Netflow export on Cisco 2821

Hello,
a question or more a problem with netflow exports on Cisco 2821's.
I configured netflow export on a Cisco 2821 with IOS Version 12.4(24)T
ip cef
interface FastEthernet0/0/0
description to XXX
ip address XXX
ip flow ingress
ip flow egress
duplex full
speed 10
ip flow-cache timeout active 1
ip flow-export source GigabitEthernet0/0
ip flow-export version 5
ip flow-export destination XXX XXX
The netflow collector shows "only ingoing traffic" on interface FastEthernet0/0/0 and
"only outgoing traffic" on interface GigabitEthernet0/0.
Same problem with an IOS Version 12.4(20)T1 on other Cisco 2821's.
But same configuration on other Cisco 2821's with IOS Version 12.4(11)XJ4 work well.
Any references/suggestions or explanations?

#It's surprising to me that it's even possible to configure both directions on a single interface.
#It's generally not a good idea to configure both directions among interfaces on a single router.
--> It is possible. ;-) I need QoS (DSCP information) for ingoing traffic and
--> and for outgoing traffic of this interface FastEthernet0/0/0.
#How's g0/0 configured "ip flow" wise?
--> There's no netfow configuration on this interface, only on Fa0/0/0.
-->#sh ip flow interface
--> FastEthernet0/0/0
--> ip flow ingress
--> ip flow egress
#Maybe you're seeing "only outgoing traffic" on
#interface GigabitEthernet0/0, because those are incoming traffic through fa0/0/0
#(where IOS ignores the "ip flow egress" part) and flowing out through g0/0?
--> You're right. The outgoing traffic at Gi0/0 is the ingoing traffic at Fa0/0/0.
--> But I don't think thath the configuration is wrong and I think that the
--> "ip flow egress" command on an single interface is not so special.
--> I really looks like that the command "ip flow egress" on interface Fa0/0/0
--> is being ignored. But why?
--> May be I should start an other discussion with a link to this posting in the
--> router forum.

Similar Messages

Cisco 831 no netflow export packets through IPSEC

I have cisco 831 in remote office. Remote office is connected to Central Office through IPSec tunnel. I has configured netflow export from sorce address Lan interface (inside interface) remote office to Server central office. But I did not see netflow packet in central Office at netflow server. May be somebody fixed the problem ?

Check 'ip route-cache flow' cmd enabled on tunnel interface.
also check this bug-id:CSCef28662.
Try this link:
http://www.cisco.com/en/US/tech/tk812/technologies_white_paper09186a008022bde8.shtml#wp1002626

Cisco Prime- Netflow Export Issue

Dear All,
We are observing high bandwidth being utliized between ASR1004 and Cisco Prime 2.1 after enabling "ip netflow exporter". Is there any way to mitigate it..?

Yes - use sampled Netflow which statistically samples the flows instead of trying to send every single one back to Prime Infrastructure.
The IOS-XE configuration guide section on Netflow describes how to set it up.

Cisco 6500 shows less traffic for NetFlow export

I am using a Thrid party NetFlow tool, Enabled NetFlow on the Cisco 6500 as per recommendations and getting only half amout of traffic passing thorugh the interfaces. I have verified with 3 different NetFlow based tools, everything showing the same value. Is there any bug in my Cisco 6500. Any one faced this issue. Attached the output of (show run, show version)
Cheers

Hi Jake,
I have already investigated this, the exporting interval and aging time for flows are set to lower active timeout. Is there any way to see all the flows are beeing captured and exported both on MSFC and PFC.
Cheers

WAAS Netflow Export

Can CIsco WAAS generate / Export netflow ?

Hi All,
Cisco WAAS Flow Monitoring is different from traditional or flexible NetFlow available on Cisco devices and so NetFlow analysis tools cannot process them. All flow analyzers can process NetFlow data exported from devices that have WAE included with them. But that is just NetFlow and not WAAS Flow Monitoring.
From what I have heard, WAAS Flow Monitoring is very specific and these flows can be processed only by NetQoS and you will need NetQoS SuperAgent for this. The NetQoS SuperAgent processes the flows received from WAAS FlowAgent (which again was developed by NetQoS) sitting on the WAE. More details in the below link:
http://www.cisco.com/en/US/docs/nsite/enterprise/wan/wan_optimization/chap04.html#wp1053045
But there are API's available for WAAS monitoring using which any analyzed tools can report on the performance of your WAAS optimization. ManageEngine NetFlow Analyzer supports WAAS reporting using API. More information in the below link:
http://www.manageengine.com/products/netflow/help/add-ons/waas/about-waas.html
For the type of reports available, check the below link:
https://blogs.manageengine.com/netflowanalyzer/2011/07/11/cisco-waas-reporting-in-netflow-analyzer-part-2
Regards,
Don Thomas Jacob
ME NetFlow Analyzer

How much bandwidth netflow export uses

Experts,
I tried searching doc on cisco and even googled for information on how much bandwidth netflow export uses; however I didn't find any convincing article. I also found lancope.com where they estimate the BW required, but still I was not satisfied.
I would really appreciate if someone can guide me with simple yet affective explanation or say rough guide lines to estimate the bandwidth used by netflow exports...
Regards,
Smitesh

yeah this number is so hard to define, because it really is dependent on the flow export timers, active/inactive, how long flows are active or inactive and also very importantly the cache size.
generally netflow aggregators (aka routers) use a cache and start to aggressively age out flows when the cache utilization reaches a certain level.
Also if you have long lived flows and a few of them and a cache size that accomodates it, the export rate is merely defined by the active timer.
If you have a lot of flows, relative smaller cache, you will automatically see more BW util.
If you have a lot of short lived flows, then the inactive timer will come into play here.
to sum it up, a record generally takes 300 bytes (somewhat), if you use v9, then you'll also see template exports.
all in all, netflow export is generally bursty, but very much related to the traffic patterns also.
Since this number is so specific to your scenario, best to do is to set up a qos pmap that matches on your netflow export, and use the qos mib to average the rate on that class to see how it looks like for you.
To pre-estimate something, you'll need at minimum: cache size, number of flows, flow duration (so you can correlate that towards the active vs inactive timers) and the timers itself. That all multiplied against the record size, this just to get a ballpark number.
cheers
xander
xander thuijs CCIE#6775
Principal Engineer ASR9000/XR SW group

I want to upgrade the IOS of my Cisco 2821 from Version 12.4(11) to v 15.1 (XB), but I have CCME v 4.2 (0), is there any problem if I only upgrade the IOS and leave the CCME as it ?

I want to upgrade the IOS of my Cisco 2821 from Version 12.4(11) to v 15.1 (XB), but I have CCME v 4.2 (0), is there any problem if I only upgrade the IOS and leave the CCME as it ?
Thanks

CME is part of the IOS, so you can't upgrade the IOS seperately from CME.
That said, if this is a production environment you should proceed with caution and be prepared to roll back as you may find bugs, etc.
You should also look at release notes and make sure your phone firmware will still work or needs to be upgraded too.
Brandon

Need a tool for flash backup on Cisco 2821 series routers

Hello Folks,
We have around 1200-1500 cisco 2821 series routers on those we are performing the hardware upgrade so we are taking the backup of all the files available in the flash of all the routers, we just want to know is there any trusted tool available to make this task easy to schedule and take the backups.
Please let me know if you know any tool name.
Thanks,
Raja.

Sorry, I don't know any tool that makes a backup of the whole flash...
You could fo it with from ios cli maybe execute it automatically...
To flash:
archive tar /create flash:/backup.tar flash:/
copying directly to ftp should also work:
archive tar /create ftp://test:[email protected]/backup.tar flash:/

How many Voice connections can cisco 2821 support?

Good day.
I have a cisco 2821 with EVM slot, NME-X slot and two HWIC slots. I have 4 port FXOs on the two HWIC slots. The EM-HDA-8FXS module on the EVM slot can handle 8 FXS connections. Please i would like to know if there is an EVM module that can do FXO connections and also how many voice connections can this router handle in total. Can the EM-HDA-8FXS module handle both FXS and FXO connections?
Hope someone can help me out. My deadline has already passed.
Regards,
Obinna.

Hi, already replied to this in the appropriate forum.
Please do not open duplicate threads.

Upgrade Cisco 2821 to IOS 15

Hi everyone,
I am currently going to upgrade the Cisco 2821 IOS to version 15. Do I need to apply any licences for advice ip service after the upgrade. thanks for the help in advance.
Kind Regards,
Lei

ISR G1 doesn't have any "licenses". Just make sure you are upgrading to the same Feature Set as your old IOS.
Read the Release Notes carefully. Make sure you have adequate DRAM and Flash.

Cisco 2821, add 8 FXO

Hi,
I have Cisco 2821, currently we have pRI circuit terminated on it.
We want to add 8 FXO, let me know if it is possible.
Attached sh diag command

It is possible if you have enough dsp resources. You can calculate hardware need with Cisco DSP calculator - http://www.cisco.com/web/applicat/dsprecal/dsp_calc.html

RPS 2300 together with 3750 - 48 PoE and Cisco 2821

Hi,
I'm wondering what kind of power modules to include in RPS 2300 (750 or 1150 Watt) to provide redundant power supply for 1 x Cisco 2821 router (standart power supply) and Catalyst 3750 with PoE 48 ports.
Thanks

I am not qualified to answer your question... I would like to mention to be careful when calculating power for phones, because some of the phones (especially color) will take more power than others. We ended up only being able to support 24-ish phones on a 3750 due to power limitations.

Valcom 2001A single zone paging system with a Cisco 2821 FXS port

I am new at troubleshooting the Valcom paging system with Cisco 2821 router. I recently installed a Valcom 2001A that is connecting to FXS port on the Cisco router. The paging works but the ringing does not stop when the page extension is dialed (you can talk over the ringing). I was told to use the Valcom 9970 to work with the FXS port on my router. Will the V9970 worth with the 2001A or in place of it? Is there anything else I need to know to perfect this install? Thank you!

Put the command 'forward-digits extra ,,,,01' on the outgoing POTS dial-peer. Each comma is one second of delay.

Traffic Shaping on Cisco 2821 router

I have two sites and connected with MPLS links of 2MB with Cisco 2821 routers. Now a requirement came that two sites will have additional server ( one each location - for data replication purpose) and 75% of the bandwidth needs to be allocated to data replication servers on each site and rest of 25% bandwidth will be utilize for both sides normal traffic.
Is there any additional modules to be added on each router to isolate the traffic. Please let me know.
Thanks,

To expand on the information that Collin provided . . .
If you really want to cap the bandwidth to a class of traffic, i.e. truly limit replication to 75%, you can add a policer or shaper to a class, similar to what Collin shows.
e.g.
policy-map RestrictAltiris
class Altiris
bandwidth percent 20
shape average 1500000
However, like Collin, since CBWFQ guarantees bandwidth allocations, you rarely need to cap bandwidth if you, for instance, insure your other traffic gets the other 25% (i.e. 100% less 75% for replication).
e.g.
policy-map RestrictAltiris
class Altiris
bandwidth percent 75
(NB: BTW, there are other rules pertaining to bandwidth reservations, but prior examples, both Collin's and mine, should suffice.)
Also BTW, since you mention MPLS, and since MPLS often allows multisite communication, if there are more than just these two sites that can communicate with these two sites across their 2 Mbps links, other considerations apply for dealing with such a situation.
PS:
Although software based QoS should meet your stated requirements, there are optional modules to provide "WAN optimization", see http://www.cisco.com/en/US/prod/collateral/contnetw/ps5680/ps6870/product_data_sheet0900aecd8058218c.html.
PPS:
BTW, when Collin describes:
". . . but when the link gets congested the router will limit the traffic for this host to 20% of the total interface bandwidth, and all the remaining traffic to 80%.", this might be just a bit misleading since when the link is congested individual classes aren't really limited they are instead guaranteed their bandwidths as a minimum, not precisely the same thing. For example with 20% and 80% guarantees, either class could still obtain unused bandwidth from the other class while the link is congested.
[edit]
This being true, for something like what you describe, I would recommend using the least amount of bandwidth guarantee that data replication needs. Assuming your other traffic, on average, doesn't consume more than 25% of the bandwidth, you might find even providing replication only 1% for a bandwidth guarantee works fine. Why you would want to do this, by lowering the bandwidth guarantee for replication, you allow other traffic to burst. Such bursting capability normally improves any kind of transactional or conversational applications and doesn't (usually) unduly delay replication.

Changing the Compact Flash on Cisco 2821 Call Manager Express

Hello All,
I'm gonna have to swap the compact flash on a Cisco 2821 who is serving as the Call Manager express and the Dialling Router.
What's the best way of approaching this? As far as i know it doesn't have a second slot? And i just can't plug it in and copy everything from 1 flash to another.
Must i copy all of the files on the flash to my tftp or? How can i be sure that everything will be copied to the new flash? I will be creating downtime i suppose? since when i'm copying towards the new flash the router will not properly work with the previous configuration

So i figured out that i can use the archive tar /create command:
To copy the entire flash towards TFTP:
archive tar /create tftp://X.X.X.X/flash.tar flash:
Now i will have to insert the new flash and probably format it first towards the correct file systems. Then i will have to use the next archive command:
archive tar /xtract "Here i am unsure of the syntax, i want to be copying and extracting the tar I backed up from the old flash"
After these steps are complete can i just reboot the router with the new flash card, won't there be any issues, since the startup config is on the NVRAM it will load the config properly, and i haven't seen any boot parameters but they shouldn't pose any issues since i'm not changing the flash slot.
Thanks for your assistance

Netflow export on Cisco 2821

Similar Messages

Maybe you are looking for