2 Replies Latest reply on Feb 3, 2015 2:00 PM by lostngone

    Vlan Netflow data from Cisco 4500R+E with 7L-E sup



      I am working with a Cisco 4500R+E with 7L-E supervisors running IOS 03.07.00.E.152-3.E. with the IP Base license. Also I am running NTA 3.11.

      I did get FNF working on the switch and I am seeing some flow data populate Orion. I am seeing flow data from the routed port that is the up-link to the rest of the network but no data for any routed vlan to vlan traffic within the switch.

      Here is what I have in my config in reference to the flow config.


      flow record r1

      match ipv4 protocol

      match ipv4 source address

      match ipv4 destination address

      match transport source-port

      match transport destination-port

      match interface input

      collect routing forwarding-status

      collect transport tcp flags

      collect interface output

      collect counter bytes long

      collect counter packets long

      collect timestamp sys-uptime first

      collect timestamp sys-uptime last


      flow exporter e1


      source GigabitEthernet5/48

      transport udp 2055

      template data timeout 60


      flow monitor m1

      exporter e1

      cache timeout inactive 30

      cache timeout active 60

      cache entries 1000

      record r1


      vlan configuration 5,30-31,77

      ip flow monitor m1 input


      interface GigabitEthernet5/48

      no switchport

      ip flow monitor m1 input

      ip address

      speed 1000

      duplex full



      When I do a show flow interface on the routed port I see the FNF monitor information but when I do the same for the vlans I see nothing listed. However I do have "ip flow monitor m1 input" under "vlan configuration 5,30-31,77". It will not let me attach the ip flow statement under the vlan SVIs.


      sw1#show flow interface GigabitEthernet 5/48

      Interface GigabitEthernet5/48

        FNF:  monitor:          m1

              direction:        Input

              traffic(ip):      on



      sw1#show flow interface vlan 5




      Any ideas?

      I am sorry if this a stupid problem but I have very little experience with Flexible Netflow or the 4500.