Worldwide [change] |Account |Register |About Cisco
Guest

Hierarchical Navigation

Cisco Network Analysis Module Software

Quick Start Guide for the Catalyst 6500 Series and CISCO 7600 Series Network Analysis Module

Downloads

Table Of Contents

Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module

Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Overview

Package Contents

Software and Hardware System Requirements

Installing the NAM

Setting Up the NAM

Selecting a VLAN for Management (For Cisco IOS Only)

Configuring the NAM Management Network Parameters

Where to Go Next

Related Documentation

Obtaining Documentation

Cisco.com

Documentation DVD

Ordering Documentation

Documentation Feedback

Cisco Product Security Overview

Reporting Security Problems in Cisco Products

Obtaining Technical Assistance

Cisco Technical Support Website

Submitting a Service Request

Definitions of Service Request Severity

Obtaining Additional Publications and Information


Quick Start Guide

Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module

1 Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Overview

The Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module (model numbers WS-SVC-NAM-1 and WS-SVC-NAM-2) is a hardware module, which can be installed in Catalyst 6000 and 6500 Series switches and Cisco 7600 Series routers, that monitors and analyzes network traffic. The NAM Traffic Analyzer is embedded software in the NAM that provides browser-based access to the monitoring features of the NAM. You can use the NAM to troubleshoot and monitor network availability and health.

In this document you will find:

•Package contents, including links for accessing online documentation.

•Hardware and software requirements.

•Installation and configuration procedures for the NAM and Traffic Analyzer.

•Pointers to additional documentation that provides detailed procedures for installing and using the product.

•Information about ordering documentation and contacting Cisco Systems for additional assistance.

Package Contents

•Catalyst 6500 Series and Cisco 7600 Series NAM.

•Installation and Configuration Note for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Release 3.4.

•Copyright Notices for the Network Analysis Module Release 3.4.

2 Software and Hardware System Requirements

This section provides NAM Traffic Analyzer software and hardware requirements:

•Table 1 describes the software requirements for installing and using the NAM Traffic Analyzer.

•Table 2 describes the hardware requirements for installing and using the NAM Traffic Analyzer.

•Table 3 describes the browser requirements for all platforms.

Table 1 Software Requirements 

Module
NAM Application Image
Catalyst OS Software
Cisco IOS Software

WS-SVC-NAM-1
WS-SVC-NAM-2

3.4

•Release 7.3(1) or later with Supervisor Engine 1A or 21

•Release 8.2(1) or later with a WS-SUP720

•Release 12.1(13)E2 or later with Supervisor Engine 2 with an MSFC2

•Release 12.1(19)E1 or later with Supervisor Engine 1A with an MSFC2

•Release 12.2(14)SX1 or later with a WS-SUP720

1 Supervisor 1A with MSFC1 or MSFC2; Supervisor 2 with MSFC2 only.

2 If you are running a 12.1(13)E-based release, Cisco recommends a later 13E release, such as 12.1(13)E11 over 12.1(13)E3.


Table 2 Hardware Requirements 

Module
Catalyst OS Software
Cisco IOS Software

WS-SVC-NAM-1
WS-SVC-NAM-2

•Supervisor Engine 1A or 2

•WS-SUP720

•Supervisor Engine 1A or 2 with an MSFC2

•WS-SUP720


Table 3 Browser Requirements 

Browser
Version
Platform
Java Plug-In Support1

Internet Explorer (recommended)

6.0 (or later)

Windows 2000

•1.3.1_03

•1.4.1_02

Netscape Navigator

7.0 and 7.1.

Windows 2000 and Solaris

•1.4.1_02 (Windows 2000)

•1.4.0_01 (Solaris)

1 Although Traffic Analyzer does not require a Java plug-in, one might be required to use a Java Virtual Machine (JVM). The plug-in versions listed have been tested for browsers that require a plug-in for JVM.


3 Installing the NAM

For information on physically installing the NAM into the switch, see the Installation and Configuration Note for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Release 3.4.

4 Setting Up the NAM

To set up the NAM, follow these steps:

1. Selecting a VLAN for Management (For Cisco IOS Only)

2. Configuring the NAM Management Network Parameters

Selecting a VLAN for Management (For Cisco IOS Only)

Note Devices running Catalyst OS do not need to configure a VLAN as the NAM management port. The port is automatically synchronized to the VLAN assigned to interface sc0 on the Supervisor engine.

To select a VLAN for management, enter the configuration mode for the NAM and enter
the following: 

Switch(config)# analysis module slot_number management-port access-vlan vlan_number 
 
This example shows how to select VLAN 5 for management.

Switch# configure terminal 

Enter configuration commands, one per line. End with CNTL/Z. 

Switch(config)# analysis module 4 management-port access-vlan 5

Switch(config)# exit

Switch#

Configuring the NAM Management Network Parameters

Step 1 Access the NAM CLI by establishing a console session with the NAM.

a. For devices running Cisco IOS enter: 

hostname# session slot module_number processor 1

b. For devices running Catalyst OS enter: 

hostname# session module_number

Step 2 At the login prompt, enter root to log in to the root account.

a. If you have not changed the password from the factory-set default, enter root as the root password.

b. If you are still at the factory set default, enter password root to change the root password.

Step 3 Configure the NAM IP address and subnet mask. 

root@localhost# ip address ip-address subnet-mask

Step 4 Configure the NAM system default gateway address. 

root@localhost# ip gateway default-gateway

Step 5 Set the NAM system domain name. 

root@localhost# ip domain domain-name

Step 6 Set the NAM system host name. 

root@localhost# ip host name

Step 7 Set one or more NAM system name servers. 

root@localhost# ip nameserver ip-address

Note This step is optional but highly recommended. Unexpected delays can occur if a name server is not set.

Step 8 Check the connectivity to the device by pinging an external host or address. 

root@localhost# ping host|ip-address

Note Step 8 is optional.

Step 9 Verify that the device is properly configured. 

root@localhost# show ip

Step 10 If you want to use an external SNMP management application to access the NAM, configure the SNMP MIB system variables. These steps are optional.

a. Configure the SNMP syslocation MIB variable. 

root@localhost# snmp location location-string

b. Set the SNMP sysContact MIB variable. 

root@localhost# snmp contact contact-string

c. Set the SNMP sysName MIB variable. 

root@localhost# snmp name name-string

d. Set the SNMP agent community string parameter password for read-write access. 

root@localhost# snmp community community-string rw

e. Set the SNMP agent community string parameter password for read-only access. 

root@localhost# snmp community community-string ro

Note You can clear the SNMP community string using the snmp delete community community-string command.

f. Verify the SNMP access controls and settings. 

root@localhost# show snmp

Step 11 Enable the NAM Traffic Analyzer application. 

root@localhost# ip http server enable

Step 12 Enter a web username and password.

Step 13 To access Traffic Analyzer, open a web browser and enter the NAM IP address as the URL.

Step 14 Log in with the NAM username and password that you entered in Step 13.

Step 15 When you want to end the NAM console session and return to the Cisco IOS CLI, enter exit.

This example shows how to configure a NAM running Catalyst OS. 

namlab-6k#

namlab-6k#session 9

Trying NAM-9

Connected to NAM-9

Escape character is '^]'.


Cisco Network Analysis Module (WS-SVC-NAM-2)


login: root

Password: 

Last login: wed Feb 18 17:04:40 from joe

Terminal type: vt100


Cisco Network Analysis Module (WS-SVC-NAM-2) Console, 3.4(0.9)

Copyright (c) 1999-2004 by cisco Systems, Inc.


WARNING! Default password has not been changed!

root@localhost.cisco.com# password root

Changing password for user root

New UNIX password: 

Retype new UNIX password: 

passwd: all authentication tokens updated successfully

root@localhost.cisco.com# ip address 172.20.104.103 255.255.255.192

root@localhost.cisco.com# ip gateway 172.20.104.65

root@localhost.cisco.com# ip domain cisco.com

root@localhost.cisco.com# ip host lab-nam

root@lab-nam.cisco.com# ip nameserver 171.69.2.133

root@lab-nam.cisco.com# ping 171.69.2.133

PING 171.69.2.133 (171.69.2.133) from 172.20.104.103 : 56(84) bytes of data.

64 bytes from 171.69.2.133: icmp_seq=0 ttl=247 time=515 usec

64 bytes from 171.69.2.133: icmp_seq=1 ttl=247 time=609 usec

root@lab-nam.cisco.com# show ip

IP address:             172.20.104.103

Subnet mask:            255.255.255.192

IP Broadcast:           172.20.104.127

DNS Name:               lab-nam.cisco.com

Default Gateway:        172.20.104.65

Nameserver(s):          171.69.2.133     

HTTP server:            Disabled

HTTP secure server:     Disabled

HTTP port:              80

HTTP secure port:       443

TACACS+ configured:     No

Telnet:                 Enabled

SSH:                    Disabled

root@lab-nam.cisco.com# ip http server enable

Enabling HTTP server...


No web users are configured.

Please enter a web administrator user name [admin]: 

New password: 

Confirm password: 


User admin added.

Successfully enabled HTTP server.

root@lab-nam.cisco.com# snmp location bldn NAM lab

root@lab-nam.cisco.com# snmp contact sysadmin

root@lab-nam.cisco.com# snmp community public ro

root@lab-nam.cisco.com# snmp community private rw

root@lab-nam.cisco.com# show snmp


SNMP Agent:   lab-nam.cisco.com   172.20.104.103


SNMPv1:  Enabled

SNMPv2C: Enabled

SNMPv3:  Disabled


community   private  write 

community   public   read  



sysDescr         Cisco Network Analysis Module (WS-SVC-NAM-2), Version 3.4(0.9)

Copyright (c) 1999-2004 by cisco Systems, Inc.


sysObjectID      enterprises.9.5.1.3.1.1.2.914

sysContact       sysadmin

sysName          NAM

sysLocation      bldn NAM lab

root@lab-nam.cisco.com#

5 Where to Go Next

After you install the module and perform the necessary post-installation tasks, you are ready to use Traffic Analyzer. For more information, see the following documentation:

•User Guide for the Network Analysis Module Traffic Analyzer Release 3.4

You can access this document:

•Directly from the Traffic Analyzer online help. When the Traffic Analyzer application launches (Step 13 of the "Configuring the NAM Management Network Parameters" section), click the Help text in the upper right-hand corner of the application. The online help will open in a new window.

•In HTML and PDF on Cisco.com:

a. Log into Cisco.com.

b. Select Products & Services > Network Management CiscoWorks > Cisco Network Analysis Module Software > Technical Documentation.

c. Select the appropriate document type from the list, then the document written for this release.

•Network Analysis Module Command Reference Release 3.4

You can access this document in HTML and PDF on Cisco.com:

1. Log into Cisco.com.

2. Select Products & Services >Network Management CiscoWorks > Cisco Network Analysis Module Software > Technical Documentation.

3. Select the appropriate document type from the list, then the document written for this release.

6 Related Documentation

Note Although every effort has been made to validate the accuracy of the information in the printed and electronic documentation, you should also review the documentation on Cisco.com for any updates.

For information about installing, troubleshooting, and using the product, see the sources of information in Table 4:

Table 4 Related Documentation 

To learn
more about...
See this document
In the product package?
On Cisco.com?
In the online help?

The known product bugs (DDTSs)

Release Notes for the Network Analysis Module Software Release 3.4

No

Yes

No

Installing the Catalyst 6500 Series and Cisco 7600 Series NAM

Installation and Configuration Note for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Release 3.4

Yes

Yes

No

Features, tasks, and troubleshooting

•Installation and Configuration Note for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Release 3.4

•User Guide for the Network Analysis Module Traffic Analyzer Release 3.4

•Network Analysis Module Command Reference, 3.4

Yes



No

No

Yes



Yes

Yes

No



Yes


No


7 Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation DVD

Cisco documentation and additional literature are available in a Documentation DVD package, which may have shipped with your product. The Documentation DVD is updated regularly and may be more current than printed documentation. The Documentation DVD package is available as a single unit.

Registered Cisco.com users (Cisco direct customers) can order a Cisco Documentation DVD (product number DOC-DOCDVD=) from the Ordering tool or Cisco Marketplace.

Cisco Ordering tool:

http://www.cisco.com/en/US/partner/ordering/

Cisco Marketplace:

http://www.cisco.com/go/marketplace/

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

•Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Ordering tool:

http://www.cisco.com/en/US/partner/ordering/

•Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 1 800 553-NETS (6387).

8 Documentation Feedback

You can send comments about technical documentation to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

9 Cisco Product Security Overview

Cisco provides a free online Security Vulnerability Policy portal at this URL:

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

From this site, you can perform these tasks:

•Report security vulnerabilities in Cisco products.

•Obtain assistance with security incidents that involve Cisco products.

•Register to receive security information from Cisco.

A current list of security advisories and notices for Cisco products is available at this URL:

http://www.cisco.com/go/psirt

If you prefer to see advisories and notices as they are updated in real time, you can access a Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:

http://www.cisco.com/en/US/products/products_psirt_rss_feed.html

Reporting Security Problems in Cisco Products

Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you might have identified a vulnerability in a Cisco product, contact PSIRT:

•Emergencies — security-alert@cisco.com

•Nonemergencies — psirt@cisco.com

Tip We encourage you to use Pretty Good Privacy (PGP) or a compatible product to encrypt any sensitive information that you send to Cisco. PSIRT can work from encrypted information that is compatible with PGP versions 2.x through 8.x.

Never use a revoked or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one that has the most recent creation date in this public key server list:

http://pgp.mit.edu:11371/pks/lookup?search=psirt%40cisco.com&op=index&exact=on

In an emergency, you can also reach PSIRT by telephone:

•1 877 228-7302

•1 408 525-6532

10 Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, Cisco Technical Support provides 24-hour-a-day, award-winning technical assistance. The Cisco Technical Support Website on Cisco.com features extensive online support resources. In addition, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not hold a valid Cisco service contract, contact your reseller.

Cisco Technical Support Website

The Cisco Technical Support Website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, 365 days a year, at this URL:

http://www.cisco.com/techsupport

Access to all tools on the Cisco Technical Support Website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:

http://tools.cisco.com/RPF/register/register.do

Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting a web or phone request for service. You can access the CPI tool from the Cisco Technical Support Website by clicking the Tools & Resources link under Documentation & Tools. Choose Cisco Product Identification Tool from the Alphabetical Index drop-down list, or click the Cisco Product Identification Tool link under Alerts & RMAs. The CPI tool offers three search options: by product ID or model name; by tree view; or for certain products, by copying and pasting show command output. Search results show an illustration of your product with the serial number label location highlighted. Locate the serial number label on your product and record the information before placing a service call.

Submitting a Service Request

Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco TAC engineer. The TAC Service Request Tool is located at this URL:

http://www.cisco.com/techsupport/servicerequest

For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco TAC engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.

To open a service request by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447

For a complete list of Cisco TAC contacts, go to this URL:

http://www.cisco.com/techsupport/contacts

Definitions of Service Request Severity

To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.

Severity 1 (S1)—Your network is "down," or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.

Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.

Severity 3 (S3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.

Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.

11 Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

•Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Visit Cisco Marketplace, the company store, at this URL:

http://www.cisco.com/go/marketplace/

•Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press at this URL:

http://www.ciscopress.com

•Packet magazine is the Cisco Systems technical user magazine for maximizing Internet and networking investments. Each quarter, Packet delivers coverage of the latest industry trends, technology breakthroughs, and Cisco products and solutions, as well as network deployment and troubleshooting tips, configuration examples, customer case studies, certification and training information, and links to scores of in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/packet

•iQ Magazine is the quarterly publication from Cisco Systems designed to help growing companies learn how they can use technology to increase revenue, streamline their business, and expand services. The publication identifies the challenges facing these companies and the technologies to help solve them, using real-world case studies and business strategies to help readers make sound technology investment decisions. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

•Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/ipj

•World-class networking training is available from Cisco. You can view current offerings at this URL:

http://www.cisco.com/en/US/learning/index.html