WLC & Netflow: No interfaces under NTA?

hi k_bolt, 

good day!

I think this is better work with your device vendor and so with SW support. I strongly recommend creating a ticket to SW support for them to further check if SW NTA is really receiving a netflow data from your device. 

be prepare for a packet capture for easy identification. 

here couple of points. 

1. cisco 5520 is not supported

https://documentation.solarwinds.com/en/success_center/nta/content/nta-nta-flow-requirements-sw145.htm

2. possible configuration issue, (incase that cisco 5520 do support netflow -- better check with device vendor)

netflow config compose of 3 parts, record, exporter and monitor. you might be sending netflow data (exporter and record) to SW NTA. but you haven't applied monitor to the specific interface or vice versa. 

hi k_bolt, 

good day!

I think this is better work with your device vendor and so with SW support. I strongly recommend creating a ticket to SW support for them to further check if SW NTA is really receiving a netflow data from your device. 

be prepare for a packet capture for easy identification. 

here couple of points. 

1. cisco 5520 is not supported

https://documentation.solarwinds.com/en/success_center/nta/content/nta-nta-flow-requirements-sw145.htm

2. possible configuration issue, (incase that cisco 5520 do support netflow -- better check with device vendor)

netflow config compose of 3 parts, record, exporter and monitor. you might be sending netflow data (exporter and record) to SW NTA. but you haven't applied monitor to the specific interface or vice versa. 

for the bandwidth utilization, that's SNMP data(NPM),  You might want to check the SNMP being received from the device.  My experience with this one is the SNMP data being send is always the same, since it's a computation, it always shows as 0%. You can use the SNMPwalk to counter check and verify the OIDs.

https://support.solarwinds.com/SuccessCenter/s/article/Troubleshoot-connectivity-and-MIB-issues-with-SolarWinds-SNMP-walk-IPv4-only?language=en_US

support.solarwinds.com/.../What-object-IDs-OIDs-does-NPM-poll-for-interface-information

Hello verwin, thank you for your feedback. That first link actually says that the WLC 5520 is supported. And as far as SolarWinds' UI seems to say, the Netflow is arriving, as seen in screenshot. I'll further confirm that UDP/2055 is getting to SW's server but I think that's a foregone conclusion. 

Re: point #2, I followed Cisco's and SW's configuration steps (Cisco Wireless Controller Netflow config sample (solarwinds.com)) while this link says 5520s should work as expected: NBAR2 and Flexible Netflow for Cisco WLC 5508 (solarwinds.com). 

Thank you Don. My issue isn't with the bandwidth utilization really. It's the fact that under NTA, the WLC is being shown as receiving Netflow traffic but the graphs don't show any data. Additionally, the WLC's interfaces are discovered under NPM (so i believe SNMP is working) BUT they aren't showing up under NTA. See the first screenshot where the Interfaces column says 0.

Hi Bolt,

In the article say, device supports ipv4 flow record but sw does not support flow sampling on such devices. Its a bit confusing as flow data by default is 1:100 flow rate. (Sw will be receiving 100% of data from your device. Sw will not be able to parse it -- it will show a long flow error) 

Anyway, i hope you,ve raise this to sw support for further clarification. This is also for them to check why netflow data does not display even the device is sending flows to your sw server.

Share the result of your ticket ;-)