This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

WLC & Netflow: No interfaces under NTA?

Hello all. We're running 2023.1.0 and I've recently pointed all my Netflow from a 5520 to NTA. I can confirm the flows are getting to NTA however the WLC interfaces discovered under NPM are not showing up in NTA. I'm also not seeing any data at the WLC Node level - AVC is enabled on each WLAN and the monitor was applied. I'm hoping someone might hep me understand what I could be missing here. I would greatly appreciate it.

NTA:

NPM:

No data: 

Parents
  • hi k_bolt, 

    good day!

    I think this is better work with your device vendor and so with SW support. I strongly recommend creating a ticket to SW support for them to further check if SW NTA is really receiving a netflow data from your device. 

    be prepare for a packet capture for easy identification. 

    here couple of points. 

    1. cisco 5520 is not supported

    https://documentation.solarwinds.com/en/success_center/nta/content/nta-nta-flow-requirements-sw145.htm

    2. possible configuration issue, (incase that cisco 5520 do support netflow -- better check with device vendor)

    netflow config compose of 3 parts, record, exporter and monitor. you might be sending netflow data (exporter and record) to SW NTA. but you haven't applied monitor to the specific interface or vice versa. 

  • Hello verwin, thank you for your feedback. That first link actually says that the WLC 5520 is supported. And as far as SolarWinds' UI seems to say, the Netflow is arriving, as seen in screenshot. I'll further confirm that UDP/2055 is getting to SW's server but I think that's a foregone conclusion. 

    Re: point #2, I followed Cisco's and SW's configuration steps (Cisco Wireless Controller Netflow config sample (solarwinds.com)) while this link says 5520s should work as expected: NBAR2 and Flexible Netflow for Cisco WLC 5508 (solarwinds.com)

  • Hi Bolt,

    In the article say, device supports ipv4 flow record but sw does not support flow sampling on such devices. Its a bit confusing as flow data by default is 1:100 flow rate. (Sw will be receiving 100% of data from your device. Sw will not be able to parse it -- it will show a long flow error) 

    Anyway, i hope you,ve raise this to sw support for further clarification. This is also for them to check why netflow data does not display even the device is sending flows to your sw server.

    Share the result of your ticket ;-)

Reply
  • Hi Bolt,

    In the article say, device supports ipv4 flow record but sw does not support flow sampling on such devices. Its a bit confusing as flow data by default is 1:100 flow rate. (Sw will be receiving 100% of data from your device. Sw will not be able to parse it -- it will show a long flow error) 

    Anyway, i hope you,ve raise this to sw support for further clarification. This is also for them to check why netflow data does not display even the device is sending flows to your sw server.

    Share the result of your ticket ;-)

Children
No Data