IP accounting not working

Answered Question
Sep 21st, 2009
User Badges:
  • Bronze, 100 points or more

Hello,


I have a Cisco 4500 switche connected to a Service Provider router with a GigabitEthernet L3 interface and I am running EIGRP with the SP router.


I enabled IP accounting output-packet on my switch interface but it is not collection any traffic statistics.


Do you know what can cause this? Maybe all the traffic is being switched instead of passing through the RP?


Regards.

Correct Answer by Giuseppe Larosa about 7 years 7 months ago

Hello Jorge,

CEF based multi layer switching can be the answer.

also when enabling ip accounting on a SW based router I see in some newer IOS version a warning message that says that packets processed by MLS will not be accounted.


Depending on your supervisor model and IOS image you can use netflow for accounting.



>> To use the NetFlow feature, you must have the Supervisor Engine V-10GE (the functionality is embedded in the supervisor engine), or the NetFlow Services Card (WS-F4531) and either a Supervisor Engine IV or a Supervisor Engine V.


see


http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst4500/12.2/46sg/configuration/guide/nfswitch.html


or


http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/46sg/configuration/guide/nfswitch.html


you can then export data to a a netflow collector server that allows nice aggregations of traffic data.


However, some sup models for C4500 don't support it including the newer 6-E.


Hope to help

Giuseppe


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Giuseppe Larosa Mon, 09/21/2009 - 10:35
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Jorge,

CEF based multi layer switching can be the answer.

also when enabling ip accounting on a SW based router I see in some newer IOS version a warning message that says that packets processed by MLS will not be accounted.


Depending on your supervisor model and IOS image you can use netflow for accounting.



>> To use the NetFlow feature, you must have the Supervisor Engine V-10GE (the functionality is embedded in the supervisor engine), or the NetFlow Services Card (WS-F4531) and either a Supervisor Engine IV or a Supervisor Engine V.


see


http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst4500/12.2/46sg/configuration/guide/nfswitch.html


or


http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/46sg/configuration/guide/nfswitch.html


you can then export data to a a netflow collector server that allows nice aggregations of traffic data.


However, some sup models for C4500 don't support it including the newer 6-E.


Hope to help

Giuseppe


jorge.calvo Mon, 09/21/2009 - 10:41
User Badges:
  • Bronze, 100 points or more

Giuseppe,


Thanks for your quick reply. The supervisor I have is Sup V-10GE, so this is what I suspected. However the customer wants IP accounting and not Netflow so, there is no solution for this.


Regards.

Giuseppe Larosa Mon, 09/21/2009 - 10:49
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Jorge,

thanks for your kind remarks

>> However the customer wants IP accounting and not Netflow


I would explain to the customer what can be done on the device.

Actually netflow can provide much more information then ip accounting and data can be stored to make historical background.

I agree it requires more job and some effort to setup the collector but it is a legitimate solution also for security purposes.


Hope to help

Giuseppe


jorge.calvo Mon, 09/21/2009 - 11:00
User Badges:
  • Bronze, 100 points or more

Hello,


I tried to explain that to the customer but, he didn't want to use a Netflow collector.


However I knew IP accounting could not work, even more because the traffic to be analized is the Data Center one, that will be migrated to another location so, we would need as much as exact traffic information and possible.


Thanks again for your quick response.

Actions

This Discussion