Content

| 9.3 |  | Network Analysis Modules and Switch Fabric Modules |
| 9.3.2 |  | The network analysis module |

Network managers rely on a variety of tools for efficient network management and monitoring. Historically, local-area network (LAN) switches have improved network performance, but have prevented network administrators from monitoring switched traffic. This is because remote monitoring (RMON) works best on shared networks, where it can see all traffic.

LAN switches demand greater monitoring control because they filter traffic so that it does not show on a port unless that traffic is either destined for, or has originated from, a device connected to that port. The need for "increased visibility" into network activity for different network segments has made it difficult for administrators to tune network performance and has impeded troubleshooting in switched networks.

The NAM is a LAN monitoring solution that should be deployed at LAN aggregation points where it can have visibility of critical traffic and virtual LAN’s (VLAN’s).

The Cisco Catalyst 6500 Series switches already have built-in RMON features with data collection in the statistics, history, alarm, and event groups. Additional RMON and RMON2 features require the use of network monitoring instrumentation.

The NAM provides remote monitoring functions that are based on RMON and RMON2 Management Information Bases (MIBs). The NAM collects data at all layers so network managers can obtain a broad spectrum of analyses. Its uses range from fault isolation and troubleshooting, to capacity planning and management, performance management, application monitoring, and debugging.

The NAM occupies one full slot in any Cisco Catalyst 6500 Series chassis.

The NAM can collect statistics from both data and voice streams, simplifying overall management. It uses switched port analyzer (SPAN) or remote SPAN (RSPAN) to accept data from physical ports, virtual LANs (VLANs), EtherChannel, and NetFlow data export frames. It simultaneously monitors multiple switch ports or VLANs and provides separate RMON/RMON2 statistics for each data source.