Mailing List Archive: Cisco: NSP

[nsp] netflow on GSR

Index | Next | Previous | View Threaded

mrz at intelenet

Aug 26, 2002, 4:05 PM

Post #1 of 8 (371 views)
Permalink

[nsp] netflow on GSR

Running 12.0(17)S on a 120012.

Netflow isn't sending traffic at the rate I'd expect it to (not at the same
rate as my other 7500s). I suspect there's some knob I forgot to turn but
can't find it.

Config looks like:

interface GigabitEthernet2/1
ip address blah
no ip directed-broadcast
no ip proxy-arp
ip route-cache flow
negotiation auto

ip flow-export source Loopback0
ip flow-export version 5 origin-as
ip flow-export destination blah blah

Any help would be great - thanks.

- mz

--
matthew zeier | "In mathematics you don't understand
InteleNet Communications, Inc. | things. You just get used to them."
(949) 784-7904 | - John von Newmann

bradley at dunn

Aug 26, 2002, 5:18 PM

Post #2 of 8 (363 views)
Permalink

Re: [nsp] netflow on GSR [In reply to]

On Mon, 26 Aug 2002, matthew zeier wrote:

> Running 12.0(17)S on a 120012.
>
> Netflow isn't sending traffic at the rate I'd expect it to (not at the same
> rate as my other 7500s). I suspect there's some knob I forgot to turn but
> can't find it.
>
> Config looks like:
>
> interface GigabitEthernet2/1

Configure sampling. See:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s11/12s_sanf.htm

Bradley

dek at hades

Aug 26, 2002, 5:19 PM

Post #3 of 8 (363 views)
Permalink

Re: [nsp] netflow on GSR [In reply to]

On Mon, Aug 26, 2002 at 04:05:06PM -0700, matthew zeier wrote:
> Running 12.0(17)S on a 120012.
>
> Netflow isn't sending traffic at the rate I'd expect it to (not at the same
> rate as my other 7500s). I suspect there's some knob I forgot to turn but
> can't find it.
>
> Config looks like:
>
> interface GigabitEthernet2/1
> ip address blah
> no ip directed-broadcast
> no ip proxy-arp
> ip route-cache flow

ip route-cache flow sampled

> negotiation auto
>
>
> ip flow-export source Loopback0
> ip flow-export version 5 origin-as
> ip flow-export destination blah blah

ip flow-sampling-mode packet-interval 10

SY,
--
CCNP, CCDP (R&S) Dmitri E. Kalintsev
CDPlayer [at] ir Network Architect @ connect.com.au
dek @ connect.com.au phone: +61 3 9674 3913 fax: 9251 3666
http://-UNAVAIL- UIN:7150410 cell: +61 414 821 382

mrz at intelenet

Aug 26, 2002, 10:55 PM

Post #4 of 8 (362 views)
Permalink

Re: [nsp] netflow on GSR [In reply to]

Thanks - I enabled that. Unfortunately, now I'm getting:

Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
Netflow ucode is not enabled.
----- Original Message -----
From: "Bradley Dunn" <bradley [at] dunn>
To: "matthew zeier" <mrz [at] intelenet>
Cc: <cisco-nsp [at] puck>
Sent: Monday, August 26, 2002 5:18 PM
Subject: Re: [nsp] netflow on GSR

> On Mon, 26 Aug 2002, matthew zeier wrote:
>
> > Running 12.0(17)S on a 120012.
> >
> > Netflow isn't sending traffic at the rate I'd expect it to (not at the
same
> > rate as my other 7500s). I suspect there's some knob I forgot to turn
but
> > can't find it.
> >
> > Config looks like:
> >
> > interface GigabitEthernet2/1
>
> Configure sampling. See:
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120
limit/120s/120s11/12s_sanf.htm
>
> Bradley
>
>

mrz at intelenet

Aug 26, 2002, 10:57 PM

Post #5 of 8 (379 views)
Permalink

Re: [nsp] netflow on GSR [In reply to]

(sorry - outlook errors)

I enabled sampling and am now seeing:

Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
Netflow ucode is not enabled.

Is there a work-around for the input ACL? I have an inbound ACL on my WAN
interfaces (simple ip access-list).

- mz

----- Original Message -----
From: "Bradley Dunn" <bradley [at] dunn>
To: "matthew zeier" <mrz [at] intelenet>
Cc: <cisco-nsp [at] puck>
Sent: Monday, August 26, 2002 5:18 PM
Subject: Re: [nsp] netflow on GSR

> On Mon, 26 Aug 2002, matthew zeier wrote:
>
> > Running 12.0(17)S on a 120012.
> >
> > Netflow isn't sending traffic at the rate I'd expect it to (not at the
same
> > rate as my other 7500s). I suspect there's some knob I forgot to turn
but
> > can't find it.
> >
> > Config looks like:
> >
> > interface GigabitEthernet2/1
>
> Configure sampling. See:
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120
limit/120s/120s11/12s_sanf.htm
>
> Bradley
>
>

bradley at dunn

Aug 26, 2002, 11:57 PM

Post #6 of 8 (362 views)
Permalink

Re: [nsp] netflow on GSR [In reply to]

On Mon, 26 Aug 2002, matthew zeier wrote:

> Thanks - I enabled that. Unfortunately, now I'm getting:
>
> Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
> PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
> Netflow ucode is not enabled.

You probably need to upgrade your IOS to 12.0(21)S or newer. See:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/relnote/7000fam/rn120s.htm#xtocid147

Bradley

vox at t-online

Aug 27, 2002, 3:20 AM

Post #7 of 8 (371 views)
Permalink

Re: [nsp] netflow on GSR [In reply to]

On Mon, 26 Aug 2002, matthew zeier wrote:

>
> (sorry - outlook errors)
>
> I enabled sampling and am now seeing:
>
> Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
> PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
> Netflow ucode is not enabled.
>
> Is there a work-around for the input ACL? I have an inbound ACL on my WAN
> interfaces (simple ip access-list).

Matthew,

I had exactly the same problem with 12.0(19)S2. It didn't happen anymore
after upgrading.

Good luck,
Antoine.

--
Antoine Versini
IP Networks Project Manager / T-Online France - Club-Internet

work at scripty

Aug 27, 2002, 9:52 AM

Post #8 of 8 (370 views)
Permalink

Re: [nsp] netflow on GSR [In reply to]

Cisco has a good document which explains the difference between the line
card engine types:
http://www.cisco.com/warp/public/63/arch_12000_lcdesign.html

On Mon, Aug 26, 2002 at 11:57:49PM -0700, Bradley Dunn wrote:
> On Mon, 26 Aug 2002, matthew zeier wrote:
>
> > Thanks - I enabled that. Unfortunately, now I'm getting:
> >
> > Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
> > PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
> > Netflow ucode is not enabled.
>
> You probably need to upgrade your IOS to 12.0(21)S or newer. See:
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/relnote/7000fam/rn120s.htm#xtocid147
>
> Bradley
>
> _______________________________________________
> cisco-nsp mailing list real_name)s [at] puck
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

--
=========================================================================
Clinton Work clinton [at] scripty
Calgary, Alberta

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads