6 Replies Latest reply on Nov 5, 2014 7:41 AM by rfletcher

    using real-time netflow analyzer with Nexus 7K

    Michael van Kleij

      Hi All,

       

      I read somewhere that the Nexus devices are supported in the real-time netflow analyzer. However, I can't get it to work. When using wireshark I can see the netflow packets being delivered on the correct host, but the netflow analyzer doesn't let me select any interfaces. It just says "NetFlow is not detected on the selected interface".

       

      I'm using a Nexus 7000 as switch. I've configured it to send netflow data from one interface (as test) and it sends it via the vlan interface on which the netflow collector is also attached.

       

      Does anybody know what I'm doing wrong?

       

      Thanks in advance.

        • Re: using real-time netflow analyzer with Nexus 7K
          Michael van Kleij

          Nobody who can help me in this?

          • Re: using real-time netflow analyzer with Nexus 7K
            MagicChunk

            Try posting your configure for review.

            eg

            show run netflow

              • Re: using real-time netflow analyzer with Nexus 7K
                rfletcher

                sorry for the necro bump but i'm having a similar issue below is a copy of my config:

                 

                flow timeout 0

                flow timeout active 64

                flow timeout inactive 32

                flow exporter Netflow-Exporter-1

                  destination <Orion Server IP with Realtime Netflow>

                  transport udp 2055

                  source Ethernet3/6

                  version 5

                flow record OrionNetFlow

                  match ipv4 source address

                  match ipv4 destination address

                  match ip protocol

                  match ip tos

                  match transport source-port

                  match transport destination-port

                  collect counter bytes

                  collect counter packets

                flow monitor NetFlow-Monitor

                  description Netflow Monitor to interface

                  record OrionNetFlow

                  exporter Netflow-Exporter-1

                  • Re: using real-time netflow analyzer with Nexus 7K
                    MagicChunk

                    Here's a copy of my config, I can't see your interfaces listed, check your show run netflow output again.

                     

                    flow timeout active 60
                    flow exporter Solarwinds-Exporter
                      destination xx.xx.xx.xx
                      transport udp 2055
                      source loopback0
                      version 9
                    flow record Solarwinds
                      description Solarwinds-Flow-Record
                      match ipv4 source address
                      match ipv4 destination address
                      match ip protocol
                      collect counter bytes long
                      collect flow sampler id
                    sampler Solarwinds-Sample100
                      mode 1 out-of 100
                    flow monitor Solarwinds-Monitor
                      description Solarwinds-Exporter-Record
                      record netflow ipv4 original-input
                      exporter Solarwinds-Exporter


                    interface Ethernet4/27
                      ip flow monitor Solarwinds-Monitor input sampler Solarwinds-Sample100
                      ip flow monitor Solarwinds-Monitor output sampler Solarwinds-Sample100

                    interface Ethernet7/26
                      ip flow monitor Solarwinds-Monitor input sampler Solarwinds-Sample100
                      ip flow monitor Solarwinds-Monitor output sampler Solarwinds-Sample100

                     

                    Hope this helps

                      • Re: using real-time netflow analyzer with Nexus 7K
                        rfletcher

                        Thanks MagicChunk I'm just trying to look at one interface in paticular below you'll find the code for that interface. Only difference i'm seeing is the sampler. Is the sampler really necessary? It wasn't on the cisco or solarwinds documentation that i read.

                         

                        interface Ethernet3/6

                          speed 1000

                          duplex full

                          flowcontrol receive on

                          flowcontrol send desired

                          ip flow monitor NetFlow-Monitor input

                          ip flow monitor NetFlow-Monitor output

                          no shutdown