This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Netflow with NO ROUTERS

ctennyson99 over 11 years ago

Hello,

I just joined a new company that has 7 remote MPLS sites that are all connected via Cisco 3750 Layer 3 switches and no routers in place.

Can I still use NETFLOW in this configuration and if so how ?

Thanks

Colin

0 zkahl over 11 years ago

Colin,
I think flexible netflow is currently only supported on the 3750-X line.
The configuration is explained here. http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_1_se/configuration/guide/swmnetflow.html
I
Zak Kahl
Loop1 Systems
http://www.loop1systems.com
Cancel
Vote Up 0 Vote Down

Cancel
0 rharland2012 over 11 years ago

3750s do not support Netflow, unfortunately.
Cancel
Vote Up 0 Vote Down

Cancel
0 ctennyson99 over 11 years ago

Does this mean I have no method of monitoring network traffic with NetFlow ?
Cancel
Vote Up 0 Vote Down

Cancel
0 rharland2012 over 11 years ago in reply to ctennyson99

Not with your own devices, no. There may be some third-party thing out there, but nothing built into the switch.
We leverage our provider's MPLS routers to pull Netflow - it's convenient.
Check with your provider. Find out what device sits in the middle of your MPLS network (if all the MPLS pipes are handed out by the same provider, that is).
Cancel
Vote Up 0 Vote Down

Cancel
0 jeff.stewart over 11 years ago in reply to ctennyson99

If your device is not NetFlow capable you can always leverage our NTA collector and nProbe. Check out this post; Orion NTA and nProbe: Analyzing bandwidth hogs without flow-capable network equipment
Jeff
Cancel
Vote Up 0 Vote Down

Cancel
0 darragh.delaney over 11 years ago

Hi There,
As Jeff mentions above you can use a SPAN port. The 3750 allows for the setup of two monitoring sessions and each session can be used to monitor a range of ports or VLANs. You can get more info at the following link which also has a link to a free tool which we developed which can be used to setup SPAN ports.
SwitchReference/CiscoSystems - The Wireshark Wiki
Once you have your SPAN port enabled you can use nProbe to convert the packet data to flow records or use third party products which can integrate with Orion and do deep packet inspection on the packet data. This approach provides more detailed information which can be useful for troubleshooting. A sample of this can be seen at this link
Darragh
Cancel
Vote Up 0 Vote Down

Cancel