topic Re: 9800 Controller netflow exporter in Wireless

9800 Controller netflow exporter

laerciotobias — Mon, 08 Aug 2022 19:04:40 GMT

Hi we have an 9800 Controller and we are using SDA Wireless, we have setup our DNA center server as our netflow exporter.

I would like to know if we can export our flows to more than one flow export server in the same SSID.

Example: SSID Corp - Export flow to session to DNA Center and also to stealthwatch.

I was not abble to find any documentation and when i setup one exporter in the policy it overwrite the old one. (So, i am assuming only one fnf exporter server is supported)

Thanks.

Re: 9800 Controller netflow exporter

Rasika Nayanajith — Mon, 08 Aug 2022 20:49:09 GMT

I think so.

Here is the 17.9.1 config guide & it listed Local/Flex & Fabric design Netflow/AVC. Compare to Local/Flex mode, it has listed a few limitations in Fabric (SDA-Wireless). Pls check them out.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/config-guide/b_wl_17_9_cg.pdf

Local Mode
• NBAR is enabled on the controller .
• AVC does not push the FNF configuration to the APs.
• Roaming events are ignored.
However, AVC supports L3 roams in local mode as traffic flows through the anchor controller (where
NBAR was initially processing the roaming client's traffic when the client joined).
• IOSd needs to trigger NBAR attach.
• Supports flow monitor cache.
• Supports NetFlow exporter.

Flex Mode
• NBAR is enabled on an AP
• AVC pushes the FNF configuration to the APs.
• Supports context transfer for roaming in AVC-FNF.
• Supports flow monitor cache.
• Supports NetFlow exporter.

Fabric Mode
• NBAR is enabled on an AP.
• AVC pushes the FNF configuration to the APs.
• Supports context transfer for roaming in AVC-FNF.
• Flow monitor cache is not supported.
• Provides only limited support for NetFlow exporter.

HTH
Rasika
*** Pls rate all useful responses ***

Re: 9800 Controller netflow exporter

laerciotobias — Wed, 10 Aug 2022 19:04:49 GMT

Thanks Rasika 🙂

I think Documentation should be more clear about this limitation 😞

I have not found any documentation about information and "Provides only limited support for NetFlow exporter.", is to generic, i think.