6 Replies Latest reply on Apr 3, 2014 10:45 AM by michael.fusco

    NetFlow Export Issues on Cisco WS-C3560X-48P with C3KX-NM-1G

    michael.fusco

      Hello All,

       

      Just looking for a confirmation if a Cisco WS-C3560X-48P (Cisco C3560X) with a C3KX-NM-1G (FRULink 1G Module) will export Flexible NetFlow or NetFlow records?

      Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 15.0(2)SE4, RELEASE SOFTWARE (fc1)

       

      Here is the Running Config:

      I did both methods neither show traffic?

      ip flow-egress input-interface

      ip flow-cache timeout active 15

      ip flow-export source GigabitEthernet0/48

      ip flow-export version 9

      ip flow-export destination 10.x.x.x 2055

      #show ip flow interface

      Vlan254

        ip flow ingress

        ip flow egress

      GigabitEthernet0/48

        ip flow ingress

        ip flow egress

      GigabitEthernet1/1

        ip flow ingress

        ip flow egress

      #show ip flow export

      Flow export v9 is enabled for main cache

        Export source and destination details :

        VRF ID : Default

          Source(1)       10.180.175.1 (GigabitEthernet0/48)

          Destination(1)  10.15.254.22 (2055)

        Version 9 flow records

        0 flows exported in 0 udp datagrams

        0 flows failed due to lack of export packet

        0 export packets were sent up to process level

       

       

      NOTE: I an unable to assign the Monitor to any phy or vlan interfaces:

      (config-if)#ip flow monitor NetFlowMonitor input

      % Flow Monitor: 'NetFlowMonitor' could not be added.

       

      Per: SolarWinds Knowledge Base :: Required flow template fields

      flow record SolarWinds

      description Solarwinds Flow Template

      match ipv4 protocol

      match ipv4 source address

      match ipv4 destination address

      match transport source-port

      match transport destination-port

      match interface input physical snmp

      match interface output physical snmp

      collect counter bytes

      collect counter packets

       

      flow exporter NTA

      destination 10.x.x.x

      source GigabitEthernet0/48

      transport udp 2055

      export-protocol netflow-v5

      option interface-table

      option exporter-stats

       

      flow monitor NetFlowMonitor

      record SolarWinds

      exporter NTA

       

      #show flow exporter

      Flow Exporter NTA:

        Export protocol:          NetFlow Version 5

        Transport Configuration:

          Destination IP address: 10.x.x.x

          Source IP address:      10.y.y.y

          Source Interface:       GigabitEthernet0/48

          Transport Protocol:     UDP

          Destination Port:       2055

          Source Port:            53509

          DSCP:                   0x0

          TTL:                    255

          Output Features:        Not Used

        Options Configuration:

          interface-table (timeout 600 seconds)

          exporter-stats (timeout 600 seconds)

       

      #show flow monitor

      Flow Monitor NetFlowMonitor:

        Description:       User defined

        Flow Record:       SolarWinds

        Flow Exporter:     NTA (inactive)

        Cache:

          Type:              normal

          Status:            not allocated

          Size:              128 entries / 0 bytes

        Cache:

          Type:              normal (Platform cache)

          Status:            not allocated

          Size:              Unknown

        Timers:

                             Local        Global

          Inactive Timeout:  15 secs

          Active Timeout:    1800 secs    1800 secs

          Update Timeout:    1800 secs

       

      #show flow record

      flow record SolarWinds:

        Description:        Solarwinds Flow Template

        No. of users:       1

        Total field space:  29 bytes

        Fields:

          match ipv4 protocol

          match ipv4 source address

          match ipv4 destination address

          match transport source-port

          match transport destination-port

          match interface input physical snmp

          match interface output physical snmp

          collect counter bytes

          collect counter packets