topic Re: show flow exporter on Cisco ACI API in Application Centric Infrastructure

show flow exporter on Cisco ACI API

zo3 — Mon, 08 Jul 2024 18:52:01 GMT

Is there anything equivalent to the `show flow exporter` command to show the source IP address for Netflow records sent by the switch via the Cisco ACI API?

Re: show flow exporter on Cisco ACI API

Remi-Astruc — Mon, 08 Jul 2024 19:57:06 GMT

Hi @zo3 ,

moquery -c netflowExporterPol | grep srcAddr

The Host part of the subneted IP is replaced by the Switch Node ID (e.g. if 10.1.0.0/20, Node ID 125 will use 10.1.0.125).

Regards

Re: show flow exporter on Cisco ACI API

zo3 — Mon, 08 Jul 2024 20:33:15 GMT

Hi @Remi-Astruc - thank you so much for the response! In this case, are node IDs are unique across pods? I want to be able to associate the subneted IP to the specific node every time! For the example you gave, if the subneted IP is 10.1.0.0/20 - I would like to know that the policy is including Node ID 125. There's some point in configuring the Netflow policy where it asks which leaf nodes should be associated, but it doesn't seem like that appears in the response for `netflowExporterPol`

edit:

https://www.youtube.com/watch?v=6Yl_GelaS7g

this is the video I'm referencing when I was setting up my netflow configuration - it seems I'd need to query for the `netflowExporterPol` and then whatever the MO is for the leaf switch profile (if that gives the switch associations?)

Re: show flow exporter on Cisco ACI API

Remi-Astruc — Tue, 09 Jul 2024 05:47:54 GMT

The Node ID per switch is unique across a whole Single-/Multi-Pod Fabric and permanent, so when you know the Netflow source subnet, you know the Netflow source IP is unique per switch and permanent (assuming it is configured for Netflow, as explained in the first section of your video).

Regards

Re: show flow exporter on Cisco ACI API

zo3 — Tue, 09 Jul 2024 22:01:49 GMT

@Remi-Astruc Thank you! I just want to confirm also as I rewatch the video and am getting a bit confused - when a block of nodes is selected (i.e. nodes 101-102) in the fabric policies that only enables Netflow for those nodes?

When I follow the video further and refer to this document - https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Cisco_APIC_and_NetFlow.html#id_42875 which outlines creating the exporter policy, records, profiles, etc. I'm trying to see when the associated leaf nodes are determined to be given an exporter IP address from the subnet but it seems like if Netflow is enabled then it should be assigned as such? I'm not sure if that makes sense - I just want to gather a list of all the possible exporter IP addresses by knowing what nodes/leafs are selected when I watch the video

Re: show flow exporter on Cisco ACI API

Remi-Astruc — Wed, 10 Jul 2024 19:59:56 GMT

If a given Leaf is part of a switch profile set with Netflow priority, then any Netflow export sourced from that Leaf will use the IP "subnet set in that export policy + Leaf node ID". That's all.

You will not find that explicit IP in some config object.

Regards