Chapter 14
Configuring MLS
Flow Mask Modes—Software Release 8.5(1) and Later Releases
With software release 8.5(1) and later releases, the multiple flow mask feature is supported on
Supervisor Engine 720. This feature results in some changes to the NetFlow Data Export (NDE)
functionality.
A new value for the flow mask is null. Enter the set mls flow null command to set the flow mask to null
(null is the new default flow mask). When the flow mask is set to null and no feature is driving a more
specific flow mask, all the flows will match to the same null flow. The counters for the null flow are
incremented each time a flow hits the null flow. When the flow masks are null and no other feature is
driving a flow mask, when you enter the show mls statistics entry command, the command output
displays the null flow as follows (in the example, flows are not being exported because NDE is disabled):
Console> (enable) show mls statistics entry
Flowmask set to Null. Please set the flowmask to see the flows
Destination IP
---------------- --------------- ----- ------ ------ ----- ---------
-
Console> (enable)
To enable flow creation, specify the flow mask by entering the set mls flow {destination |
destination-source | null | full} command and specify a keyword other than the null keyword. If NDE
is enabled when the null flow mask is configured, NDE will not export any flows. An example is as
follows:
Console> (enable) set mls nde enable
Netflow export enabled
Console> (enable) 2005 Sep 18 18:04:43 %MLS-5-FLOWMASK_NULL:IP Flowmask set to Null:Flows
will not be exported
Conversely, if NDE is enabled and you set the flow mask to null, the following message displays:
Console> (enable) set mls flow null
2000 Sep 18 18:04:02 %MLS-5-FLOWMASK_NULL:IP Flowmask set to Null:Flows will not be
exported
Console> (enable)
When you upgrade from software release 8.4(x) to software release 8.5(1) and later releases, note the
following:
•
•
OL-8978-04
Source IP
-
In binary configuration mode:
In software release 8.4(x), if you set the flow mask to "xxx" by entering the set mls flow xxx
–
command (where xxx is any of the keyword options), after the upgrade, the flow mask is still
xxx.
–
In software release 8.4(x), if you did not set the flow mask, after the upgrade, the flowmask
would be destination.
In text configuration mode:
–
In software release 8.4(x), if you set the flow mask to destination (the default) by entering the
set mls flow destination command, after the upgrade, the flow mask would be null (the new
default).
In software release 8.4(x), if you did not set the flow mask, after the upgrade, the flow mask
–
would be null.
In software release 8.4(x), if you set the flow mask to any keyword option other than
–
destination, after the upgrade, the flow mask would be the same flow mask that you configured.
Last
Used
Prot
DstPrt SrcPrt Vlan
-
-
-
N/A
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Understanding How Layer 3 Switching Works
Stat-Pkts
Stat-Bytes
-----------
728915
33530090
14-7