14-7
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 14 Configuring MLS
Understanding How Layer 3 Switching Works
Flow Mask Modes—Software Release 8.5(1) and Later Releases
With software release 8.5(1) and later releases, the multiple flow mask feature is supported on
Supervisor Engine 720. This feature results in some changes to the NetFlow Data Export (NDE)
functionality.
A new value for the flow mask is null. Enter the set mls flow null command to set the flow mask to null
(null is the new default flow mask). When the flow mask is set to null and no feature is driving a more
specific flow mask, all the flows will match to the same null flow. The counters for the null flow are
incremented each time a flow hits the null flow. When the flow masks are null and no other feature is
driving a flow mask, when you enter the show mls statistics entry command, the command output
displays the null flow as follows (in the example, flows are not being exported because NDE is disabled):
Console> (enable) show mls statistics entry
Flowmask set to Null. Please set the flowmask to see the flows
Last Used
Destination IP Source IP Prot DstPrt SrcPrt Vlan Stat-Pkts Stat-Bytes
---------------- --------------- ----- ------ ------ ----- --------- -----------
- - - - - N/A 728915 33530090
Console> (enable)
To enable flow creation, specify the flow mask by entering the set mls flow {destination |
destination-source | null | full} command and specify a keyword other than the null keyword. If NDE
is enabled when the null flow mask is configured, NDE will not export any flows. An example is as
follows:
Console> (enable) set mls nde enable
Netflow export enabled
Console> (enable) 2005 Sep 18 18:04:43 %MLS-5-FLOWMASK_NULL:IP Flowmask set to Null:Flows
will not be exported
Conversely, if NDE is enabled and you set the flow mask to null, the following message displays:
Console> (enable) set mls flow null
2000 Sep 18 18:04:02 %MLS-5-FLOWMASK_NULL:IP Flowmask set to Null:Flows will not be
exported
Console> (enable)
When you upgrade from software release 8.4(x) to software release 8.5(1) and later releases, note the
following:
• In binary configuration mode:
–
In software release 8.4(x), if you set the flow mask to “xxx” by entering the set mls flow xxx
command (where xxx is any of the keyword options), after the upgrade, the flow mask is still
xxx.
–
In software release 8.4(x), if you did not set the flow mask, after the upgrade, the flowmask
would be destination.
• In text configuration mode:
–
In software release 8.4(x), if you set the flow mask to destination (the default) by entering the
set mls flow destination command, after the upgrade, the flow mask would be null (the new
default).
–
In software release 8.4(x), if you did not set the flow mask, after the upgrade, the flow mask
would be null.
–
In software release 8.4(x), if you set the flow mask to any keyword option other than
destination, after the upgrade, the flow mask would be the same flow mask that you configured.