Mailing List Archive

[nsp] netflow on GSR
Running 12.0(17)S on a 120012.

Netflow isn't sending traffic at the rate I'd expect it to (not at the same
rate as my other 7500s). I suspect there's some knob I forgot to turn but
can't find it.

Config looks like:

interface GigabitEthernet2/1
ip address blah
no ip directed-broadcast
no ip proxy-arp
ip route-cache flow
negotiation auto


ip flow-export source Loopback0
ip flow-export version 5 origin-as
ip flow-export destination blah blah


Any help would be great - thanks.

- mz


--
matthew zeier | "In mathematics you don't understand
InteleNet Communications, Inc. | things. You just get used to them."
(949) 784-7904 | - John von Newmann
Re: [nsp] netflow on GSR [ In reply to ]
On Mon, 26 Aug 2002, matthew zeier wrote:

> Running 12.0(17)S on a 120012.
>
> Netflow isn't sending traffic at the rate I'd expect it to (not at the same
> rate as my other 7500s). I suspect there's some knob I forgot to turn but
> can't find it.
>
> Config looks like:
>
> interface GigabitEthernet2/1

Configure sampling. See:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120limit/120s/120s11/12s_sanf.htm

Bradley
Re: [nsp] netflow on GSR [ In reply to ]
On Mon, Aug 26, 2002 at 04:05:06PM -0700, matthew zeier wrote:
> Running 12.0(17)S on a 120012.
>
> Netflow isn't sending traffic at the rate I'd expect it to (not at the same
> rate as my other 7500s). I suspect there's some knob I forgot to turn but
> can't find it.
>
> Config looks like:
>
> interface GigabitEthernet2/1
> ip address blah
> no ip directed-broadcast
> no ip proxy-arp
> ip route-cache flow

ip route-cache flow sampled

> negotiation auto
>
>
> ip flow-export source Loopback0
> ip flow-export version 5 origin-as
> ip flow-export destination blah blah

ip flow-sampling-mode packet-interval 10

SY,
--
CCNP, CCDP (R&S) Dmitri E. Kalintsev
CDPlayer@irc Network Architect @ connect.com.au
dek @ connect.com.au phone: +61 3 9674 3913 fax: 9251 3666
http://-UNAVAIL- UIN:7150410 cell: +61 414 821 382
Re: [nsp] netflow on GSR [ In reply to ]
Thanks - I enabled that. Unfortunately, now I'm getting:

Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
Netflow ucode is not enabled.
----- Original Message -----
From: "Bradley Dunn" <bradley@dunn.org>
To: "matthew zeier" <mrz@intelenet.net>
Cc: <cisco-nsp@puck.nether.net>
Sent: Monday, August 26, 2002 5:18 PM
Subject: Re: [nsp] netflow on GSR


> On Mon, 26 Aug 2002, matthew zeier wrote:
>
> > Running 12.0(17)S on a 120012.
> >
> > Netflow isn't sending traffic at the rate I'd expect it to (not at the
same
> > rate as my other 7500s). I suspect there's some knob I forgot to turn
but
> > can't find it.
> >
> > Config looks like:
> >
> > interface GigabitEthernet2/1
>
> Configure sampling. See:
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120
limit/120s/120s11/12s_sanf.htm
>
> Bradley
>
>
Re: [nsp] netflow on GSR [ In reply to ]
(sorry - outlook errors)

I enabled sampling and am now seeing:

Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
Netflow ucode is not enabled.

Is there a work-around for the input ACL? I have an inbound ACL on my WAN
interfaces (simple ip access-list).

- mz


----- Original Message -----
From: "Bradley Dunn" <bradley@dunn.org>
To: "matthew zeier" <mrz@intelenet.net>
Cc: <cisco-nsp@puck.nether.net>
Sent: Monday, August 26, 2002 5:18 PM
Subject: Re: [nsp] netflow on GSR


> On Mon, 26 Aug 2002, matthew zeier wrote:
>
> > Running 12.0(17)S on a 120012.
> >
> > Netflow isn't sending traffic at the rate I'd expect it to (not at the
same
> > rate as my other 7500s). I suspect there's some knob I forgot to turn
but
> > can't find it.
> >
> > Config looks like:
> >
> > interface GigabitEthernet2/1
>
> Configure sampling. See:
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120
limit/120s/120s11/12s_sanf.htm
>
> Bradley
>
>
Re: [nsp] netflow on GSR [ In reply to ]
On Mon, 26 Aug 2002, matthew zeier wrote:

> Thanks - I enabled that. Unfortunately, now I'm getting:
>
> Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
> PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
> Netflow ucode is not enabled.

You probably need to upgrade your IOS to 12.0(21)S or newer. See:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/relnote/7000fam/rn120s.htm#xtocid147

Bradley
Re: [nsp] netflow on GSR [ In reply to ]
On Mon, 26 Aug 2002, matthew zeier wrote:

>
> (sorry - outlook errors)
>
> I enabled sampling and am now seeing:
>
> Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
> PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
> Netflow ucode is not enabled.
>
> Is there a work-around for the input ACL? I have an inbound ACL on my WAN
> interfaces (simple ip access-list).

Matthew,

I had exactly the same problem with 12.0(19)S2. It didn't happen anymore
after upgrading.

Good luck,
Antoine.

--
Antoine Versini
IP Networks Project Manager / T-Online France - Club-Internet
Re: [nsp] netflow on GSR [ In reply to ]
Cisco has a good document which explains the difference between the line
card engine types:
http://www.cisco.com/warp/public/63/arch_12000_lcdesign.html


On Mon, Aug 26, 2002 at 11:57:49PM -0700, Bradley Dunn wrote:
> On Mon, 26 Aug 2002, matthew zeier wrote:
>
> > Thanks - I enabled that. Unfortunately, now I'm getting:
> >
> > Aug 26 22:36:46 border3.irv.intelenet.net 6363: SLOT 2:Aug 26 22:36:44.978
> > PDT: %LC-6-PSALOWPRIUCODE: Currently using PSA Input ACL ucode; PSA Sampled
> > Netflow ucode is not enabled.
>
> You probably need to upgrade your IOS to 12.0(21)S or newer. See:
> http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/relnote/7000fam/rn120s.htm#xtocid147
>
> Bradley
>
> _______________________________________________
> cisco-nsp mailing list real_name)s@puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

--
=========================================================================
Clinton Work clinton@scripty.com
Calgary, Alberta