Cisco NM-NAM= Datasheet download pdf (Page 7)

Network Analysis Module (NM-NAM)

Information About the Network Analysis Module (NM-NAM)

Cisco IOS Release: Multiple releases (see the Feature History Table)

External NAM Interface for Management Traffic—How to Assign IP Addresses

If you select the external NAM interface to handle management traffic:

• For the Analysis-Module interface (in Cisco IOS CLI), we recommend that you use the IP

unnumbered interface configuration to borrow the IP address of another router interface. The subnet

does not need to be routable.

• For the NAM system (in NAM CLI), assign an IP address from the subnet that is connected to the

external NAM interface.

Monitored Traffic—Use One or Both of the NM-NAM Interfaces

You can use either or both the internal and external NAM interfaces for monitoring traffic:

• Internal NAM Interface—Monitor LAN and WAN Traffic, page 7

• External NAM Interface—Monitor LAN Traffic, page 7

The same interface can be used for both management traffic and monitored traffic simultaneously.

Internal NAM Interface—Monitor LAN and WAN Traffic

When you monitor traffic through the internal NAM interface, you must enable NAM packet monitoring

on each router interface that you want to monitor. NAM packet monitoring uses Cisco Express

Forwarding (CEF) to send a copy of each packet that is received or sent out of the router interface to the

NAM.

Note Some restrictions apply when monitoring traffic through the internal NAM interface. See the “Traffic

Monitoring Restrictions for the Internal NAM Interface” section on page 2.

Monitoring traffic through the internal NAM interface enables the NAM to see any encrypted traffic after

it has already been decrypted by the router.

Note Traffic sent through the internal NAM interface—and the router’s Analysis-Module interface—uses

router resources such as CPU, SDRAM bandwidth, and backplane PCI bandwidth. Therefore, we

recommend that you use the internal NAM interface to monitor WAN interfaces, and use the external

NAM interface to monitor LAN interfaces.

External NAM Interface—Monitor LAN Traffic

Monitoring traffic through the external NAM interface does not impact router resources. Therefore, we

recommend that you use the external NAM interface to monitor LAN traffic.

To monitor ports on Ethernet switching cards or modules (NM-16ESW-x, NMD-36ESW-x,

HWIC-4ESW, or HWIC-D-9ESW), configure a Switched Port Analyzer (SPAN) session whose

destination is the Ethernet switch port that connects to the external NAM interface. For more information

about configuring SPAN for these cards and modules, refer to the following documents:

• 16- and 36-Port Ethernet Switch Module for Cisco 2600 Series, Cisco 3600 Series, and Cisco 3700

Series, Cisco IOS feature module

• Cisco HWIC-4ESW and HWIC-D-9ESW EtherSwitch Interface Cards, Cisco IOS feature module

1 2 3 4 5 6 7 8 9 10 11 12 ... 75 76

No comments

Cisco NM-NAM= Datasheet Page 7