IP accounting not working

[jorge.calvo]

Hello,

I have a Cisco 4500 switche connected to a Service Provider router with a GigabitEthernet L3 interface and I am running EIGRP with the SP router.

I enabled IP accounting output-packet on my switch interface but it is not collection any traffic statistics.

Do you know what can cause this? Maybe all the traffic is being switched instead of passing through the RP?

Regards.

[Giuseppe Larosa · Accepted solution]

Hello Jorge,

CEF based multi layer switching can be the answer.

also when enabling ip accounting on a SW based router I see in some newer IOS version a warning message that says that packets processed by MLS will not be accounted.

Depending on your supervisor model and IOS image you can use netflow for accounting.

>> To use the NetFlow feature, you must have the Supervisor Engine V-10GE (the functionality is embedded in the supervisor engine), or the NetFlow Services Card (WS-F4531) and either a Supervisor Engine IV or a Supervisor Engine V.

see

http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst4500/12.2/46sg/configuration/guide/nfswitch.html

or

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/46sg/configuration/guide/nfswitch.html

you can then export data to a a netflow collector server that allows nice aggregations of traffic data.

However, some sup models for C4500 don't support it including the newer 6-E.

Hope to help

Giuseppe

[jorge.calvo]

Giuseppe,

Thanks for your quick reply. The supervisor I have is Sup V-10GE, so this is what I suspected. However the customer wants IP accounting and not Netflow so, there is no solution for this.

Regards.

[Giuseppe Larosa]

Hello Jorge,

thanks for your kind remarks

>> However the customer wants IP accounting and not Netflow

I would explain to the customer what can be done on the device.

Actually netflow can provide much more information then ip accounting and data can be stored to make historical background.

I agree it requires more job and some effort to setup the collector but it is a legitimate solution also for security purposes.

Hope to help

Giuseppe

[jorge.calvo]

Hello,

I tried to explain that to the customer but, he didn't want to use a Netflow collector.

However I knew IP accounting could not work, even more because the traffic to be analized is the Data Center one, that will be migrated to another location so, we would need as much as exact traffic information and possible.

Thanks again for your quick response.