This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Layer 2 Traffic Data via NetFlow on a Cisco 4500 - ip flow ingress layer2-switched

Josh_Stephens over 16 years ago

Folks,
I'm working on a Cisco Catalyst 4506 and I'm trying to get layer 2 level traffic detail (switched traffic vs. routed traffic) via NetFlow. I have been able to get this working utilizing the command "ip flow ingress layer2-switched". However, the NetFlow records don't include the source and destination ports for the traffic. Instead, it's all being allocated to/from the "EOBC" interface which is a virtual representation of the switch's bus fabric.

Anyone out there have experience with this? Do you know if there is a way to get the switch to include the source and destination port information? Anyone know if this behaviour is consistent on the 6500 series switches?

Thanks in adance...
Josh

0 mstevens over 16 years ago

Josh, Im working on the same thing w/ our 4500 and 6500s.

Ill send you details too when I get back in..Just coming back from Dubai and Mumbai and am in DC this week working with the Navy.

We got our load balancing working with the cisco ACE module this weekend with Peoplesoft. Not sure if we could have done it without Contract support :)

cya
Mark Stevens
Communications Manager
Oceaneering
Cancel
Vote Up 0 Vote Down

Cancel
0 jonchill over 16 years ago

Josh
Just been configuring our 6509's and its the same behaviour on them no port information for layer 2 traffic.

Jon
Cancel
Vote Up 0 Vote Down

Cancel
0 Isaac over 16 years ago in reply to jonchill

Hello all,

We are in the same boat. Layer 3 on the 4500 and 6500 series works great. We are unable to get interface/port info for layer 2 traffic from either class of chassis.
This is one of many issues we have run into with SolarWinds Netflow application.
Cancel
Vote Up 0 Vote Down

Cancel
0 jonchill over 16 years ago in reply to Isaac

As far as I'm aware its not necessarily a Solarwinds Netflow problem but the way Netflow works, I'm currently using Scrutinizer and see no Layer two traffic even though I've put the commands in for Layer two for all our VLAN's.

I'm waiting for a response from a Netflow Guru to see where I'm going wrong and I'll let you know if I find anything of use.

Jon
Cancel
Vote Up 0 Vote Down

Cancel
0 jonchill over 16 years ago in reply to jonchill

Try these commands, I'm now seeing Layer 2 in Scrutinizer.
mls nde sender version 7
mls nde sender
mls nde interface
Jon
Cancel
Vote Up 0 Vote Down

Cancel
0 srossen over 15 years ago in reply to jonchill

Anyone get layer2 on either a 4500 or 6500 working?
Cancel
Vote Up 0 Vote Down

Cancel
0 norgren over 14 years ago

Did you ever get an answer? I'm having the same issue.

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Lash_Briggs over 14 years ago in reply to norgren

Same issue here - let us know if you get it working. Cheers...
Cancel
Vote Up 0 Vote Down

Cancel
0 Donald_Francis over 14 years ago in reply to Lash_Briggs

I actually thought this is one of the things Flexible netflow solved?
Cancel
Vote Up 0 Vote Down

Cancel
0 netopsatameritox over 13 years ago in reply to Donald_Francis

Any word on this?
We are looking at maybe upgrading our supervisor engine on our 4507 and I would love to know if this is possible.
Cancel
Vote Up 0 Vote Down

Cancel