Cisco Network Analysis Module 6000 Operating and maintenance instructions

Corporate Headquarters:
Copyright © 2001–2002. Cisco Systems, Inc. All rights reserved.
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
Catalyst 6000 Family Network Analysis Module
Installation and Configuration Note
WS-X6380-NAM
This publication describes how to install the Catalyst 6000 family Network Analysis Module (NAM) and
how to configure the NAM using the Catalyst command-line interface (CLI), the NAM Traffic Analyzer
application, or both. See the “Related Documentation” section on page 73 for more information about
software configuration for the switch.
Note For translations of the warnings in this publication, see the “Safety Overview” section on page 6 and
refer to the Regulatory Compliance and Safety Information for the Catalyst 6000 Family Switches.
Contents
This publication consists of these sections:
•Overview, page 2
•Safety Overview, page 6
•Software Requirements, page 8
•Hardware Requirements, page 9
•Required Tools, page 9
•Installing and Removing the NAM, page 9
•Configuring the NAM, page 16
•Administering the NAM, page 38
•Troubleshooting the NAM, page 59
•Supported RMON and RMON2 MIB Objects, page 64
•GNU General Public License, page 68
•FCC Class B Compliance, page 72

2
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Overview
•Related Documentation, page 73
•Obtaining Documentation, page 73
•Obtaining Technical Assistance, page 74
Overview
This section describes the Catalyst 6000 family NAM, how it operates, and how to manage it, and
includes these sections:
•Understanding How the NAM Works, page 2
•Managing the NAM, page 3
•New NAM Features, page 3
•Front Panel Description, page 4
•Specifications, page 6
Understanding How the NAM Works
The NAM monitors and analyzes network traffic for the Catalyst 6000 family switches using
remote monitoring (RMON), RMON extensions for switched networks (SMON), and other management
information bases (MIBs). The NAM supports the following RMON groups:
•RMON groups defined in RFC 1757
•RMON2 groups defined in RFC 2021
In addition to extensive MIB support, the NAM also can monitor individual Ethernet VLANs, which
allows it to serve as an extension to the basic RMON support provided by the Catalyst 6000 family
supervisor engine.
You can use TrafficDirector, or any other IETF-compliant RMON application, to access link, host,
protocol, and response-time statistics for capacity planning, departmental accounting, and real-time
application protocol monitoring. You also can use filters and capture buffers to troubleshoot the network.
The NAM can analyze Ethernet VLAN traffic from one or both of the following sources:
•Ethernet, Fast Ethernet, Gigabit Ethernet, trunk port, or Fast EtherChannel SPAN or RSPAN source
port
For more information about SPAN and RSPAN, refer to the “Configuring SPAN and RSPAN”
chapter in the Catalyst 6000 Family Software Configuration Guide.
Note Cisco IOS software currently does not support RSPAN.
•Netflow Data Export (NDE)
For more information about NDE, refer to the Catalyst 6000 Family Software Configuration Guide.
The NAM is managed and controlled from either the embedded web-based NAM Traffic Analyzer
application (directing a web browser at the NAM) or a Simple Network Management Protocol (SNMP)
management application, such as those bundled with CiscoWorks2000, or both.

3
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Overview
Managing the NAM
The NAM Traffic Analyzer application provides access to the NAM data and voice traffic management
and monitoring features through a web browser. To use the NAM Traffic Analyzer application, you first
need to do some basic configuration tasks on the NAM using the CLI. You then can start the NAM Traffic
Analyzer application with a single command. Refer to the User Guide for the Catalyst 6000 Network
Analysis Module Traffic Analyzer for more information about using the NAM Traffic Analyzer
application.
With NAM Traffic Analyzer, you can do the following tasks:
•Configure SPAN resources
•Configure collections
•Monitor statistics
•Capture and decode packets
•Set and view alarms
For added security, you can use both the CLI (using the ip http secure command) and the NAM Traffic
Analyzer application to configure the NAM to use a remote TACACS+ server. For information about
configuring the TACACS+ server remote database, refer to the User Guide for the Catalyst 6000
Network Analysis Module NAM Traffic Analyzer. A TACACS+ server can be used for authentication and
authorization for your web-based users. You also can use a local database on the NAM for security.
You also can manage the NAM using an SNMP management application such as the Cisco
TrafficDirector real-time network management application or NetScout nGenius Real-Time Monitor
(RTM). To use RMON and SNMP agent support, you configure the NAM using the CLI.
Refer to the following URL for more information about using RTM:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/fam_mod/rel2_1_2/ol_2428.htm
For more information about TrafficDirector and RTM, refer to the CiscoWorks2000 documentation.
For more information about the NAM Traffic Analyzer application, refer to the User Guide for the
Catalyst 6000 Network Analysis Module Traffic Analyzer.
If you have a NAM that is already configured and running in the switch, and are familiar with the NAM,
you can begin using the NAM Traffic Analyzer application by entering the ip http server enable CLI
command, then starting NAM Traffic Analyzer in your browser.
New NAM Features
These new features are included in the NAM:
•Catalyst 6000 NAM Traffic Analyzer
The NAM software release 2.1 includes the embedded NAM Traffic Analyzer application for
monitoring and troubleshooting the availability and health of your network. The NAM Traffic
Analyzer application provides browser-based access to the NAM RMON1, RMON2, SMON,
DSMON, and voice monitoring features.
For information about enabling and using the NAM Traffic Analyzer application, see the application
online help or see the PDF version of User Guide for the Catalyst 6000 Network Analysis Module
Traffic Analyzer in the online help.

4
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Overview
•The licensed Application Response Time (ART) MIB, which is used to determine the source of the
slowdowns in application performance. The ART MIB measures the response time on the network
at the transport layer.
Note You must purchase an ART MIB license from Cisco Systems before enabling and using
the ART MIB feature.
•The licensed voice-monitoring application.
Note You must purchase a separate software license to enable voice collection on the NAM.
•Both Media Gateway Control Protocol (MGCP) and Session Initiation Protocol (SIP) voice
protocols are now supported.
•Signalling Connection Control Part (SCCP) and H.323 voice protocols are now supported.
•The trap destination table is available when you enter the show snmp CLI command.
Note Cisco IOS does not support the show snmp CLI command.
•You can upgrade the maintenance image while the application is running.
Front Panel Description
The NAM front panel (see Figure 1) includes a STATUS LED, hard drive LED, SHUTDOWN button,
and PCMCIA slot.
Figure 1 Network Analysis Module
STATUS LED
The STATUS LED indicates the operating states of the NAM. Table 1 describes the LED operation.
NTWK ANALYSIS HDL
HD
SHUTDOWN
For Vendor Use Only
WS-X6380-NAM
STATUS
PCMCIA
SLOT
1
0
EJECT
33089
STATUS LED PCMCIA slot
SHUTDOWN button Hard drive
(HD) LED
Table 1 STATUS LED Description
Color Description
Green All diagnostic tests pass. The NAM is operational.
Red A diagnostic other than an individual port test failed.

5
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Overview
SHUTDOWN Button
Caution Do not remove the NAM from the switch until the NAM has shut down completely and the STATUS
LED is orange. You can damage the NAM if you remove it from the switch before it completely shuts
down.
To avoid corrupting the NAM hard disk, you must correctly shut down the NAM before you remove it
from the chassis or disconnect the power. This shutdown procedure is normally initiated by commands
entered at the supervisor engine CLI prompt or the NAM CLI prompt.
If the NAM fails to respond to these commands properly, you must use the SHUTDOWN button on the
front panel to initiate the shutdown procedure.
To push the button, use a small pointed object (such as a paper clip).
The shutdown procedure may require several minutes. The STATUS LED turns off when the NAM shuts
down.
Hard Drive Activity LED
The hard drive (HD) activity LED is lit when the hard drive is in use.
PCMCIA Slot
The PCMCIA slot provides access for up to two standard PCMCIA cards (now known as PC cards) and
is reserved for future use.
Orange Indicates one of three conditions:
•The NAM is running through its boot and self-test diagnostic sequence.
•The NAM is disabled.
•The NAM is in the shutdown state.
Off The NAM power is off.
Table 1 STATUS LED Description (continued)
Color Description

6
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Safety Overview
Specifications
Table 2 describes the specifications for the NAM.
Safety Overview
Safety warnings appear throughout this document in procedures that may harm you if performed
incorrectly.
For additional safety information, refer to documents listed in the “Related Documentation” section on
page 73.
Warning This warning symbol means danger. You are in a situation that could cause bodily injury.
Before you work on any equipment, be aware of the hazards involved with electrical
circuitry and be familiar with standard practices for preventing accidents. To see
translations of the warnings that appear in this publication, refer to the Regulatory
Compliance and Safety Information document that accompanied this device.
Warning WaarschuwingDit waarschuwingssymbool betekent gevaar. U verkeert in een situatie
die lichamelijk letsel kan veroorzaken. Voordat u aan enige apparatuur gaat werken,
dient u zich bewust te zijn van de bij elektrische schakelingen betrokken risico's en
dient u op de hoogte te zijn van standaard maatregelen om ongelukken te voorkomen.
Voor vertalingen van de waarschuwingen die in deze publicatie verschijnen, kunt u het
document Regulatory Compliance and Safety Information (Informatie over naleving van
veiligheids- en andere voorschriften) raadplegen dat bij dit toestel is ingesloten.
Warning VaroitusTämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa
ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää
sähkökytkentöihin liittyvistä vaaroista ja tavanomaisista onnettomuuksien
ehkäisykeinoista. Tässä julkaisussa esiintyvien varoitusten käännökset löydät laitteen
mukana olevasta Regulatory Compliance and Safety Information -kirjasesta (määräysten
noudattaminen ja tietoa turvallisuudesta).
Table 2 Specifications
Specification Description
Dimensions (H x W x D) 1.18 x 15.51 x 16.34 in. (30 x 394 x 415 mm)
Weight Minimum: 3 lb (1.36 kg)
Maximum: 5 lb (2.27 kg)
Environmental conditions:
Operating temperature
Nonoperating temperature
Humidity
32 to 10°F (0 to 40°C)
–40 to 167°F (–40 to 75°C)
10 to 90%, noncondensing

7
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Safety Overview
Warning AttentionCe symbole d'avertissement indique un danger. Vous vous trouvez dans une
situation pouvant causer des blessures ou des dommages corporels. Avant de travailler
sur un équipement, soyez conscient des dangers posés par les circuits électriques et
familiarisez-vous avec les procédures couramment utilisées pour éviter les accidents.
Pour prendre connaissance des traductions d’avertissements figurant dans cette
publication, consultez le document Regulatory Compliance and Safety Information
(Conformité aux règlements et consignes de sécurité) qui accompagne cet appareil.
Warning WarnungDieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die
zu einer Körperverletzung führen könnte. Bevor Sie mit der Arbeit an irgendeinem Gerät
beginnen, seien Sie sich der mit elektrischen Stromkreisen verbundenen Gefahren und
der Standardpraktiken zur Vermeidung von Unfällen bewußt. Übersetzungen der in
dieser Veröffentlichung enthaltenen Warnhinweise finden Sie im Dokument Regulatory
Compliance and Safety Information (Informationen zu behördlichen Vorschriften und
Sicherheit), das zusammen mit diesem Gerät geliefert wurde.
Warning AvvertenzaQuesto simbolo di avvertenza indica un pericolo. La situazione potrebbe
causare infortuni alle persone. Prima di lavorare su qualsiasi apparecchiatura, occorre
conoscere i pericoli relativi ai circuiti elettrici ed essere al corrente delle pratiche
standard per la prevenzione di incidenti. La traduzione delle avvertenze riportate in
questa pubblicazione si trova nel documento Regulatory Compliance and Safety
Information (Conformità alle norme e informazioni sulla sicurezza) che accompagna
questo dispositivo.
Warning AdvarselDette varselsymbolet betyr fare. Du befinner deg i en situasjon som kan føre til
personskade. Før du utfører arbeid på utstyr, må du vare oppmerksom på de
faremomentene som elektriske kretser innebærer, samt gjøre deg kjent med vanlig
praksis når det gjelder å unngå ulykker. Hvis du vil se oversettelser av deadvarslene som
finnes i denne publikasjonen, kan du se i dokumentet Regulatory Compliance and Safety
Information (Overholdelse av forskrifter og sikkerhetsinformasjon) som ble levert med
denne enheten.
Warning AvisoEste símbolo de aviso indica perigo. Encontra-se numa situação que lhe poderá
causar danos físicos. Antes de começar a trabalhar com qualquer equipamento,
familiarize-se com os perigos relacionados com circuitos eléctricos, e com quaisquer
práticas comuns que possam prevenir possíveis acidentes. Para ver as traduções dos
avisos que constam desta publicação, consulte o documento Regulatory Compliance and
Safety Information (Informação de Segurança e Disposições Reguladoras) que
acompanha este dispositivo.

8
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Software Requirements
Warning ¡Advertencia!Este símbolo de aviso significa peligro. Existe riesgo para su integridad
física. Antes de manipular cualquier equipo, considerar los riesgos que entraña la
corriente eléctrica y familiarizarse con los procedimientos estándar de prevención de
accidentes. Para ver una traducción de las advertencias que aparecen en esta
publicación, consultar el documento titulado Regulatory Compliance and Safety
Information (Información sobre seguridad y conformidad con las disposiciones
reglamentarias) que se acompaña con este dispositivo.
Warning Varning!Denna varningssymbol signalerar fara. Du befinner dig i en situation som kan
leda till personskada. Innan du utför arbete på någon utrustning måste du varamedveten
om farorna med elkretsar och känna till vanligt förfarande för att förebygga skador. Se
förklaringar av de varningar som förkommer i denna publikation i dokumentet Regulatory
Compliance and Safety Information (Efterrättelse av föreskrifter och
säkerhetsinformation), vilket medföljer denna anordning.
Warning Only trained and qualified personnel should be allowed to install, replace, or service this
equipment.
Software Requirements
Table 3 lists the NAM software versions supported by Catalyst OS and Cisco IOS software.
Table 3 NAM Software Compatibility
NAM Software Catalyst Software Cisco IOS Software
Application Image Maintenance Image
1.1(1a) 1.1(1a)m or later 5.5(1) to 6.3(1) Not applicable
1.2(1), 1.2(2) 1.2(1a)m 6.1(1d) or later 12.1(8a)EX with
Supervisor Engine 2
with an MSFC 2.
1.2(3) 1.2(1a)m 5.5(1) or later 12.1(8a)EX or later
with Supervisor Engine
2 with an MSFC 2.
12.1(11b)E or later with
a Supervisor Engine 1A
with an MSFC 2, or a
Supervisor Engine 2
with an MSFC 2.
2.1(1a) 1.2(1a)m 6.1(1d) or later Not applicable
2.1(2) 1.2(1a)m 6.1(1d) or later 12.1(11b)E or later with
a Supervisor Engine 1A
with an MSFC 2, or a
Supervisor Engine 2
with an MSFC 2.

9
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Hardware Requirements
Hardware Requirements
For Catalyst OS, any Catalyst 6000 or 6500 series switch with any supervisor module is supported using
Supervisor Engine 1, 1A, or 2. For Cisco IOS, any Catalyst 6000 or 6500 series switch with a Supervisor
Engine 1A (or Supervisor Engine 2) with an MSFC2 if it is running 12.1(11b)E. If the switch is running
the older 12.1(8a)EX, a Supervisor Engine 2 with an MSFC2 is required.
Required Tools
Note Before installing the NAM, you must install the Catalyst 6000 family switch chassis and at least one
supervisor engine. For information on installing the switch chassis, refer to the Catalyst 6000 Family
Installation Guide.
These tools are required to install the NAM in the Catalyst 6000 family switches:
•Flat-blade screwdriver
•Phillips-head screwdriver
•Wrist strap or other grounding device
•Antistatic mat or antistatic foam
Whenever you handle the NAM, always use a wrist strap or other grounding device to prevent
electrostatic discharge (ESD).
Installing and Removing the NAM
Warning During this procedure, wear grounding wrist straps to avoid ESD damage to the card. Do not
directly touch the backplane with your hand or any metal tool, or you could shock yourself.
All Catalyst 6000 family switches support hot swapping, which allows you to install, remove, replace,
and rearrange modules without turning off the system power. For more information on removing the
NAM from a switch, see the “Removing the NAM” section on page 15.
When the system detects that a module has been installed or removed, it automatically runs diagnostic
and discovery routines, acknowledges the presence or absence of the module, and resumes system
operation with no operator intervention.
Installing and using the NAM requires the following:
•Perform the initial installation by placing the NAM in a switch.
•Go to switch CLI, session to the NAM CLI and provide a basic configuration
•Send a data source to the NAM (Netflow data, SPANned ports, VLANs, or etherchannels)
•Configure collection types of you want to monitor (RMON, voice, application response time, and
other collection monitoring as required for your network).
•Configure alarms.
•View monitored statistics, alarms, and use packet capture or decode functionality.

10
Catalyst 6000 Family Network Analysis Module Installation and Configuration Note
78-10406-05
Installing and Removing the NAM
This section describes how to install and verify the operation of the NAM in the Catalyst 6000 family
switches and contains the following sections:
•Slot Assignments, page 10
•Verifying the Installation, page 14
•Removing the NAM, page 15
Slot Assignments
The Catalyst 6006 and 6506 switch chassis have six slots, the Catalyst 6009 and 6509 switch chassis
have nine slots, and the Catalyst 6513 switch chassis has thirteen slots. (See Figure 2.)
Note The Catalyst 6509-NEB switch has vertical slots numbered 1 to 9 from right to left. Install the
modules with the component side facing to the right.
•Slot 1 is reserved for the supervisor engine.
•Slot 2 can contain an additional redundant supervisor engine in case the supervisor engine in slot 1
fails.
•If a redundant supervisor engine is not required, slots 2 through 6 on the 6-slot chassis, (slots 2
through 9 on the 9-slot chassis and slots 2 through 13 on the 13-slot chassis) are available for
switching modules, such as the NAM.
•Install switching-module filler plates, which are blank switching-module carriers, in the empty slots
to maintain consistent airflow through the switch chassis.