Monitoring Connection in Cisco Routers

[aryarahul]

Hi,

I have an MPLS router which is fully utilizing all the bandwidth , is there a command in Cisco Routers to see which ip from LAN segment is generating what traffic ??

Thanks.

[Marvin Rhoads]

There are a couple of ways you can quickly check. On the router itself, you can only "show interface" and look at the input and output traffic rates for the different interfaces.

Probably the most accurate and easy method is to take a few minutes to setup Netflow. Netflow generates records of source and destination IP addresses and ports and ships those records off to an external host ("Netflow collector").

For the the collector, you can use any number of open source or commercial products. They include ntop, Plixer Scrutinizer, SolarWinds Engineer's Toolset, ManageEngine Netfolw Analyzer, etc.

Each of those product's has a fair amount of information on their respective website telling you how to setup the Netflow commands on your router. For instance, here are Plixer's instructions for a Cisco router. (Of course the IOS configuration guides have them too but with a lot more detail than you might need if you're brand new to it.)

[Don Jacob]

I would suggest NetFlow if your router supports it (Most IOS routers do). Here are the commands you need to use:

Interface config mode command:

ip flow ingress                         // Apply this command on all the L3/VLAN interfaces of the device

Global commands:

ip flow-export destination 192.168.9.101 2055 [The IP address of the NetFlow Analyzer server]

ip  flow-export source FastEthernet 0/1   [Interface through which NetFlow  packets are exported. Use an interface with a route to the NetFlow  server]

ip flow-export version 9

ip flow-cache timeout active 1

ip flow-cache timeout inactive 15

snmp-server ifindex persist

As for NetFlow tools, like Marvin said, you can use any of the free open-source ones or even SolarWinds NetFlow, Plixer Scrutinizer, PRTG, etc.

Regards,
Don Thomas Jacob

http://www.solarwinds.com/

NOTE: Please rate posts and close questions if you have found the required information