Cisco Notepad

Doc CD Navigation

• Cisco IOS Configuration Fundamentals Configuration Guide, Release 12.4
• Part 7: Configuring Basic File Transfer Services
• Configuring Basic File Transfer Services
• Configuring a Router to Use rsh and rcp

12.24 RMON Statistics Collection

• Configure SW1 to collect RMON statistics on packets entering the interface connected to R3.
• Store historical information for the last 100 samples of packet statistics taken every 30 seconds

Configuration

Rack1SW1#sh run int fa0/3
interface FastEthernet0/3
 rmon promiscuous
 rmon collection stats 10003 owner config ! dynamically added command
 rmon collection history 1 owner monitor buckets 100 interval 30

Doc CD Navigation

Use command Reference

rmon

To enable Remote Monitoring (RMON) on an Ethernet interface, use the rmon command in interface configuration mode. To disable RMON on the interface, use the no form of this command.

rmon {native | promiscuous}

Syntax Description

Configuration

Rack1R1#sh run | in snmp|rmon

snmp-server ifindex persist ! to ensure int index does not change after reload

! Note for triggering SNMP traps via RMON, we do not need to enable trap explicitly.

snmp-server host 155.1.146.100 CISCO
rmon event 1 log trap CISCO description “VLAN146 Interface Congested” owner CISCO
rmon event 2 log trap CISCO description “VLAN146 Interface UnCongested” owner CISCO
rmon alarm 1 ifInUcastPkts.1 60 delta rising-threshold 100 1 falling-threshold 50 2 owner CISCO

Verification

Rack1R1#debug snmp packets
SNMP packet debugging is on

*Mar  1 01:58:14.871: %RMON-5-FALLINGTRAP: Falling trap is generated because the value of ifInUcastPkts.1 has fallen below the falling-threshold value 50
*Mar  1 01:58:14.875: SNMP: Queuing packet to 155.1.146.100
*Mar  1 01:58:14.875: SNMP: V1 Trap, ent rmon, addr 155.1.146.1, gentrap 6, spectrap 2
alarmEntry.1.1 = 1
alarmEntry.3.1 = ifInUcastPkts.1
alarmEntry.4.1 = 2
alarmEntry.5.1 = 0
alarmEntry.8.1 = 50
*Mar  1 01:58:15.603: SNMP: Packet sent via UDP to 155.1.146.100
*Mar  1 01:58:15.855: SNMP: Packet sent via UDP to 155.1.146.100

Rack1R6#ping 155.1.146.1 rep 10000

Type escape sequence to abort.
Sending 10000, 100-byte ICMP Echos to 155.1.146.1, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Rack1R1#
*Mar  1 01:59:15.047: %RMON-5-RISINGTRAP: Rising trap is generated because the value of ifInUcastPkts.1 exceeded the rising-threshold value 100
*Mar  1 01:59:15.051: SNMP: Queuing packet to 155.1.146.100
*Mar  1 01:59:15.051: SNMP: V1 Trap, ent rmon, addr 155.1.146.1, gentrap 6, spectrap 1
alarmEntry.1.1 = 1
alarmEntry.3.1 = ifInUcastPkts.1
alarmEntry.4.1 = 2
alarmEntry.5.1 = 3226
alarmEntry.7.1 = 100
*Mar  1 01:59:15.303: SNMP: Packet sent via UDP to 155.1.146.100

DOC CD Navigation

• Cisco IOS Network Management Configuration Guide, Release 12.4
• Configuring RMON Support

• RMON Configuration Examples

• Alarm and Event Example