cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
364
Views
0
Helpful
2
Replies

No upper layer statistics from 6513 NAM via nGenius RTM

greg.kirkness
Level 1
Level 1

Greetings

I have installed RTM from the LMS 2.1 suite. I have added our 6513 switch and NAM probe to the RTM Server. I can see both NAM interfaces if1 and if2 under the Traffic Monitor Probe tab. I can view Data Link Layer statistics on the NAM interface, but no L3 or L4 statistics.

I have spanned several 6513 ports to the NAM Analyser Port in the RTM Server applet.

I have configured the NAM as documented in the Installation and Configuration notes, setting up IP and SNMP.

As the L2 is working, I suspect that the NAM is running correctly. I am unable to get any data captures or upper layer data from the NAM.

Any suggeations as to what I need to do to get L3 and L4 data out of the NAM?

I am running NAM ver 1.1(1a).

Thanks

2 Replies 2

rmushtaq
Level 8
Level 8

1) As a heads up, NAM v1.1(1a) is now obsolete and do not work with CatOS 6.3.x and later. See the Field Notice:

http://www.cisco.com/warp/public/770/fn17562.shtml.

2) NAM v1.1(1a) is also affect by the SNMP Vulnerabilites as listed in the following CCO Security Advisory:

http://www.cisco.com/warp/public/707/cisco-malformed-snmp-msgs-non-ios-pub.shtml. The fix is in 1.2(3) or 2.1(2)

3) If you're using RTM 1.4, make sure that you have the latest patches installed from CCO: http://www.cisco.com/kobayashi/sw-center/cw2000/rtm-planner.shtml

4) Coming back to your original issue. Try the following and see if it helps:

- Log into the NAM, run "config clear" from NAM CLI.

- Reboot the NAM, and wait until the NAM module comes online.

- Set span disable from switch CLI.

- Add the switch back to RTM server.

- Create a span session from RTM server.

- Do snmpwalk for protocolDisControlTable (.1.3.6.1.2.1.16.12.1) from RMON2-MIB, and make sure there are control entries created with active status.

- Then you should be able to launch Network Layer and Application Layer Viewers.

Did you configure the rmon capability ?

Review Cisco Networking for a $25 gift card