Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Ruslan Moldaliev
Stats
Member since
08-15-2013
130
Posts
32
Helpful
1
Solution
07-25-2017
12:21 PM
hi Islam,
thanks for your answer.
unfortunately I don't have opportunity to test this solution now, but anyway thanks, I beleive this will do the trick.
... View more
12-22-2016
04:52 AM
encountered recently the same task - find object by its IP and I found simple and easy way:
#show running-config object network in-line | i x.x.x.x
and one can see name and IP address in one line object network HOST-1 host 10.1.y.y object network HOST-2 host 10.1.y.y object network HOST-3 host 10.1.y.y
no need to use double grep
... View more
Created by
Ruslan Moldaliev
in Wireless and Mobility
in Wireless and Mobility
09-14-2016
08:45 AM
09-14-2016
08:45 AM
uhm, oh, cisco as usual, with those sophisticated concepts and unobvious meanings:).
which version is better for upgrade in regular cases?
... View more
09-14-2016
08:09 AM
I thought so:)
so 121 - MR2 with escalation fix 2? 113 - MR1 and esc. fix 3? and MR number increasing means implementing new features?
... View more
Created by
Ruslan Moldaliev
in Wireless and Mobility
in Wireless and Mobility
09-14-2016
07:35 AM
09-14-2016
07:35 AM
yes, very similair to what I'm looking for, where did you find this information:)?
and if I have 8.0.133.0 - what does this mean?
... View more
09-14-2016
07:16 AM
hi Scott,
sorry for late answer, was a little bit busy.
thanks, close but not that I was looking for.
maybe this information is destined for the partners or not really public, because as I remember there was such explanations: x.y.z.n and x.y - its major and minor version numbers and so on, z - if 100 it's initial release, if 120, than bug fixing, if 133 - it's future adding and so on (it's not exact meaning, I just wanted to give understanding).
something like that.
... View more
Created by
Ruslan Moldaliev
in Wireless and Mobility
in Wireless and Mobility
09-09-2016
07:37 AM
09-09-2016
07:37 AM
hi folks,
could you please help me with the subject? I saw somewhere such document which describes meaning of the each particular number like in IOS versioning but unfortunately can't find it.
thanks in advance!
... View more
Labels:
08-15-2016
06:26 AM
Sergey,
it appears that explicit AS prepend doesn't work like desired. I'm still receiving relatively large volumes (a little bit less than half approximately) of the traffic through prepended ISP, I beleive it somehow related to internal routing policies or peering agreements with the neighbours.
I will try to ask them directly how to configure AS prepend through community I think they had similar cases concerning their size.
... View more
08-03-2016
06:40 AM
hi,
you can try
show flow exporter [yourexporter] statistics
it will show you a little bit more than command in your example. and you must see whether it sending any traffic or no. I had similair issues and this command helped me to solve my issue. also I noted "Flow export v9 is enabled for main cache" in your last command output, maybe it's something with cache?
... View more
08-03-2016
06:15 AM
hi Mark,
thanks for your suggestion.
I somehow managed to solve my issue, I saw a thread about catalyst 6k and their issues, something pinged me and I decided decided to try one more thing:
was:
flow exporter prtg destination x.x.x.x source Port-channel1.y transport udp 9995
became:
flow exporter prtg destination x.x.x.x vrf mgmt source Port-channel1.y transport udp 9995
I was sure before that stating interface which is already in the VRF is enough to use VRF setting, but no it didn't work. I'm posting it to help others because I didn't find this little but important detail in the configuration guides neither examples for IOS-XE.
I have a little bit shorter record list for flows:
flow record PI-2.2 match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port match interface input collect interface output collect flow direction collect timestamp sys-uptime last collect timestamp sys-uptime first collect counter bytes long collect counter packets long collect flow sampler collect transport tcp flags
and this brings another question: which traffic collector do you using? I'm seeing traffic at PRTG, ManageEngine, nfsen but not on Prime Infrastructure 2.2.
thanks in advance
... View more
Created by
Ruslan Moldaliev
in Network Management
in Network Management
08-03-2016
05:07 AM
08-03-2016
05:07 AM
hi folks,
I can't force this router to send NetFlow data.
things I configured:
1. custom records (or used netflow-original)
2. exporters with the destinations, sources and ports.
3. monitor with the exporters and sometimes options.
4. applied this monitor to the interface
I can see cache records about traffic but it doesn't send anything. I tried PI, PRTG, ManageEngine and even nfsen. Finally I managed to see statistics and saw next:
Flow Exporter PI-2.2: Packet send statistics (last cleared 2w3d ago): Successfully sent: 2760 (3785610 bytes) Reason not given: 684966 (943297544 bytes) Client send statistics: Client: Flow Monitor BGP-AS-INT Records added: 18851588 - failed to send: 18851588 Bytes added: 923727812 - failed to send: 923727812
I've heard about ASR1k and their inability to use management interface but I have dedicated port-channel subinterface and VRF for it for separating management traffic. hope someone have some thoughts or advices.
thanks in advance!
... View more
Labels:
08-01-2016
10:56 AM
what if I put subinterface of the port-channel in VRF and can't see any of exported data?
I used records and predefined "netflow-original" I have exporters and monitors, applied to interfaces. I see next output and assume my monitor/exporter are working:
zzz-R4451-zzz(config)#do sh flow monitor BGP-AS-INT cache Cache type: Normal (Platform cache) Cache size: 200000 Current entries: 4500 High Watermark: 6353 Flows added: 261064 Flows aged: 256564 - Inactive timeout ( 10 secs) 256564 IPV4 SRC ADDR IPV4 DST ADDR TRNS SRC PORT TRNS DST PORT INTF INPUT IP TOS IP PROT intf output flow dirn bytes pkts =============== =============== ============= ============= ==================== ====== ======= ==================== ========= ========== ========== 157.55.235.159 x.x.x.x 40022 59845 Po1.571 0x00 17 Po1.9 Output 49 1 x.x.x.x 80.56.162.172 47447 41045 Po1.9 0x00 17 Po1.571 Input 134 1 x.x.x.x 8.8.8.8 25316 53 Po1.9 0x00 17 Po1.571 Input 78 1 x.x.x.x 216.58.209.78 64857 443 Po1.9 0x00 6 Po1.571 Input 2370 6 and so on...
but why I can't see my stuff on PI 2.2 neither manageengine neither just raw data by wireshark?
... View more
07-28-2016
05:48 AM
at least for IOS routers. if I remember correctly when I searched information regarding my question, I spotted similair thing is working in Junos OS and they can actually use 4 byte ASNs in the community statement, however I can't find it right now.
so it goes.
... View more
07-28-2016
05:41 AM
hi Peter,
aha, I see.. and thanks a lot for your detailed explanation. I somehow managed not find the information or anything about longer than 4byte ASNs in "set community". it's a pity that IOS/Cisco doesn't have full support of the extended ASN despite being claimed.
regarding the:
remarks : 64700 : ASN - do not announce to AS ASN remarks : 64709 : ASN - announce to AS ASN
I think it can be valid in case of some weird TE requirements or TE to/from ISP peering neighbours, but it's my and your assumption.
and for this excerpt of community I believe I'm thinking right: if I have one or more AS behind me (or own them) I can prepend either ISP facing AS or different AS to extend AS path and do some TE
remarks : 64701 : ASN - prepend 1x to AS ASN remarks : 64702 : ASN - prepend 2x to AS ASN remarks : 64704 : ASN - prepend 4x to AS ASN remarks : 64706 : ASN - prepend 6x to AS ASN
and using this tool in the route-maps more agile than using regular prepend in "neighbour x.x.x.x" statement. this is common practice in Ukraine to do BGP TE with such strange types of communities.
however in the general you are right, no one knows for sure except ISP.
... View more
07-25-2017
hi, seems like I've dealt with the issue but it was really long ago and
unfortunately I don't rememb...
07-25-2017
hi Islam, thanks for your answer. unfortunately I don't have opportunity
to test this solution now, ...
12-22-2016
encountered recently the same task - find object by its IP and I found
simple and easy way: #show ru...
09-14-2016
uhm, oh, cisco as usual, with those sophisticated concepts and unobvious
meanings:). which version i...
09-14-2016
I thought so:) so 121 - MR2 with escalation fix 2? 113 - MR1 and esc.
fix 3? and MR number increasin...
09-14-2016
yes, very similair to what I'm looking for, where did you find this
information:)? and if I have 8.0...
09-14-2016
hi Scott, sorry for late answer, was a little bit busy. thanks, close
but not that I was looking for...
09-09-2016
hi folks, could you please help me with the subject? I saw somewhere
such document which describes m...
08-15-2016
Sergey, it appears that explicit AS prepend doesn't work like desired.
I'm still receiving relativel...
08-03-2016
hi, you can try show flow exporter [yourexporter] statistics it will
show you a little bit more than...
08-03-2016
hi Mark, thanks for your suggestion. I somehow managed to solve my
issue, I saw a thread about catal...
08-03-2016
hi folks, I can't force this router to send NetFlow data. things I
configured: 1. custom records (or...
08-01-2016
what if I put subinterface of the port-channel in VRF and can't see any
of exported data? I used rec...
Public Statistics
| Date Registered | 08-15-2013 01:02 AM |
| Date Last Visited | 08-18-2017 06:47 PM |
| Total Messages Posted | 130 |
| Total Helpful Votes Received | 32 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 4 | |
| 3 | |
| 5 | |
| 3 | |
| 21 |
.jpg "VIP Advocate"){kind=icon}
.jpg "Hall of Fame Cisco Employee"){kind=icon}
Helpful Votes From
