2 Replies Latest reply on Feb 3, 2015 2:00 PM by lostngone

    Vlan Netflow data from Cisco 4500R+E with 7L-E sup

    lostngone

      Help!

      I am working with a Cisco 4500R+E with 7L-E supervisors running IOS 03.07.00.E.152-3.E. with the IP Base license. Also I am running NTA 3.11.


      I did get FNF working on the switch and I am seeing some flow data populate Orion. I am seeing flow data from the routed port that is the up-link to the rest of the network but no data for any routed vlan to vlan traffic within the switch.

      Here is what I have in my config in reference to the flow config.

      --------------------------

      flow record r1

      match ipv4 protocol

      match ipv4 source address

      match ipv4 destination address

      match transport source-port

      match transport destination-port

      match interface input

      collect routing forwarding-status

      collect transport tcp flags

      collect interface output

      collect counter bytes long

      collect counter packets long

      collect timestamp sys-uptime first

      collect timestamp sys-uptime last

      --------------       

      flow exporter e1

      destination 192.168.99.4

      source GigabitEthernet5/48

      transport udp 2055

      template data timeout 60

      -------------       

      flow monitor m1

      exporter e1

      cache timeout inactive 30

      cache timeout active 60

      cache entries 1000

      record r1

      -------------

      vlan configuration 5,30-31,77

      ip flow monitor m1 input

      -------------

      interface GigabitEthernet5/48

      no switchport

      ip flow monitor m1 input

      ip address 192.168.254.10 255.255.255.252

      speed 1000

      duplex full

      --------------------------

       

      When I do a show flow interface on the routed port I see the FNF monitor information but when I do the same for the vlans I see nothing listed. However I do have "ip flow monitor m1 input" under "vlan configuration 5,30-31,77". It will not let me attach the ip flow statement under the vlan SVIs.

       

      sw1#show flow interface GigabitEthernet 5/48

      Interface GigabitEthernet5/48

        FNF:  monitor:          m1

              direction:        Input

              traffic(ip):      on

       

      -------------

      sw1#show flow interface vlan 5

      sw1#

       

       

      Any ideas?

      I am sorry if this a stupid problem but I have very little experience with Flexible Netflow or the 4500.