Hi folks
Using flexible network, I'm trying to collect netflow data for vrf traffic on routers that are part of a layer-3 MPLS network. This is on Cisco ASR1001-x routers with advanced IP services.
See attached diagram. I am trying to collect netflow data 'A' within the VPNv4 MPLS core & 'B' at the edge. When I enable flexible netflow (input or output) at A, the only netflow traffic I capture is for underlying Layer-3 IBGP & IGP. When I enable flexible netflow at B, I see inter-site netflow traffic for vrf #A & vrf B hosts. What do I need to do to be able to capture this data within the MPLS core?
Sample config SITE 1
flow record FNFRecord
match ipv4 tos
match ipv4 dscp
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect interface output
collect timestamp absolute first
collect timestamp absolute last
!
flow monitor FNFMonitor
record FNFRecord
!
interface GigabitEthernet0/0/1.*
description -> Site 2
encapsulation dot1Q *
ip address *
ip flow monitor FNFMonitor input
mpls ip
!
interface GigabitEthernet0/0/2.*
description -> Site 3
encapsulation dot1Q *
ip address *
ip flow monitor FNFMonitor input
mpls ip
!
interface GigabitEthernet0/0/3.*
description -> LAN VRF 'A'
encapsulation dot1Q *
ip vrf forwarding A
ip address *
ip flow monitor FNFMonitor input
!
interface GigabitEthernet0/0/3.*
description -> LAN VRF 'B'
encapsulation dot1Q *
ip vrf forwarding B
ip address *
ip flow monitor FNFMonitor input
!
Thanks in advance.