it is working as expected. It seems with that device that Cisco Prime 2.1 is able to parse the configuration out and you can compare differing versions of the same device:
Looking back at the original device that Cisco Prime is having issues with it appears that everything is lumped under the global config:

Issues with Cisco Prime LMS 4.2.3

Hi,
I'm trailing Cisco Prime LMS 4.2.3 Soft appliance on ESXi before I deploy it into a live environment and am having some issues.
I've upgraded to version 4.2.3 and the box was working fine after the upgrade however on power it up today the Apache service will not start.
If I look at the LMS application I see this for the Apache service.
"Apache Administrator has shut down this server 0 "
I have tried to starting it.
CiscoLMS42/admin# application start Apache
% Application failed to start
CiscoLMS42/admin#
If I run an application operation debug at the same time I get the following output.
CiscoLMS42/admin# 6 [5343]: application:operation cars_install.c[1145] [admin]: Application initialization initiated for appname: Apache, operation: 0
7 [5343]: application:operation cars_install.c[1146] [admin]: Operations: O-APP_START, 1-APP_STOP, 2-APP_STATUS
6 [5343]: application:operation cars_install.c[1150] [admin]: Verifying app (Apache) is installed ...
3 [5343]: application:operation cars_install.c[1152] [admin]: App (Apache) is not installed.
3 [5343]: application:operation install_cli.c[281] [admin]: Error while starting application - Application: Apache ErrorCode: -999
I'm at a complete lose as to where to look next, failing anything else I'll have to rebuild it, but it would be nice to know how to get the Apache up and running again.
regards
Rich

Hi Richard,
I see the following:
[ Thu Apr 18 20:53:11 GMT 2013 ] TomcatMonitor After gettingAJPPort : ajpPort = 9009 and host =CiscoLMS42
[ Thu Apr 18 20:53:11 GMT 2013 ] TomcatMonitor theMgr constructor successful.
[ Thu Apr 18 20:53:11 GMT 2013 ] TomcatMonitor Inside whileloop
[ Thu Apr 18 20:53:11 GMT 2013 ] TomcatMonitor Tomcat is not ready, it's coming up Connection refused
It looks like the hostname cannot be resolved. Can you try to add a static entry in /etc/hosts for the IP of the server and CiscoLMS42?
Restart the daemon manager and it should work.
Regards,
Vlad
==========
NMS Team
Krakow, Poland
Cisco TAC

Issue with backup NCS via NFS (Cisco Prime NCS 1.2.0)

Hello,
Does someone have issue with backup NCS via externally mounted location (NFS)?
I have Cisco Prime NCS 1.2.0 and tried backup it to external resources, but I have issue with my free space:
NCS/admin# backup ncs repository backup_nfs
% Creating backup with timestamped filename: ncs-130131-0534.tar.gpg
INFO : Cannot configure the backup directory size settings as the free space available is less than the current database size.
You do not have enough disk space available in your repository to complete this backup.
DB size is 25 GB
Available size is 12 GB
Please refer to the command reference guide for NCS and look at the /backup-staging-url/ command reference to setup the backup repository on an externally mounted location
Stage 5 of 7: Building backup file ...
-- complete.
Stage 6 of 7: Encrypting backup file ...
-- complete.
Stage 7 of 7: Transferring backup file ...
-- complete.
I have tried to add additional space and use command backup-staging-url (my configuration: backup-staging-url nfs://server2008:/nfs), but it didn't help me.
NFS share works perfect. I have checked it via NFS repository:
repository backup_nfs
url nfs://server2008:/nfs
+++++++++++++++++++++++++++++++++++++++
NCS/admin# show repository backup_nfs
NCS-130130-1135.tar.gpg
NCS-130130-1137.tar.gpg
NCS-130130-1157.tar.gpg
NCS-130130-1158.tar.gpg
test-130130-1210.tar.gz
Everytime when I try create backup I receive error message "You do not have enough disk space available in your repository to complete this backup".
Does someone know how can I backup NCS system?
Thank you

How much space is availabe on that NFS mount point? It looks like to me from the error message that there is only 12 GB....
The backup-staging-url is just for a space used to stage the backup before it is written-----

Cisco Prime NCS 1.3 Licensing issue

Hello,
I am installing Cisco prime NCS x 2 servers. I downloaded the licenses which are ordered allong with the devices as follows.
Product Name                : L-PI12-LF-50-LIC
    Product Description         : L-PI12-LF-50-LIC:Prime Infrastructure 1.2 - Lifecycle - 50 Device Lic PAK
    Product Qty                 : 1
    UDI                        : PID: PRIME-NCS-APL-K9
The issue is, the NCS appliance was not started properly and then I used the CD which came along with the server (NCS 1.3). Now my system is up and running but it is NCS 1.3 and when i upload the licenses, it shows that the UID is not matching with the system. Is this because the licenses are issued for NCS 1.2 and my system runs on 1.3? If so, what do you suggest, do i need to download NCS 1.2, install it, add the license and then upgrade to 1.3?
Thanks for your advise,
Regards
Jay

Prime Infrastructure has a support forum at:
https://supportforums.cisco.com/community/netpro/network-infrastructure/network-management
Please post this to that forum to reach PI experts.
Regards

Cisco Prime Infrastructure patch 2.1.1 - HA issue

Hello,
I have a problem with the Cisco Prime Infrastructure patched to version 2.1.1. I did exactly what Installation Guidelines say:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-1-1/release/notes/cpi_rn.html
– Install the Prime Infrastructure 2.1.1 patch by using the Administration > Software Updates page on the primary server.
– Restart the primary server.
– Verify that the patch installation is complete. If you find the installation complete, decommission and reinstall the secondary server and add it back to the primary server.
I reinstalled HA server and I'm trying to add it to HA but I get "Failed to authenticate - Primary(xx.xx.xx.xx) and Secondary(xx.xx.xx.xy) PI version does not match"
Can you help me with that? What I'm doing wrong? or maybe this patch is not prepared to work in HA mode?
Regards

Symptom:
The installation instructions of PI 2.1.1 patch in a High Availability environment are not accurate and following these steps will result in the inability to re-pair the Primary and Secondary servers.
Conditions:
If the instructions are followed, then when the user attempts to re-pair the servers, an error will be encountered:
"High Availability Registration Failed - Failed to authenticate - Primary (x.x.x.1) and Secondary (x.x.x.2) PI version does not match".
Instead, the following steps have proved to work correctly:
1. Upload and install patch on primary.
2. Upload and install patch on secondary.
3. Stop NCS services on secondary
4. Stop NCS services on primary
5. Start services on secondary
6. Start services on primary
7. Re-pair HA servers from primary
Workaround:
Workaround 1:
On the secondary, go under root and issue:
# cd /opt/CSCOlumos/bin/
# ./hamode.sh primary
Answer 'yes' when prompted.
Go to admin user and execute
# ncs stop
After the services are stopped:
# ncs start
When the services are back up, login to the secondary GUI as you would login to a primary server
Go under Administration > Software update, upload the patch and install it.
Go to admin user and execute
# ncs stop
After the services are stopped:
# ncs start
When the services are up, go under root and issue:
# cd /opt/CSCOlumos/bin/
# ./hamode.sh secondary
Answer 'yes' when prompted.
Go to admin user and execute
# ncs stop
After the services are stopped:
# ncs start
After the message that services started successfully on the secondary, initiate a new High Availability configuration from the primary. Now the synchronization between the two servers should succeed.
Workaround 2:
Redeploy or reinstall the Primary server, restore the backup which was taken prior to applying the patch, reconfigure the High Availability and continue with the steps described in the Conditions section.
Further Problem Description:
Release Notes have been updated with more precise instructions.
Known Affected Releases:
(1)
2.1(0.0.85)

Cisco Prime Infrastructure 1.2 and Aironet 1250 + VSS issues

Hi,
I am new to the NCS implementations and configurations. I have one very specific case with Cisco Prime Infrastructure 1.2 and autonomnous APs and several issues with Cisco VSS on 6500 switches.
So here is the version from Prime:
NCS/admin# show version
Cisco Application Deployment Engine OS Release: 2.0
ADE-OS Build Version: 2.0.1.038
ADE-OS System Architecture: x86_64
Copyright (c) 2005-2010 by Cisco Systems, Inc.
All rights reserved.
Hostname: NCS
Version information of installed applications
Cisco Prime Network Control System
Version : 1.2.1.012
IOS version on our APs (which are autonomnous) is:
AP-N-1>show ver
Cisco IOS Software, C1250 Software (C1250-K9W7-M), Version 12.4(25d)JA1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 11-Aug-11 03:23 by prod_rel_team
Well the issue what we have now is that access point has been added but its not recognized by the NCS prime. I have tried all three versions of SNMP but I get the same result. The SNMP configuration is valid since I use the same for my switching infrastructure. When I enter "debug snmp packets" and "terminal monitor" I can see the SNMP communication between Prime and Aironet 1250 which is standalone.
When I switch to Lifecycle theme and go to Operate > Device Monitor Center I see all devices I have added. The Aironet 1250 is reachable but under collection status I get Managed with Warnings. When I hover over with my mouse I get "None available".
I have successfully added my switching infrastructure in total, which is operating perfectly for Catalyst 2960/3650/3750/4500 series but for 6500 under VSS I have some warnings. The device is recognized by the system which is excellent and all is operational. I get the following errors under Collection Status:
feature_sensor
SNMP request timed out
feature_powerSupplyFanStatus-6k
SNMP request timed out
IdentityCapability
The device is unreachable.
feature_flashdevice
SNMP request timed out
sam_ipsla_feature
The device is unreachable.
What can be done to resolve these issues ? I have attached a screenshot of this particular issue. The affected access point is 172.16.165.241.
Predrag Petrovic

Hi rajeeshp,
Currently I am not allowed to upgrade it because of internal procedures involved in upgrading a specific piece of software (obtaining permissions from various departments). Is it free to upgrade from 1.2 to 1.3 or there is a specific charge for that.
Predrag Petrovic

Cisco Prime Infrastructure MESH LINK ISSUE

Hi,
a Customer of us has a trouble with cisco Prime Infrastructure 1.2.0.12 and AP mesh link.
There is an huge database ( i suppose the issue can be here ) and when we display some map ( each floor has about 6 RAP and 24 MAP ) we cannot see the MESH information and link draw.
The only way to dipley them is to disable "refresh from network": this way I'm able to show these link..... until a click before.
What i noticied when all was working fine, after i click to some floor:
1) the software started to show the map with normal color and no mesh info displayed ( just ap and coverage cloud )
2) after few time ( less than 1 second ) the map was becoming a little bit lighter and the mesh info was merged to the map
We are missini the second step
Anyone had the same issue ?
best regards
Luigi
PS: I opened a case with WCS version 6.0 ( same issue ) but, after some months, no risult. The last version working fine was WCS 5.2

Just to add some more informations:
- disabling "refreshj from network" ( building properties ) the link and mesh info are showed
- while I'm on a floor, after some refresh, i loose the mesh link draw and, if i click on an AP, i loose also mesh info in the popup. It' s like, after some refresh, the AP are no more recognized as Mesh ( !?!? )
regards
Luigi

Cisco Prime 1.4.0.45 in HA issue

Hello experts,
I detected an issue for the Cisco Prime Infrastructure about 1 of our customers.
They have 2 Cisco Prime Infrastructure with v1.4.0.45 code in HA configuration.
The problem they have is they receive an email saying that the primary server has failed and needs to be manually failed over. But the primary server is healthy !
This is not the 1st time they have this issue and each time they need to re-build the HA (remove/create).
Have you ever seen this issue related to this version of Prime ?
Can it be solved with a patch or something else ?
Please find some screenshots joined.
Thanks in advance,
AL

Can you please check that the issue is may be due to DB crash.

Using Cisco Prime NAM as Netflow collector

Hi everybody,
I would like to know if it's possible to use a Cisco Prime Network Analysis Module for ISR G2 as a NetFlow collector. A draft of architecture is attached. What I need to do is monitor Gi0/0 and Gi0/2 and produce reports about the total amount of traffic to/from two groups of server in the remote data center. My customer doesn't want to use it's NMS neither wants to use a netflow collector. My company can't install and/or operate any kind of new software or hardware to do this job. VRF is not a problem, I can monitor them one at a time.
Reading documentation it seems me that it's possible configuring Netflow as a data source.
Has any body any experience in tis kind of config ?
Thx,
Enrico

The detailed view of the CDR based dashlets displays the CDR or CMR data only for the last 30 days.
The call details of the endpoints prior to 30 days is not displayed by the dashlets, however, the aggregation
of CDR or CMR data for the endpoints is available for the time period of one year.
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/collaboration/10-0/analytics/guide/Cisco_Prime_Collaboration_Analytics_Guide_10.pdf

Cisco Prime 4.1 Swap Space Issues

We have a issue where Cisco Prime 4.1 is using alot of swap space. We have 16 Gigs for it and it will use most of it. Also I am running out of Drive Space. I have all of my pruge settings correct, but still having issues. Any ideas?
Thanks.

Which Server OS is it? Windows or Solaris or an OS on VM?
How do you determing if Swap is taken? Swap is allocated space in memory/RAM and processes are switched to it by scheduler when not in run state. Do you mean your memory utilization is high?
For Disk Space, you have to again share which directory is taking up space?
Ideally LMS has following directories which may take a lot of space :
> NMSROOT/log directory where a lot of logs can take up the disk space. You can use Log Rotation to free the space. For instant release of disk space, you can stop daemon manager and delete logs from there and start it back.
** Log directory :
Windows : NMSROOT/log
Solaris : var/adm/CSCOpx/log
> Directory where LMS saves the device configuration, it gradually takes up a lot of space and hence you should do some instant purge to for archived configuration and change audit data.
** Log directory :
Windows : NMSROOT/files/rme/dcma/devfiles
Solaris : /var/adm/CSCOpx/files/rme/dcma/devfiles
> Also, if your LMS installation is running since many years, there are chances you have a lot of jobs history. You should also do purge or instant purge to these jobs.
For details on Purge settings check document here.
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

Problem Exporting Backups from Cisco Prime LMS 4.2 deployed as software appliance

Hi,
I'm trying to backup a Cisco Prime LMS4.2 based on soft appliance. I have the backup stored on destination disk://localdisk/backup/, but i can't export it via FTP to external server. When I perfrom the transfer only the folder is stored in the destination path, the files aren't included. I think that i have to compress files on the backup folder as .tar file using linux shell, but i can´t find the backup folder from this shell.
It´s correct my procedure, if not What is the procedure and commands to export a backup to external server via FTP?
Thanks,

Hi Dave,
If your Goal is to upgarde the IOS of the devices via LMS then MANUALLY download the IOS Image from cisco.com
and use the FILE SYSTEM option to add the Image in the Software Repository
Then try to upgrade the IOS and see how it works.
Thanks
Afroz

Netflow export on Cisco 2821

Hello,
a question or more a problem with netflow exports on Cisco 2821's.
I configured netflow export on a Cisco 2821 with IOS Version 12.4(24)T
ip cef
interface FastEthernet0/0/0
description to XXX
ip address XXX
ip flow ingress
ip flow egress
duplex full
speed 10
ip flow-cache timeout active 1
ip flow-export source GigabitEthernet0/0
ip flow-export version 5
ip flow-export destination XXX XXX
The netflow collector shows "only ingoing traffic" on interface FastEthernet0/0/0 and
"only outgoing traffic" on interface GigabitEthernet0/0.
Same problem with an IOS Version 12.4(20)T1 on other Cisco 2821's.
But same configuration on other Cisco 2821's with IOS Version 12.4(11)XJ4 work well.
Any references/suggestions or explanations?

#It's surprising to me that it's even possible to configure both directions on a single interface.
#It's generally not a good idea to configure both directions among interfaces on a single router.
--> It is possible. ;-) I need QoS (DSCP information) for ingoing traffic and
--> and for outgoing traffic of this interface FastEthernet0/0/0.
#How's g0/0 configured "ip flow" wise?
--> There's no netfow configuration on this interface, only on Fa0/0/0.
-->#sh ip flow interface
--> FastEthernet0/0/0
--> ip flow ingress
--> ip flow egress
#Maybe you're seeing "only outgoing traffic" on
#interface GigabitEthernet0/0, because those are incoming traffic through fa0/0/0
#(where IOS ignores the "ip flow egress" part) and flowing out through g0/0?
--> You're right. The outgoing traffic at Gi0/0 is the ingoing traffic at Fa0/0/0.
--> But I don't think thath the configuration is wrong and I think that the
--> "ip flow egress" command on an single interface is not so special.
--> I really looks like that the command "ip flow egress" on interface Fa0/0/0
--> is being ignored. But why?
--> May be I should start an other discussion with a link to this posting in the
--> router forum.

Cisco 831 no netflow export packets through IPSEC

I have cisco 831 in remote office. Remote office is connected to Central Office through IPSec tunnel. I has configured netflow export from sorce address Lan interface (inside interface) remote office to Server central office. But I did not see netflow packet in central Office at netflow server. May be somebody fixed the problem ?

Check 'ip route-cache flow' cmd enabled on tunnel interface.
also check this bug-id:CSCef28662.
Try this link:
http://www.cisco.com/en/US/tech/tk812/technologies_white_paper09186a008022bde8.shtml#wp1002626

Cisco Prime- Netflow Export Issue

Similar Messages

Maybe you are looking for