The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes the Cisco NX-OS system management commands that begin with the letter I.
To enable Intelligent CAM (iCAM) monitoring of ternary content addressable memory (TCAM) entries, use the icam monitor entries command. To disable the iCAM monitoring of TCAM entries, use the no form of this command.
icam monitor entries { acl module module inst instance | multicast module module }
no icam monitor entries { acl module module inst instance | multicast module module }
Specifies the module number. The range is from 1–18 for an 18-slot chassis, and from 1–9 for a 9-slot chassis. |
|
Specifies the ASIC or forwarding engine instance number. The range is from 0–11. |
|
iCAM monitoring of TCAM entries is not enabled. The historical traffic analytics and predictive analytics cannot be obtained for TCAM entries.
|
|
To use the icam monitor entries command, you must enable the iCAM feature using the feature icam command.
This example shows how to enable iCAM monitoring on TCAM entries and multicast entries:
This example shows how to disable iCAM monitoring on TCAM entries and multicast entries:
To configure the Intelligent CAM (iCAM) monitor interval and the number of intervals in an iCAM monitor history, use the icam monitor interval command. To return the monitor interval and the number of intervals to their default values, use the no form of this command.
icam monitor interval interval-hours num_intervals num_intervals
no icam monitor interval interval-hours num_intervals num_intervals
The iCAM feature uses the default values of the monitor interval and the number of intervals while monitoring the TCAM entries and resources to obtain traffic analytics.
|
|
To use the icam monitor interval command, you must enable the iCAM feature using the feature icam command.
This example shows how to configure the iCAM monitoring interval and the number of intervals:
This example shows how to reset the iCAM monitoring interval and the number of intervals:
To enable Intelligent CAM (iCAM) monitoring on ternary content addressable memory (TCAM) resources, use the icam monitor resource command. To disable iCAM monitoring on TCAM resources, use the no form of this command.
icam monitor resource { acl_tcam | fib_tcam } module module inst instance
no icam monitor resource { acl_tcam | fib_tcam } module module inst instance
iCAM monitoring of TCAM resources are not enabled. The historical traffic analytics and predictive analytics cannot be obtained for TCAM resources.
|
|
To use the icam monitor resource command, you must enable the iCAM feature using the feature icam command.
This example shows how to enable iCAM monitoring on ACL TCAM and FIB TCAM resources:
This example shows how to disable iCAM monitoring on ACL TCAM and FIB TCAM resources:
To configure an IP access-list, use the ip access-list command.
ip access-list [ acl_name | match-local-traffic]
(Optional) Enables access-list matching for locally generated traffic. |
|
|
This example shows how to configure an IP access list:
|
|
---|---|
Applies an access control group to an Encapsulated Remote Switched Port Analyzer (ERSPAN) source session. |
To configure the differentiated devices code point (DSCP) value of the packets in the Encapsulated Remote Switched Port Analyzer (ERSPAN) traffic, use the ip dscp command.
Value of the DSCP of the packets in the ERSPAN traffic. The range is from 0 to 63. |
network-admin
network-operator
|
|
This example shows how to configure the DSCP value of the packets in the ESRSPAN traffic:
To enable a Flexible NetFlow flow monitor for traffic that the router is receiving or forwarding, use the ip flow monitor command. To disable a Flexible NetFlow flow monitor, use the no form of this command.
ip flow monitor monitor-name { input | output } [ sampler sampler-name ]
|
|
---|---|
You must have already created a flow monitor by using the flow monitor command before you can apply the flow monitor to an interface with the ip flow monitor command to enable traffic monitoring with Flexible NetFlow.
You must have already created a sampler by using the sampler command before you can enable a flow sampler for this flow monitor with the ip flow monitor command.
When adding a sampler to a flow monitor, only packets that are selected by the named sampler are entered into the cache to form flows. Each use of a sampler results in separate statistics being stored for that usage.
You cannot add a sampler to a flow monitor after the flow monitor has been enabled on an interface. You must remove the flow monitor from the interface before you enable the same flow monitor with a sampler. See the “Examples” section for more information.
Note The statistics for each flow needs to be scaled to give the expected true usage. For example, if you are using a 1 in 10 sampler, you must multiply the packet and byte counters by 10.
This example shows how to enable a flow monitor for monitoring input traffic:
Note ● VLAN configuration mode enables you to configure VLANs independently of their creation, which is required for VTP client support.
This example shows how to enable a flow monitor for monitoring output traffic:
This example shows how to enable the same flow monitor on the same interface for monitoring input and output traffic:
This example shows how to enable two different flow monitors on the same interface for monitoring input and output traffic:
This example shows how to enable the same flow monitor on two different interfaces for monitoring input and output traffic:
This example shows how to enable two different flow monitors on two different interfaces for monitoring input and output traffic:
This example shows how to enable a flow monitor for monitoring input traffic with a sampler to limit the input packets that are sampled:
This example shows how to enable a flow monitor for monitoring output traffic with a sampler to limit the output packets that are sampled:
This example shows how to enable two different flow monitors for monitoring input and output traffic with a sampler on the flow monitor that is monitoring input traffic to limit the input packets that are sampled:
This example shows how to enable two different flow monitors for monitoring input and output traffic with a sampler on the flow monitor that is monitoring output traffic to limit the output packets that are sampled:
This example shows what happens when you try to add a sampler to a flow monitor that has already been enabled on an interface without a sampler:
This example shows how to remove the flow monitor from the interface so that it can be enabled with the sampler:
This example shows how to remove a sampler from a flow monitor on an interface by entering the flow monitor command again without the sampler sampler-name keyword and argument:
This example shows how to remove the flow monitor that was enabled with a sampler from the interface so that it can be enabled without the sampler:
|
|
---|---|
To configure source interface feature for TFTP client, use the ip tftp source-interface command. To disable this feature, use the no form of the command.
ip tftp source-interface ethernet slot/chassis number | loopback virtual interface number
no ip tftp source-interface ethernet slot/chassis number | loopback virtual interface number
Specifies the slot or chassis number. The range is from 1 to 253. |
|
Specifies the virtual interface number. The range is from 0 to 1023. |
|
|
This example shows how to configure the ethernet IEEE 802.3z:
This example shows how to configure the loopback interface:
|
|
---|---|
To configure the IP time-to-live (TTL) value of the Encapsulated Remote Switched Port Analyzer (ERSPAN) traffic, use the ip ttl command.
Value of the IP TTL of the ERSPAN traffic. The range is from 1 to 255. |
config-erspan-src and config-erspan-dst
network-admin
network-operator
|
|
This example shows how to configure the IP TTL value of the ESRSPAN source: