Cisco Nexus N9K-C93180YC-FX3 Layer 2 NetFlow not working

I don't know if this will work or not. I've worked with Cisco to enable Layer 2 NetFlow on physical interfaces on the Cisco Nexus switch. The switch is sending the data to SolarWinds NTA, but NTA says the data does not match its template. The specific error message NTA shows is:

The NetFlow Receiver Service [SOWAPP] received NetFlow V9 flows without any template for decoding them. Configure the device device_ip_address to export an appropriate NetFlow V9 template at 1-minute intervals. See help for details.

I adjusted my 'flow exporter' command to send the data at the requested 60 second interval, but NTA still shows it as misconfigured:

flow exporter SolarWinds-EXPORTER
destination destination_ip_address use-vrf management
transport udp 2055
source mgmt0
version 9
template data timeout 60

(I've replaced the actual IPs with generic stuff in italics, just to be clear.)

I don't have this problem with other Nexus gear that is using Layer 3, but for this particular switch I have to use Layer 2. I see some very old posts here that suggest NTA can't process NetFlow Layer 2 data from Nexus, but nothing recent.

Any ideas, or am I just out of luck for Layer 2?

Find more posts tagged with

Accepted answers

stibi

Hi @ttripp1 ,

If we are talking about Layer 2, where flows are exporting MAC addresses, then I am afraid that NTA does not support such traffic.

https://solarwindscore.my.site.com/SuccessCenter/s/article/Layer-2-NetFlow?language=en_US

All comments

verwin_u

Hi @ttripp1

This is more od flow record issue. Please refer to cisco cpnfig below.

https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/102x/configuration/system-management/cisco-nexus-9000-series-nx-os-system-management-configuration-guide-102x/m-configuring-netflow-10x.html

If problem persist.i highly recomment to work with SW GEEKS to verify what is the problem via packet capture.

stibi

Hi @ttripp1 ,

If we are talking about Layer 2, where flows are exporting MAC addresses, then I am afraid that NTA does not support such traffic.

https://solarwindscore.my.site.com/SuccessCenter/s/article/Layer-2-NetFlow?language=en_US

ttripp1

Yep, I finally just opened a ticket with SolarWinds support, and they confirmed that. Going to remove those configs from my Nexus switches tonight, as it just happens.

Deltona

I may be mistaken by memory, but you should be able to get it to work, if you enabled and configured sflow instead.