Designing Cisco Netflow Architecture ?

My company isn't using a management system for analyzing the WAN traffic and we want to implement Cisco Netflow to analyse the network traffic on the backbone. We have a huge network with more then 100 sites across the world. We use 120x 2600 routers and 6x 7200 routers.
Now the question is : How to collect the data into a central place ?
The routers have netflow activated and they send the netflow information to a netflow collector. Now we need a program that collects the data from the netflow collectors to a central place and analyzes this. I searched the cisco site and found out that cisco uses a Netflow server for that solution. But Cisco has decided to partner with third-party vendors to deliver the Netflow Server product.
Does Anybody have any ideas ?

Hi
if I understand you correctly you need some application to make your netflow data human viewable , right ?
Take a look at this page, it is a very good listing of different vendors which deliever such products, also some freeware projects are listed ...
http://www.switch.ch/tf-tant/floma/software.html
here is a additional listing
http://www.inmon.com/technology/netflowapps.php
Michael

Similar Messages

Is MVC2 a design pattern or architecture? for yes and no why?

I am using JSF which follows MVC2. Is MVC2 a design pattern or architecture? For yes and no why? what is the difference between design pattern or architecture?

Hi There,
Maybe this will help answer your questions...
Firstly, MVC2 is a proprietary name for the Microsoft .NET framework based around the Model-View-Controller pattern - it is an updated version of their first attempt - MVC.
The Model-View-Controller pattern harks back to the days of SmallTalk, and as far as I am aware is not included in the original Gang Of Four design patterns, although there is no reason why it can't be considered a design pattern.
Software architecture is about how different parts of the system fit (interface) together and how they relate, including static relationships (cardinality relationships, state) and processes (what happens when), it most often consists of many design patterns each used to address the various needs of a complete system.
Hope this helps
Rich

Question about Cisco SAFE Architecture....

All,
I have searched high and low on the following question for a master's class and hope someone can answer or point me in the right direction. I have studied Cisco of the last many weeks and our professor asked us whether or not the SAFE architecture has any limitations... After much reading and research, I honestly came up with nothing. I am starting to think, limitations isn't the issue but issues might surface if Cisco's best practices aren't implemented. Any help for a student is greatly appreciated and thanks.
Bob Jones

Hi Bro
Cisco SAFE is merely a guideline in deploying Cisco’s best practices for Cisco products and those of its partners ONLY. In fact, if you were to read on the Cisco SAFE Architecture Lifecycle, the planning phase should include a gap analysis to unveil the strengths and weaknesses of the current architecture. If the planning stage isn’t done correctly, then you should know the end results :-)
Limitations are not on Cisco SAFE approach, but limitations are always there on either Cisco products or the software version, based on certain given scenarios. For this reason, when you were to read any of Cisco's configuration examples on certain technologies, there will always be a chapter on Guidelines and Limitations.
P/S: If you think this comment is useful, please do rate them nicely :-)

Is there a notation for designing planning hierarchies/architectures?

Hi everyone,
I wonder if there is a standard notation for designing planning hierarchies/architectures.
When designing BW InfoCubes, I can use ME/RM or ERM for conceptual design and SAP Star Schema for logical design. Is there anything similar for designing planning hierarchies/architectures?
Best regards, Dan

The first highly limited version of the native Android viewer should be available in the next release v28. While it will support phones, it will be limited in its feature set. Over the next several releases, more overlays and other features will be added to the native viewer.

Cisco Netflow Collector 6.0 Data base

What is the database used by Cisco netflow Collector 6.0 ?

I guess it is IBM Informix IDS. Read it in one of the old release notes of Cisco NetFlow collector. Iam not sure if anything else is involved.
Regards,
Don Thomas Jacob
ME - NetFlow Analyzer

Cisco netflow

I need some help with cisco netflow, I wanted to know which routers support cisco netflow, or are capable of utilizing cisco netflow.

You can use the Cisco Feature Navigator to find this info:
http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp
Just 'Search by Feature'
Regards
Farrukh

Is MVC is Design Pattern or Architecture

Is MVC design pattern or architecture.i think at high level it's architecture and low level it's design pattern.is my view correct.any suggestions appreciated.
thanks,
srikanth

A pattern is used to define an often used architecture. You take it from there.

Designing Cisco Video conferencing solution

Hi All,
I need to design a single site Cisco IP Video Conferencing soultion which should support web, chat, ISDN and email etc support.
there will be one conferencing room which will be communicating with other remote or traving users.
the requirement is that remote or travelling users should be able to have the video conferencing facility with the Headoffice(single site) and vise versa.
Any help will be much appreciated.
Regards,
Waqas

I would recommend Cisco unified presence server for your deployment with MPX. That will give you chat, voice and video conferencing. If you dont use MPX then you can only do point-to-point video CUPS on its own doesnt support video conferencing.
YOu can also intergrate with exchange to view meetings and unity to listen to voicemails.
You can use VTA for the remote clients and 7985 for central site or some sort of tanberg phone if you want a larger screen.
The remote users are going to have to have a pretty low latency connection to get good quality video/voice.
HTH
Matt

Cisco netflow problem!!!

I'm trying to configure netflow on router2600 and still it's not working. here is my cisco configuration:
Current configuration : 2153 bytes
version 12.2
service timestamps debug datetime msec localtime show-timezone
service timestamps log uptime
service password-encryption
hostname GEO_OSMP
boot-start-marker
boot-end-marker
aaa new-model
aaa authentication enable default none
username osmp secret xxx
ip subnet-zero
ip flow-cache timeout active 2
ip name-server 213.x.x.34
ip name-server 213.x.x.35
call rsvp-sync
controller E1 0/0
controller E1 0/1
interface FastEthernet0/0
no ip address
ip accounting output-packets
ip flow ingress
speed 100
full-duplex
no clns route-cache
interface FastEthernet0/0.1
bandwidth 10000000
encapsulation dot1Q 50
ip address 192.168.0.1 255.255.255.0
ip accounting output-packets
ip nat inside
ip flow ingress
interface FastEthernet0/0.2
encapsulation dot1Q 60
ip address 213.x.x.39 255.255.255.240
ip nat outside
ip flow ingress
interface FastEthernet0/0.3
encapsulation dot1Q 40
ip address 213.x.x.91 255.255.255.252
ip nat outside
ip flow ingress
ip nat inside source route-map telenet interface FastEthernet0/0.3 overload
ip nat inside source route-map wanex interface FastEthernet0/0.2 overload
ip flow-export source FastEthernet0/0.1
ip flow-export version 5
ip flow-export destination 192.168.0.18 9996
ip classless
ip route 0.0.0.0 0.0.x.x.131.42.89
ip route 0.0.0.0 0.0.x.x.200.20.33 110
no ip http server
ip access-list extended interneti
permit ip 192.168.0.0 0.0.0.255 any
ip access-list extended wanex
permit ip 192.168.0.0 0.0.0.255 any
logging history size 500
logging trap debugging
route-map wanex permit 10
match ip address interneti
match interface FastEthernet0/0.2
route-map telenet permit 10
match ip address interneti
match interface FastEthernet0/0.3
snmp-server community OSMP_LAN RO
snmp-server community osmp RO
snmp-server community kodi RW 60
snmp-server ifindex persist
snmp-server queue-length 100
snmp-server host 192.168.0.18 OSMP_LAN
control-plane
dial-peer cor custom
gateway
line con 0
line aux 0
line vty 0 4
password xxx
end
HELP MEEEE!!!!

Can you provide the output of the "show ip flow export" and "show version" commands?

Wireless design - Cisco 5508

Just recently bought a couple of 5508's, one for lab and one for production.
So I am at early stage design here.
I have a few questions
I would like to create one vlan, that is trunked across all 8 floors of company, distrubution switches and associated AP's per floor.
     Once a client tries to connect I would like them to be able to use their domain credentials (LDAP) to authenticate against the wireless
     infrastructure. Once they authenticate, they are granted access to the wireless vlan which has connectivity back to the network.
     From a design perspective is this the best way to go about doing this ? I see that there is a section for LDAP authentication, if they
     are already logged into the domain and then undock their laptop and connect over wireless will they have to retype in the username and password ?
     Seamless would be nice
From a guest (in house consultant) perspective, how do I design for just allowing them wireless access but only to the internet and not have access to rest of internal network. Is there a way to differnetiate via vlan assigment is they are a guest or an authenticated user ?
Pretty new to this 5508, but so far it looks great. Any advice / help would be appreciated.
Cheers
Dave

Let's try to do it point by point.
If you are to accept guests, you are better with a separate SSID with no authentication. That separate SSID will be on a separate vlan so you just have to configure ACLs on your network to prevent internal network access.
With regards to authentication, LDAP is a user database. You still need an authentication server. WLC can act as one but it's not as good as a real aaa/radius server.
So the best is to have WLC using a radius server (Microsoft NPS/IAS or Cisco ACS or whatever) that will do PEAP authentication and will use Active Directory as the database (The radius server is using AD as database, not WLC).
This allows to dynamically assign vlans and funny stuff that radius server allows.
To have it "seemless" you can pre-configure the client supplicants to do PEAP and automatically use Windows login credentials, so they won't be prompted if all goes well.
For specific questions, I think all is covered in the WLC config guide but this should be a good set of pointers for you to know where to look.
Hope this clarifies.
Nicolas

Cisco UCS architecture

Hi Everyone,
I am very new to data center studies and I am trying to build my concepts ralted to Cisco UCS. It would probably be silly questions but I want to know:
1. what is the difference between a "Service Profile" and Virtual machine? Are they both different names of same concept?
2. What is the concept behind virtual switch? Is it used to connect VMs or Service Profiles? If it is so, is it installed on a server over a VM/SP or something else?
2. I would appreciate if somebody could share a logical diagram showing overall concept of integrated service profile, virtual switch, VNIC, vEth, blade servers, etc.
Thank you very much.

Please see https://supportforums.cisco.com/thread/2270865?tstart=0 where you get answers to all of your questions
1. what is the difference between a "Service Profile" and Virtual machine? Are they both different names of same concept?
NO, not at all, a SP is a new concept, introduced with UCS architecture; it allows you to abstract the hardware of a server. It defines a template and/or a logical server: eg. number of vhba's, number of vnics, mac address pwwn/nwwn, BIOS version, boot policy/boot order. The values of mac, pwwn, nwwn, UUID are taken out of predefined pools, therefore they are hardware independent. Then you associate a SP with a physical blade, which then imposes all the above configuration on the real physical server. The relationship between SP and physical server is 1 to 1; if you need 10 ESXi servers, you need 10 SP's.
UCS is OS agnostic, it has no clue what the installed OS is. Therefore in UCS there are no OS specific agents.
VM appear in the context of server virtualization, and are completely different from SP.
see also http://www.youtube.com/watch?v=0YGJlP2q5Go
2. What is the concept behind virtual switch? Is it used to connect VMs or Service Profiles? If it is so, is it installed on a server over a VM/SP or something else?
Each hypervisor (Hyper-v, ESXi, Xen,...) is using a virtual switch (software); it is required to locally switch traffic between 2 VM's on the same physical host. VM's connect to the virtual switch.
3. I would appreciate if somebody could share a logical diagram showing overall concept of integrated service profile, virtual switch, VNIC, vEth, blade servers, etc.

J2EE Architectural Design Solution Needed

Hi,
I am coming up with an issue in designing the application architecture. It would be great if some one suggest solution for the problem.
The basic flow of application:
1. Client initiates a transaction from a Portlet.
2. Portlet invokes business service component (Coarse grained Stateless Session Bean) by passing XML document.
3. Corse grained SLSB process the incoming XML and invoke local session beans by passing relevant Document objects built by using service API.
4. Based on Incoming Message, message splits and placed on multiple destinations (Linked by Message Queues) hosted on Enterprise Service Bus (ESB).
5. A Message driven bean listens to the incoming request at Queue and invokes external services/Web services
6. Response xml is built and placed Response Queue in ESB by invoking business service API.
6. A MDB listening to the Response Queue will process outgoing messages which needs to be routed to original request invoker.
The Messages are linked with correlation ID and request and response are tied by some rules and business logic.
The design problem I am facing now is, how do my client waits till response comes from response queue as application need to give response to the client in synchronous manner.
The other issue is some of the incoming requests need to be executed (placing in queue) in orderly fashion and run in a transaction. (Which I am trying to process them as command Lists in prototype using Message sets and flows in MQ, but is there any implications if try to push this logic to J2EE container)
Thanks,
Madhu Palutla

I think that you need not worry about the client waiting for the response..since this is a simple request response cycle and is synchronous...thus the invoker need to wait for the response anyway.
Secondly, I hope that you would definitely carry the points 4,5, and 6(the actual 6
) in a transaction, the option to choose the programmatic or declarative always remains on you.

High Availability architecture design know-how in 9.3.1

Guys,
Is there any toolkit and know-how how to design high avaialbility architecture (clustering) for system 9.3.1 and particularly HFM.
I believe it could be quite different than in 11th version.
Any input most appreciated
Regards,
Rafal

Hi,
Here is how to create users in Shared Services :- http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_cas_help/crtuser.htm
The rest of the information for Shared Services is in :- http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/html_cas_help/frameset.htm?apc.html
Cheers
John
http://john-goodwin.blogspot.com/

How to design the Architecture

Dear all,
I am having doubt in designing the server architecture. Basically we have a server grade Machine A1 and A2. The information about the A2 is not available with the A1(which we will be using for connect to server socket opened in A2 and communicate from A1) coz...of some security reason.
But the task is i should able to connect the A1 server from A2 server whenever some file is fells into the A1 server and immeidately it has to be transfer to A2 server.What could be the Architecture, java Technology solutions should be build for this. and Basically the communication should be in TCP/IP.
Where i can get further related Documentation and help.
If any body could help me out to solve the above issue ii may be greatly thankful to them ...
Thanks and Regards
jolly

Occam's Razor = "All things being equal the simplest solution is generally the best one."
Scenario:
1. A file appears in a location on SVR0.
2. SVR0 has to detect the presence of the file and know that it has to act on it.
3. SVR0 having discovered a file and decided to do something has to broadcast the file to SVR1 which may be 5' or 5000 miles away doesn't really matter.
4. Establish a connection from SVR0 to SVR1
5. Pipe the file through to SVR1
6. Close the connection.
Question, what kind of file are we talking about? Text, XML, what?
Some topics for you to investigate
1. Directory / File sniffers (Programs to watch for the presence of something in a locatio.
2. Socket connections over TCP
3. File / Stream xfer over TCP
4. Threading and Thread Safety
5. Security for connections of TCP
That should get you going. Good luck.

Is MVC a architecture or Design Pattern?.

Hi,
It may be simple question,but i need clarification on this.
Thanks in Advance.

Model View Controller is an object-oriented design pattern.
Some individuals may choose to use it (questionably) to describe a piece of a software architecture. In this case they are using the design pattern to describe only an element of an architecture.
MVC outlines how objects will communicate in a three-tier system consisting of a business model and a presentation layer.
MVC does not describe hardware configuration, load balancing, clustering, firewalls, routers, security constraints, resource pooling, and other critical details of a software architecture.
A software architecture design may include and/or use the MVC design pattern to indicate how the technical design of the application should be designed. Here the decision to use MVC is part of the architectural design. It is one specification of the architecture design. There are many other elements of a software architecture design that have nothing to do with MVC.
MVC by itself is a simple object-oriented design pattern. It cannot be used to describe and/or design a software architecture.

Designing Cisco Netflow Architecture ?

Similar Messages

Maybe you are looking for