352-001 · Question #567
A customer requests that you determine how much of their remote branch traffic into a central data center is related to a call manager that resides in the data center. Which solution do you recommend?
The correct answer is B. Enable netFlow on central data center routers. NetFlow on the central data center routers captures ingress and egress flow records for all traffic entering the DC, enabling precise per-application traffic analysis by filtering on the call manager's IP address.
Question
A customer requests that you determine how much of their remote branch traffic into a central data center is related to a call manager that resides in the data center. Which solution do you recommend?
Options
- AEnable NetFLow on branch routers
- BEnable netFlow on central data center routers
- CPerform SNMP polling of central data center routers
- DPerform SNMP polling of branch routers
- ECreate an ACL on the local call manager switch with logging enabled
- FSpan traffic from the switch port on the call manager to a data analyzer
How the community answered
(34 responses)- A3% (1)
- B85% (29)
- C9% (3)
- F3% (1)
Why each option
NetFlow on the central data center routers captures ingress and egress flow records for all traffic entering the DC, enabling precise per-application traffic analysis by filtering on the call manager's IP address.
NetFlow on branch routers would capture outbound branch traffic but would require aggregating data from every branch and cannot easily isolate call-manager-destined flows as efficiently as a single central collection point.
Enabling NetFlow on the central data center routers collects detailed flow records - including source/destination IP, protocol, and port - for all traffic entering the DC from branch sites. By filtering flows destined for the call manager's IP address and port, you can calculate exactly what percentage of branch traffic is call-manager related. This provides granular, application-level visibility without requiring changes at the branch.
SNMP polling provides interface-level byte and packet counters only; it cannot distinguish call-manager traffic from other application flows.
SNMP polling of branch routers shares the same limitation as option C - no per-application or per-flow granularity.
An ACL with logging on the call manager switch generates syslog entries per connection but does not provide byte-level traffic volume statistics needed to measure bandwidth consumption.
SPAN mirroring to a data analyzer requires dedicated hardware/software at the DC and captures all traffic, making it operationally heavier than NetFlow for this specific measurement task.
Concept tested: NetFlow for application-level traffic analysis
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/xe-3s/ne-flow-xe-3s-book/cfg-nflow-data-expt.html
Topics
Community Discussion
No community discussion yet for this question.